Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/A-CITLCzJtdw39wtm0dLTltUEFM.roa
File: A-CITLCzJtdw39wtm0dLTltUEFM.roa (raw, json)
Hash identifier: c5iWUzoFE3kjILTe2m5OWQi3zSByNEE2KpMzxgoNxeI=
Subject key identifier: 03:E0:88:4C:B0:B3:26:D7:70:DF:DC:2D:9B:47:4B:4E:5B:54:10:53
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 019426D9CA6B986AD4C51C742FC3B6B318D7
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/A-CITLCzJtdw39wtm0dLTltUEFM.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200557
IP address blocks: 2a02:d0c2:2::/48 maxlen: 48
2a02:ec41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ca:6b:98:6a:d4:c5:1c:74:2f:c3:b6:b3:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03e0884cb0b326d770dfdc2d9b474b4e5b541053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:7a:28:f4:72:df:02:68:48:46:c6:d2:b0:
b6:cb:a6:b9:00:37:c0:dc:84:8d:88:05:f5:19:73:
c4:19:15:5d:9c:23:dc:91:6f:f9:20:84:11:43:4c:
f9:62:15:fb:5b:63:ec:1d:d9:fe:05:fe:94:4c:33:
af:6a:82:fb:94:41:0d:e4:37:a6:ef:08:51:ec:c5:
4d:53:30:28:15:36:c0:f7:28:47:21:d1:5b:84:ff:
0d:bd:1b:43:7f:10:38:ed:67:de:c2:e5:89:c7:3f:
29:3c:3d:33:b1:50:be:77:08:a0:cd:e4:86:ea:5e:
10:52:25:ce:29:8b:0a:0f:bb:b7:cc:a9:c6:17:5c:
40:79:a3:32:6b:8f:bc:50:04:5d:20:df:3e:95:f1:
b3:3d:a9:ed:90:73:76:7a:f7:cd:e8:7f:19:f0:dd:
bc:68:a1:ce:1d:7e:aa:a4:eb:21:ea:d9:52:b7:24:
ad:92:14:91:c3:b0:b7:bc:ee:11:74:11:a7:0d:4a:
b0:61:21:e4:99:f4:e3:52:57:0b:33:31:d3:67:66:
38:2f:ef:28:47:71:6f:a3:25:84:71:d4:d7:77:5b:
f5:96:4c:34:bf:33:63:5c:dd:63:50:ce:4c:4f:8e:
75:16:a2:6e:b4:2d:bf:82:25:e7:6a:64:9e:51:cf:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:88:4C:B0:B3:26:D7:70:DF:DC:2D:9B:47:4B:4E:5B:54:10:53
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/A-CITLCzJtdw39wtm0dLTltUEFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d0c2:2::/48
2a02:ec41::/48
Signature Algorithm: sha256WithRSAEncryption
d8:50:80:f4:58:cf:36:35:46:09:49:0d:b9:6e:31:b5:9a:05:
0c:50:d0:6c:a9:7d:b1:7a:6d:48:d7:0c:ee:cc:47:2d:02:24:
47:a7:a2:4b:b0:61:cf:9f:2b:4c:1f:a3:4b:04:65:1b:7f:49:
87:47:e8:9c:97:cd:59:20:82:1b:94:aa:02:88:b9:27:13:b1:
f9:71:2a:37:af:4a:2a:89:dd:91:7c:a0:3f:18:c9:14:26:52:
5c:95:70:27:ff:e7:18:d1:52:8c:3f:fa:a1:49:2f:72:d3:05:
b6:20:43:9c:0b:d9:32:dc:c9:f8:3f:4e:68:67:f1:ce:31:fb:
31:97:22:a5:bf:e3:e0:20:d2:81:38:21:9a:4a:5a:2b:91:63:
1a:04:44:a1:d4:be:09:f8:06:7f:ca:3e:92:80:7a:c5:d7:b3:
07:64:fe:95:aa:99:1c:c5:ad:d8:b9:49:f3:0a:9b:f1:ee:85:
39:91:e9:fe:59:7e:e0:05:c4:b4:96:b3:fe:4f:91:5e:cf:a7:
dc:73:d9:56:88:ea:e5:ec:5a:dc:f3:3a:6f:c7:88:94:13:84:
94:96:d0:5d:c8:70:9c:8f:06:d3:d4:8c:b6:f3:4b:b0:5e:fa:
c3:1c:b2:c1:e9:69:02:c5:4a:a3:81:c8:b7:04:20:23:55:f7:
a4:01:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:15 2025 by rpki-client