Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa
File: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (raw, json)
Hash identifier: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=
Subject key identifier: 27:BA:79:C2:DB:DB:63:E7:0C:18:9E:A7:BC:A4:F5:3A:D6:00:F9:9B
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 0194221FEADA64303E87229CD08132D68BB5
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213320
IP address blocks: 2a13:8a00::/29 maxlen: 29
2a13:8a02::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ea:da:64:30:3e:87:22:9c:d0:81:32:d6:8b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27ba79c2dbdb63e70c189ea7bca4f53ad600f99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:58:c4:16:86:c2:23:ad:6a:95:39:1e:0a:
3b:f5:3b:59:1d:b7:19:f1:93:1a:5d:e4:4b:43:d3:
31:2c:20:96:01:0f:2e:d4:6c:f7:77:e7:63:ee:54:
12:7d:74:06:67:09:85:86:39:11:0a:8d:71:c7:d6:
67:eb:6e:2e:3d:d7:88:54:23:a2:1c:22:f0:4d:8a:
fa:27:08:79:4f:ff:e5:b8:e8:56:41:db:d0:b6:d0:
7b:57:36:b1:f3:26:4f:1d:0a:e6:9f:09:4d:7c:0a:
0d:0c:49:c6:99:38:4e:01:3d:76:3c:ec:0c:ef:d3:
6d:05:30:44:ed:73:59:0c:64:80:f6:67:7d:3f:e2:
16:92:12:03:8d:d3:55:57:95:be:81:0a:70:56:ba:
63:74:db:2c:0b:13:8f:ec:32:72:e2:13:89:25:c7:
92:58:52:e7:3b:5f:b7:e6:c1:42:39:bc:0f:90:c1:
1d:42:b4:fa:e1:96:2c:71:89:89:f1:53:7c:30:97:
eb:1a:22:34:e9:04:38:62:07:5a:5b:67:06:22:3b:
19:b7:87:22:83:09:64:ab:11:ee:e3:e1:1c:3a:57:
70:1b:a3:e9:56:c5:00:c3:fa:8f:1a:a6:d7:36:22:
38:6b:89:b5:4a:f0:df:f5:31:dc:fe:6d:1c:1e:03:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:79:C2:DB:DB:63:E7:0C:18:9E:A7:BC:A4:F5:3A:D6:00:F9:9B
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
3a:62:2f:a3:ce:09:0c:2b:4c:c0:e3:ab:34:fa:02:f2:b8:1e:
88:01:69:7f:40:71:a4:fd:1b:2e:16:d1:9e:7d:f1:2d:6d:18:
53:a6:19:a6:ed:a5:92:48:5d:f0:d1:62:ff:a0:6a:e0:d8:12:
fd:46:7f:09:b1:52:a4:e3:a4:11:1b:12:e7:a0:3e:5d:b9:91:
38:ad:6e:58:83:5b:47:c8:c3:a4:ac:29:dc:e0:fa:b3:c0:7b:
c7:14:fd:00:89:10:70:b7:04:4e:6d:da:b1:14:9c:d2:d1:dc:
3c:6a:7e:af:5b:d6:d3:2e:fc:63:84:71:b6:59:80:78:ae:f3:
3d:cd:ce:7b:95:05:26:0b:e8:b4:4f:e8:16:e4:7d:03:cd:8b:
68:17:fa:ac:f1:5e:93:f2:31:d0:75:b0:60:1b:b6:ec:4c:6d:
f6:11:e8:25:c0:e9:9b:13:64:9b:c3:ab:2c:a4:e4:74:ba:fe:
92:af:22:31:6f:a8:7e:f1:ff:e8:6f:eb:f8:4e:67:f5:97:03:
28:f2:61:a7:77:fb:09:59:30:4c:b8:3d:c5:62:18:bc:e6:cd:
8a:03:18:2e:24:2b:41:43:9a:ea:0d:79:1e:35:d2:4e:76:a1:
b4:6a:ce:cd:fb:13:c0:af:88:21:6f:65:fa:8c:2e:cc:a0:94:
41:7b:32:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:49 2025 by rpki-client