Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/rJESdqv17knzJ4wNzfBk8WWWnw0.roa
File: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (raw, json)
Hash identifier: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=
Subject key identifier: AC:91:12:76:AB:F5:EE:49:F3:27:8C:0D:CD:F0:64:F1:65:96:9F:0D
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019425219C516EABBA8AF773CF8C152B41FD
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/rJESdqv17knzJ4wNzfBk8WWWnw0.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 2a09:58c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9c:51:6e:ab:ba:8a:f7:73:cf:8c:15:2b:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac911276abf5ee49f3278c0dcdf064f165969f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:3e:16:0a:be:97:21:ce:ab:28:29:a0:29:
bc:17:cb:cc:b1:2a:cc:c4:41:f7:12:e7:01:b0:4c:
01:59:a6:46:48:39:90:aa:78:51:a1:4a:d3:ce:f7:
12:6c:01:00:70:5e:87:5c:32:41:6a:af:48:9c:f2:
3f:41:10:b8:0a:64:69:81:be:53:5e:9b:33:2e:2b:
2b:c9:f8:d6:68:b8:31:f9:43:68:9d:c3:cb:44:63:
02:5a:6b:e4:bf:ef:51:e0:92:a4:59:a5:8d:25:22:
cb:88:ec:e6:7d:53:e7:93:61:57:0d:be:7d:5f:d8:
04:3a:c3:95:a8:b5:bd:c2:e4:8e:f8:27:c8:7d:f1:
39:28:e1:8d:3f:0e:34:74:c8:42:bd:52:20:ac:7b:
9c:29:80:d5:2b:5f:15:5c:4d:7d:72:75:84:cb:47:
bd:18:de:ed:d1:6d:7e:e6:35:d0:66:36:d7:9b:58:
c5:0f:60:a3:8a:90:59:31:68:cf:bd:59:7f:d7:4d:
20:fb:92:67:3d:5a:c6:44:5a:bc:56:11:1a:24:44:
39:13:9a:82:c8:72:b1:46:9b:c1:c2:7a:aa:8b:13:
f2:03:c4:0b:ce:14:92:a4:20:cf:3e:f9:76:3b:5d:
52:20:f7:13:35:4d:41:1a:02:f9:19:c1:f8:75:3a:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:12:76:AB:F5:EE:49:F3:27:8C:0D:CD:F0:64:F1:65:96:9F:0D
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/rJESdqv17knzJ4wNzfBk8WWWnw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:58c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
2d:f8:6b:98:2a:44:86:6f:0b:ca:79:c7:a6:6b:53:59:91:78:
2d:db:bc:3b:21:a4:25:a6:12:26:d6:9c:39:0a:d6:e2:67:10:
46:23:75:a9:77:2a:26:6e:45:30:08:e3:e9:fb:b6:5e:32:54:
00:bc:ca:28:96:9c:c8:43:ef:dd:58:b8:ea:11:a9:ec:d6:66:
95:e8:bb:30:c0:11:32:a7:24:33:4f:6a:b7:49:87:3c:60:ee:
89:4f:7b:46:ae:a2:f6:41:95:8e:73:65:83:ad:ae:b6:f3:b4:
37:af:bb:d3:27:3b:68:e4:e3:e1:4a:c8:14:9b:7c:6b:53:8e:
fc:5a:ee:e7:62:30:59:a7:e9:8a:f8:26:d1:e0:8a:ba:69:7b:
3f:b2:13:79:84:44:9c:ec:86:74:17:2e:3b:05:9e:36:1b:02:
5a:50:3f:21:a4:4f:17:a9:71:cb:fc:e7:60:a4:49:90:77:24:
20:f2:95:ba:19:d7:32:95:35:58:94:ac:28:0a:e2:8c:b6:37:
c2:aa:2a:90:a7:57:26:8a:da:54:81:0e:ab:73:01:45:fd:70:
04:09:ea:e7:9b:af:03:a9:60:0c:f1:70:c2:eb:e4:a5:37:86:
54:6b:98:4f:22:0b:23:dd:9a:50:16:be:eb:37:a7:37:11:74:
37:cb:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:41:46 2025 by rpki-client