Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/BTmSI3bKDyEio_o8HAFd3DpA8rw.roa
File: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (raw, json)
Hash identifier: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=
Subject key identifier: 05:39:92:23:76:CA:0F:21:22:A3:FA:3C:1C:01:5D:DC:3A:40:F2:BC
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 0194266C2D1715743F3E37AB96A2953EFF02
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/BTmSI3bKDyEio_o8HAFd3DpA8rw.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42209
IP address blocks: 2a0f:ca00:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2d:17:15:74:3f:3e:37:ab:96:a2:95:3e:ff:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0539922376ca0f2122a3fa3c1c015ddc3a40f2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:44:2b:34:cf:17:2a:ab:d8:e0:c4:bc:dd:
24:61:d9:ac:4c:78:cc:e6:a5:2f:a3:dd:99:e1:fb:
03:75:5d:83:fe:a5:7e:97:cf:87:dc:2e:95:4b:66:
c0:c7:61:de:0d:3d:3c:63:ee:1d:a6:5c:c2:ec:7b:
48:19:97:c9:d5:c4:15:f8:40:59:8f:0f:d8:31:64:
5d:65:9e:c6:fa:d6:8b:43:4f:0d:b7:7d:e0:8e:79:
01:6a:c2:20:30:57:d1:f1:a6:e5:b4:ab:31:27:62:
d2:0e:77:80:c6:ed:53:e5:28:dc:4c:20:fe:c0:9e:
16:ce:bd:4c:2a:3f:72:1e:43:27:3c:13:b2:1b:de:
19:04:96:0a:ea:28:da:20:7f:4d:a5:39:5f:21:56:
14:c5:06:02:b2:50:5e:27:0f:51:84:b1:4d:e3:08:
e9:0e:d1:a7:a1:20:a3:05:49:d8:ea:84:08:30:72:
fa:ff:f6:6f:31:db:fb:fc:70:95:62:58:1f:cf:f2:
35:e8:5b:c0:de:39:3d:59:44:15:51:60:85:69:3f:
cb:85:3b:90:e6:3c:88:8c:2b:cc:e9:98:b3:3c:8a:
13:fa:48:e0:fa:0b:9a:97:57:1c:f0:9d:a9:95:b1:
50:02:af:91:f8:a3:2a:9a:fa:be:6a:e8:e2:83:e6:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:92:23:76:CA:0F:21:22:A3:FA:3C:1C:01:5D:DC:3A:40:F2:BC
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/BTmSI3bKDyEio_o8HAFd3DpA8rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca00:8000::/48
Signature Algorithm: sha256WithRSAEncryption
91:b7:dd:a8:ae:9d:36:0c:a6:cc:4b:5b:ab:9b:8a:b1:ee:c5:
cf:08:45:ff:61:69:22:b3:c7:2b:33:90:e1:23:85:16:d3:7a:
ad:df:cd:f4:ee:e3:ea:2e:99:80:9f:95:fe:18:a8:3f:ab:58:
a8:27:fe:95:8d:a4:ca:16:b9:73:f5:22:36:62:fd:cd:c6:52:
0e:69:79:66:87:37:3b:66:0a:48:99:88:ab:a5:ca:10:ed:c5:
c1:2b:31:9f:1b:11:3f:16:27:19:72:db:ba:4c:39:f0:d1:1e:
0f:15:97:a5:ee:57:f8:9e:05:c3:d6:e1:63:10:4d:a0:2e:f0:
8d:3c:37:c1:0e:61:eb:ff:4c:eb:88:d0:69:bf:6a:d2:0a:9e:
49:64:64:5e:ae:92:91:ad:43:cf:08:c3:8b:5b:69:09:2f:bc:
64:5c:56:c5:12:12:dc:3d:40:ca:da:a5:68:02:51:27:c4:30:
b9:4d:8a:d6:91:06:49:c7:90:3f:3b:ff:c1:ce:4c:25:4d:92:
92:2d:f3:18:54:40:d9:fb:0f:cb:56:a9:1c:17:a2:1f:6b:3a:
3d:90:e0:ae:cb:19:40:01:90:b3:b8:c7:08:a3:99:f1:10:49:
09:5f:3e:ab:77:0b:dd:7c:09:84:9a:fe:81:34:38:6a:bf:15:
5e:48:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:30:50 2025 by rpki-client