Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TILucF2O-ya509ZC_RE1ob3i3kQ.roa
File: TILucF2O-ya509ZC_RE1ob3i3kQ.roa (raw, json)
Hash identifier: vK880aazz2ElW7yzlVl5trSA//ysOHm6zf+Fk8jvk6I=
Subject key identifier: 4C:82:EE:70:5D:8E:FB:26:B9:D3:D6:42:FD:11:35:A1:BD:E2:DE:44
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C73598A9BEDB8819A3A3A042AB057
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TILucF2O-ya509ZC_RE1ob3i3kQ.roa
Signing time: Thu 02 Jan 2025 09:50:29 +0000
ROA not before: Thu 02 Jan 2025 09:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39229
IP address blocks: 2a00:1e88:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:73:59:8a:9b:ed:b8:81:9a:3a:3a:04:2a:b0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c82ee705d8efb26b9d3d642fd1135a1bde2de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:c6:e6:61:01:84:44:ff:5b:e3:a7:4f:4a:
8e:58:32:4a:b9:a6:e6:77:d5:73:d0:82:21:08:be:
42:ca:07:61:76:7a:1c:77:c4:48:9e:47:cb:66:11:
65:7a:73:52:7c:6c:11:22:90:64:aa:4b:48:06:7d:
8c:7e:9d:b2:d3:95:5e:b8:37:c2:d6:6a:fe:11:3c:
db:a5:35:84:3f:76:c6:db:7a:31:9b:f6:c7:89:38:
3c:b0:5b:15:aa:84:4a:95:1e:38:ab:44:f2:bd:9a:
55:60:89:76:4c:6b:2e:71:00:0e:a8:c2:3b:7e:39:
9b:11:0c:93:18:bd:fb:b6:39:0d:40:d1:d3:b1:46:
aa:63:81:7e:3b:c0:0d:3d:6d:83:72:fe:8b:77:41:
06:fa:f7:30:c5:15:e2:d0:68:e4:39:06:53:e7:fc:
c6:86:a2:b7:d4:f2:c3:23:87:fc:2b:fc:6b:73:7f:
12:75:4b:fe:0d:37:6f:ac:c0:c3:e1:cf:d4:82:bc:
59:8f:c1:fc:bc:58:ae:a7:30:66:e2:98:51:4c:e5:
78:dc:f8:4b:e0:46:98:bc:fc:0f:8b:ff:a2:ab:bb:
02:e2:64:50:8c:4e:2f:77:fe:4b:b3:18:79:86:19:
87:7b:cd:d2:17:87:1f:42:c0:d9:a8:72:d3:5e:68:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:82:EE:70:5D:8E:FB:26:B9:D3:D6:42:FD:11:35:A1:BD:E2:DE:44
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/TILucF2O-ya509ZC_RE1ob3i3kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1e88:8::/48
Signature Algorithm: sha256WithRSAEncryption
0e:30:29:6f:53:ca:10:c4:5c:8a:b4:e7:47:07:23:15:6b:7f:
fa:8d:f4:da:af:bc:39:00:6f:68:57:a4:e5:3b:84:d2:6e:06:
6b:4c:41:a1:d0:9a:70:83:e0:c4:f1:23:4a:b0:64:1f:53:80:
94:76:11:d3:fb:f3:59:3e:c5:52:08:ae:57:09:d0:aa:53:e0:
f3:e4:cf:cb:54:d7:98:5c:6f:e3:1e:d9:cb:1d:07:d5:48:5b:
d3:b8:43:94:6d:38:25:1b:7d:e9:6f:1e:36:ee:a5:3b:63:63:
4a:88:f4:21:64:77:84:ed:53:c1:7a:d9:80:c4:a8:dc:6e:f4:
dd:90:75:4e:ef:cc:5c:13:c7:dd:0e:29:47:5b:e5:3d:13:c0:
00:a6:9c:d5:3b:b0:5c:e8:f8:c9:bd:b3:be:1e:12:1d:e9:80:
7b:0f:97:a9:bc:ca:fe:2a:d7:22:e9:31:6b:9c:20:2f:84:79:
5d:09:80:54:f3:9c:0a:fc:4a:79:39:7a:09:a5:0f:ef:d0:5a:
12:3f:27:d5:ea:0a:84:4a:6c:0e:2d:6d:96:98:d8:d6:33:7b:
d2:6b:60:7f:11:fb:68:72:82:91:20:fc:80:cf:a3:b9:35:5a:
fb:89:f0:22:4d:f9:44:4f:50:a4:f6:ec:dc:2b:3e:c3:58:91:
6d:96:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:35 2025 by rpki-client