Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa
File: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (raw, json)
Hash identifier: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=
Subject key identifier: 0A:C8:82:87:18:2C:CC:8F:9C:3F:E0:D0:C0:D4:02:E5:78:B9:63:2C
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 01942826035F51CAFCCAA9D6AC86AC028976
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa
Signing time: Thu 02 Jan 2025 17:52:47 +0000
ROA not before: Thu 02 Jan 2025 17:52:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5607
IP address blocks: 2a0c:93c0:8000::/48 maxlen: 48
2a0c:93c0:8002::/48 maxlen: 48
2a0c:93c0:c002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:03:5f:51:ca:fc:ca:a9:d6:ac:86:ac:02:89:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jan 2 17:52:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac88287182ccc8f9c3fe0d0c0d402e578b9632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:ad:2c:a4:d4:d8:55:f6:7e:b2:50:a3:70:
96:03:62:05:6f:fd:8d:ef:cf:61:23:20:a6:da:6c:
58:fc:ef:91:3d:93:3a:5f:af:3a:97:67:ab:93:09:
89:48:59:12:2c:3e:63:ea:34:a0:05:4f:f3:2c:e1:
8a:47:66:3a:88:63:46:0f:a3:4f:49:b0:eb:32:c1:
1f:b6:e2:46:cc:dd:3b:96:52:9e:39:5f:c0:a5:68:
b3:2b:31:38:8e:eb:be:89:cc:3e:df:0c:7d:a4:b1:
27:da:2d:a9:5f:c8:1e:2c:ce:54:35:f3:17:19:2c:
dd:3f:22:20:6f:66:89:5c:ee:1f:68:e5:e2:d4:fa:
bb:c0:8b:f5:96:35:7e:6f:48:54:ae:34:fe:59:f0:
40:4a:bf:bd:20:fd:71:d6:9d:76:46:ab:68:bb:b6:
a7:9f:8a:33:58:c7:c0:4e:4c:03:8a:88:63:0d:be:
e5:f0:e6:82:11:0d:98:a0:ab:09:0a:c4:73:b6:d4:
a8:8b:ed:96:0c:13:da:8e:ae:5f:2b:8c:9d:84:6f:
91:12:71:c1:bf:31:02:10:0a:34:dc:4c:6f:33:13:
74:41:14:23:4b:7c:18:99:9c:60:82:0e:0e:5a:91:
8f:65:fc:de:56:7f:39:7c:31:22:a0:fe:3a:f7:aa:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:82:87:18:2C:CC:8F:9C:3F:E0:D0:C0:D4:02:E5:78:B9:63:2C
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:93c0:8000::/48
2a0c:93c0:8002::/48
2a0c:93c0:c002::/48
Signature Algorithm: sha256WithRSAEncryption
73:40:83:21:af:62:59:64:7f:1d:a2:a4:53:c2:ce:04:11:ff:
3a:10:61:7e:f1:31:30:67:eb:a4:6b:6e:a8:64:11:84:15:38:
6d:20:be:ed:13:fa:0b:49:fe:22:95:e2:36:a0:0e:b1:de:15:
a8:3b:cb:f8:86:b3:a6:fd:a3:77:b6:47:f7:69:d5:70:ea:71:
29:6e:35:3c:6f:47:24:67:fe:05:32:42:cf:e7:8a:03:c0:d3:
b8:53:39:46:aa:fe:8b:5d:ec:08:6e:8b:9b:b9:a6:db:c2:c7:
b8:56:ee:6c:51:07:46:6d:74:57:2d:05:83:aa:45:41:3a:4e:
b6:ce:96:11:2c:b2:2d:ec:f2:4d:be:0f:bc:e8:52:c5:b5:8b:
18:30:6c:64:45:f7:20:bd:6c:fd:f8:fc:3e:34:cf:a5:3f:37:
09:33:55:50:a4:79:88:87:00:fc:ec:55:c5:09:eb:26:00:08:
6e:2e:d2:96:75:1f:02:63:04:c6:1f:30:87:0f:4b:11:b2:40:
09:33:20:52:e0:bf:b5:4f:19:d2:e2:c4:14:ff:b4:12:ec:52:
76:65:04:47:49:9d:9a:dc:69:2f:9f:34:3f:d6:0f:cc:f9:a2:
fa:59:33:8b:e4:14:8a:9d:f4:d4:e0:4e:ed:e6:6a:4f:ef:e3:
bb:3c:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:23 2025 by rpki-client