Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/480p7BIjIK-B7q3fhqVH-c9jWtM.roa
File: 480p7BIjIK-B7q3fhqVH-c9jWtM.roa (raw, json)
Hash identifier: Oq3bjkZh6ACA9+Ey6L0eW4PFiYEb6oJn3R3aG4qJpMs=
Subject key identifier: E3:CD:29:EC:12:23:20:AF:81:EE:AD:DF:86:A5:47:F9:CF:63:5A:D3
Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial: 019420D60CA408411EBD1E2618E3F2E8F0E2
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/480p7BIjIK-B7q3fhqVH-c9jWtM.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215153
IP address blocks: 2a05:9f04:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0c:a4:08:41:1e:bd:1e:26:18:e3:f2:e8:f0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3cd29ec122320af81eeaddf86a547f9cf635ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:9c:00:b9:81:eb:c9:96:7a:dc:a3:eb:57:
89:db:76:a0:fc:e0:27:ac:47:8c:d0:6f:2c:61:bc:
91:e2:a6:eb:85:96:2e:9a:f6:45:77:ea:cc:25:84:
d7:40:a7:55:df:e7:9f:a8:f8:f3:40:94:08:57:d8:
82:b0:06:2c:39:1f:10:1d:ce:ad:9a:4d:42:da:b1:
8a:9d:70:dc:5d:70:d7:cc:79:6a:37:51:4a:2d:0a:
70:67:93:9e:85:7e:f4:71:47:ca:9e:58:8f:a1:94:
7d:e0:5b:21:8b:a2:bb:ee:38:93:12:49:3c:e4:db:
b3:bd:dd:28:de:a7:25:f3:96:71:f2:ef:ed:40:ba:
ce:a0:14:ea:41:2c:86:0c:8e:08:04:ec:59:a1:47:
56:8a:34:29:d5:2c:ae:9f:52:fe:b3:4b:fb:15:4a:
bd:b1:6a:3e:df:e0:b6:d7:79:b0:9c:31:09:a2:09:
ac:5c:9a:04:cb:b1:f9:f7:52:7a:f6:4f:ce:b2:72:
04:81:cc:e7:fc:96:b6:5d:32:48:75:e5:e5:9d:55:
a1:a5:15:10:47:ca:19:00:26:c0:94:8d:00:81:74:
9f:2a:68:c6:76:07:01:bc:1a:18:08:79:ef:33:5f:
27:c7:98:79:0d:3c:6d:b7:e3:ad:35:eb:b4:2b:1e:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:29:EC:12:23:20:AF:81:EE:AD:DF:86:A5:47:F9:CF:63:5A:D3
X509v3 Authority Key Identifier:
keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/480p7BIjIK-B7q3fhqVH-c9jWtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9f04:100::/48
Signature Algorithm: sha256WithRSAEncryption
b9:29:6f:47:b1:a8:7d:76:3d:b9:36:85:0b:53:f6:76:60:dd:
28:04:4e:96:e8:2d:8b:3e:20:b1:93:98:00:2c:b3:62:a5:dd:
43:dc:9c:87:1e:a6:b7:85:b6:42:da:29:ed:2d:82:a6:eb:5f:
23:bb:a4:0b:53:41:26:48:69:27:84:cf:d5:ad:21:6f:a3:8e:
b6:63:fb:cd:be:34:72:5d:25:16:cc:7a:35:9c:9a:2f:d8:40:
33:df:26:90:f6:10:b6:19:a1:f8:4e:9b:d2:dd:1b:08:ff:c2:
be:b5:9e:89:88:6c:63:29:f2:27:46:68:32:89:be:10:41:93:
d4:d1:27:6d:f1:10:3f:1c:42:35:55:2a:bb:1d:41:d5:5c:c5:
66:df:a0:1f:12:93:f5:8a:9c:58:45:33:cc:a4:e4:79:a8:1b:
bc:94:9b:f8:06:99:55:53:18:77:dd:17:d0:24:e6:80:73:d8:
c8:ba:f8:41:10:98:1e:f4:84:ec:0f:2f:f9:9a:be:a3:cd:ef:
2d:e1:24:ce:08:96:19:8b:c0:3d:cf:dc:0f:9f:6e:fc:2c:89:
3c:92:82:45:2e:b0:93:ef:5b:30:16:d5:8a:b4:49:43:a4:3a:
2e:12:76:3e:49:ca:d7:2b:1f:52:6d:64:61:c3:44:04:c3:b2:
0f:91:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:06 2025 by rpki-client