Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/Q6nJt5OyB3yAAOcFFRG5qOehAok.roa
File: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (raw, json)
Hash identifier: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=
Subject key identifier: 43:A9:C9:B7:93:B2:07:7C:80:00:E7:05:15:11:B9:A8:E7:A1:02:89
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019421B1EE61F15DB212F2538C925F4F8E07
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/Q6nJt5OyB3yAAOcFFRG5qOehAok.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35003
IP address blocks: 2001:1578:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ee:61:f1:5d:b2:12:f2:53:8c:92:5f:4f:8e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43a9c9b793b2077c8000e7051511b9a8e7a10289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:3e:cd:fd:e3:fc:2c:0f:ab:2f:fa:3c:5b:
12:da:3a:50:64:3b:d1:f2:23:57:4a:16:5c:09:57:
13:47:c4:f0:dc:b0:7b:cd:4f:a0:67:31:a9:30:e6:
06:da:85:5c:23:ae:6d:4a:03:2a:cd:22:40:59:9a:
b0:c5:f9:d3:59:96:d7:94:c9:1a:1d:98:87:9f:a0:
7e:63:d7:0d:76:10:b8:2b:af:c9:cc:35:f1:5b:44:
94:ca:09:d0:61:e7:bc:49:58:11:b8:76:f3:01:7d:
28:dd:38:a1:f0:8f:d4:7c:5c:40:91:6f:fd:6f:19:
4e:69:7b:fb:24:f8:ea:be:32:0f:08:21:6d:8d:fe:
ec:f7:52:c1:1f:c4:57:ef:74:53:a1:14:eb:63:ed:
8c:ff:3f:98:88:65:b4:71:c0:df:46:a0:43:03:0b:
a0:a7:e0:ae:58:de:62:a0:5d:f6:3e:e8:25:98:f1:
67:5d:ab:14:bc:49:9c:9c:6f:ec:79:c9:bc:a0:4e:
c3:f1:84:cf:b0:85:66:94:ab:b2:df:bc:50:c7:37:
ca:b1:6d:84:83:83:fd:14:fc:15:bb:92:f0:73:95:
ab:ce:8e:09:6b:a9:23:7f:aa:12:f4:b5:6f:28:6c:
3e:80:9a:be:d7:12:7a:2b:b4:40:d5:95:4b:f0:51:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:C9:B7:93:B2:07:7C:80:00:E7:05:15:11:B9:A8:E7:A1:02:89
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/Q6nJt5OyB3yAAOcFFRG5qOehAok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1578:400::/40
Signature Algorithm: sha256WithRSAEncryption
24:d1:c0:b7:1d:cb:a2:79:1c:75:d1:7d:ef:0c:77:1d:08:27:
e4:16:1d:21:9e:df:b8:f2:77:b3:e2:d5:6e:c4:ac:b5:e3:5b:
4f:c7:2f:c5:7d:13:4b:c4:67:3f:dd:ff:83:0b:6b:3e:ad:6f:
85:de:09:4a:70:b6:84:99:12:89:ee:fc:e8:ed:54:43:eb:46:
58:86:6e:44:a0:0c:bd:36:f6:05:30:30:29:2d:6d:43:cf:b5:
58:5a:9a:54:d3:b2:66:f5:da:e4:5f:04:2f:be:02:43:88:ee:
92:f2:7b:56:75:57:7b:62:c8:ff:7a:8c:e4:78:d4:13:97:e8:
0d:d4:64:21:0e:01:fa:17:c2:cc:02:f8:64:62:76:1c:b2:0e:
1f:ff:dc:a9:2a:7c:26:75:67:53:34:fc:06:b8:ca:28:8b:51:
8c:22:f0:a3:5b:6b:9a:99:8c:8e:cf:d9:4b:d2:7c:50:21:8c:
59:ba:3a:d5:73:81:1b:f7:10:e7:40:7b:c7:76:0a:2b:a2:ce:
42:d3:f4:3e:44:b3:6e:95:0e:ee:e3:f6:0c:c0:70:4f:34:d0:
47:42:22:b2:81:77:f8:11:56:47:d2:2a:19:0c:69:ac:c2:2d:
6b:29:a4:09:df:b7:9b:a9:27:90:3b:93:e3:b8:3e:16:18:46:
cb:91:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:31 2025 by rpki-client