Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/5g1tjgsfll7LK-waAj9bTQ2h-3c.roa
File: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (raw, json)
Hash identifier: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=
Subject key identifier: E6:0D:6D:8E:0B:1F:96:5E:CB:2B:EC:1A:02:3F:5B:4D:0D:A1:FB:77
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019421B1ED38B1760767A262C4D013DCDA23
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/5g1tjgsfll7LK-waAj9bTQ2h-3c.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6825
IP address blocks: 2001:1578:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ed:38:b1:76:07:67:a2:62:c4:d0:13:dc:da:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e60d6d8e0b1f965ecb2bec1a023f5b4d0da1fb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:4a:4b:f6:dc:0d:cd:1a:f5:92:a4:a3:95:
20:3f:20:19:c0:5c:30:6b:c7:5a:2f:cb:41:d2:8e:
0c:37:ab:f3:7e:e6:31:d4:0b:10:90:30:59:e9:b6:
a2:8d:bb:85:d4:7b:10:b1:07:47:1c:50:0d:ac:05:
a3:af:40:73:22:f1:73:a2:42:34:12:29:ca:ce:df:
e6:87:77:ac:e7:d2:e8:42:ae:85:28:a3:b7:a4:e0:
6e:b9:09:4c:08:7e:57:35:dd:9c:a9:fc:77:f7:f0:
97:80:e7:87:9e:cc:c9:46:b0:ae:2a:bd:e1:90:35:
96:52:bc:10:4a:0f:cd:99:36:22:ea:28:a7:c7:5d:
9e:3c:d2:e9:c6:ab:98:4a:da:75:c0:68:de:cf:35:
bf:27:bc:29:cf:33:c5:ec:aa:a1:75:bf:e0:4e:28:
d7:53:9d:f4:2a:2e:21:85:06:b5:39:af:34:81:08:
32:24:2c:f2:dd:68:ef:8b:09:1a:1c:a4:f9:dc:5a:
c8:06:1c:ed:68:d7:0a:17:47:4b:77:a8:8e:62:59:
71:d0:a2:48:74:68:b6:05:e1:99:96:03:f2:c3:19:
ba:b8:94:52:32:4d:ff:ea:09:fa:d3:96:63:c4:27:
d3:23:3b:f2:62:3e:5f:fb:1f:59:04:5d:ff:e6:bb:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0D:6D:8E:0B:1F:96:5E:CB:2B:EC:1A:02:3F:5B:4D:0D:A1:FB:77
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/5g1tjgsfll7LK-waAj9bTQ2h-3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1578:300::/40
Signature Algorithm: sha256WithRSAEncryption
9d:87:f4:7e:72:70:ec:c4:82:b5:2a:fd:cf:aa:23:86:c9:ae:
4f:bb:bb:9d:9c:29:27:d7:96:91:c8:99:ca:28:5d:91:1f:1e:
5d:5f:22:cd:c8:4d:1c:e8:b9:17:4c:d0:18:93:22:08:10:42:
e3:ce:ac:0c:46:14:55:ad:d8:76:a2:65:f8:c9:65:f9:07:2b:
09:89:64:d7:da:bf:c0:67:92:69:b6:f9:13:61:e7:6b:f6:69:
68:98:17:3f:5e:1a:33:50:cc:02:f8:66:fa:ba:6f:dd:a3:d3:
05:21:01:f2:9f:34:ac:00:02:ef:66:22:25:07:59:4c:3f:6a:
d3:79:86:c6:de:a6:bc:ed:e4:37:8e:af:68:f7:db:44:55:af:
10:c0:53:5f:ef:80:69:32:0f:08:68:35:32:cd:27:c5:3c:6d:
fc:8b:b7:5b:59:99:2b:52:50:44:8d:3f:17:4d:99:01:23:ec:
cc:bd:7d:f0:07:ff:9a:1a:94:f4:f6:e6:7f:2b:6a:c9:6f:87:
ac:83:76:55:b7:d9:c6:6d:e8:30:a5:ff:7f:61:92:83:2f:53:
3f:9c:19:ff:b8:6e:23:0f:8b:d4:4b:d4:33:77:d4:5b:59:4d:
12:c9:25:3f:70:1a:98:eb:79:b0:60:ea:bf:79:4c:83:b0:fe:
31:99:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:53 2025 by rpki-client