Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/2G3KAngu1j7cVjl09bHkVR1Q8mU.roa
File: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (raw, json)
Hash identifier: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=
Subject key identifier: D8:6D:CA:02:78:2E:D6:3E:DC:56:39:74:F5:B1:E4:55:1D:50:F2:65
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019424B2BF09E17697C608E1558A077253D7
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/2G3KAngu1j7cVjl09bHkVR1Q8mU.roa
Signing time: Thu 02 Jan 2025 01:48:01 +0000
ROA not before: Thu 02 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212495
IP address blocks: 2001:678:e98::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:bf:09:e1:76:97:c6:08:e1:55:8a:07:72:53:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Jan 2 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d86dca02782ed63edc563974f5b1e4551d50f265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:30:3f:78:f3:39:1c:8d:87:d5:49:9a:82:
cc:86:b1:6d:0b:7d:46:ef:91:fd:7a:bb:aa:28:ba:
cc:ae:02:08:73:c2:d3:a1:f1:b2:28:ce:16:4e:e9:
43:51:c5:9b:cb:6b:11:4a:9d:1c:29:08:9d:f6:86:
27:f8:7d:de:ee:98:e1:da:69:88:76:75:e0:2a:84:
dc:06:8c:1a:7b:de:b7:62:56:65:b4:de:9a:bd:2a:
e1:ef:d2:20:bf:96:60:f5:32:12:fa:f2:6a:1f:c9:
04:5b:1d:fd:b2:ce:83:5f:22:15:fb:d4:09:11:2c:
93:f9:f2:a8:29:51:6f:b8:7f:6e:17:2d:2c:96:46:
76:90:5b:b4:f7:15:84:89:4f:19:50:d6:51:77:8e:
d7:65:6e:9e:39:6f:dc:79:ab:9c:2a:dc:60:b1:76:
7b:3d:41:51:d0:29:bc:45:56:8c:e3:5e:b3:92:09:
89:60:14:aa:3c:3b:3f:6d:c8:02:67:15:c7:24:04:
0a:13:36:27:b8:cb:35:43:eb:db:d7:7e:fe:fc:14:
32:d4:14:01:30:79:df:7c:13:08:89:76:7d:20:e8:
19:86:65:4a:b7:86:99:eb:7c:f0:a3:9a:ed:e2:d2:
df:ee:e5:92:e4:d1:c4:c7:61:7e:61:40:10:83:8b:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6D:CA:02:78:2E:D6:3E:DC:56:39:74:F5:B1:E4:55:1D:50:F2:65
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/2G3KAngu1j7cVjl09bHkVR1Q8mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e98::/48
Signature Algorithm: sha256WithRSAEncryption
76:3e:d7:60:aa:2f:30:ba:7f:b2:a2:c3:13:01:8c:b5:cf:e6:
e8:48:84:38:1c:a0:a3:a7:b1:aa:90:f9:f7:fb:9e:97:99:63:
ab:28:4c:31:47:08:de:a5:ee:57:23:e8:96:f3:9b:8d:9d:ec:
6e:48:98:4b:60:40:1c:66:c2:26:43:94:ee:5d:50:89:63:d4:
b3:ed:be:5b:52:4a:b6:b8:70:59:e0:cc:38:9c:e3:4b:7e:ab:
84:b8:7c:ab:8e:3b:10:6d:b4:54:65:36:db:12:08:49:b9:4c:
c4:93:92:cc:9e:0b:cc:1b:dd:8a:f5:65:c1:07:e0:b7:b7:98:
75:52:34:06:cc:86:df:b0:10:ee:ca:18:ee:0f:0b:f5:94:d7:
3f:67:ea:15:06:6e:6d:e7:71:5a:ea:29:51:3b:d3:a2:0a:93:
3c:1a:0c:4c:aa:9a:a2:bc:d9:a0:d7:e5:56:e0:b7:42:4b:85:
61:b6:71:8e:24:23:83:84:7b:6e:68:9e:69:f6:20:42:65:86:
3c:07:71:cf:30:87:7e:2a:45:e2:f1:6f:a5:9e:88:fc:83:72:
d3:80:00:a2:94:a2:95:f2:0e:7c:21:53:c5:1a:e6:da:7b:27:
77:c9:43:53:5c:34:e5:04:ad:0d:25:d6:fb:42:78:f9:dc:df:
64:ec:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:48 2025 by rpki-client