Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2U1KrWdXzEgErMRU-6TvgQCqiRY.roa
File: 2U1KrWdXzEgErMRU-6TvgQCqiRY.roa (raw, json)
Hash identifier: S20Mcsuxawjrz+/bfTZvplUDOdSaEorXIPjAW281c8w=
Subject key identifier: D9:4D:4A:AD:67:57:CC:48:04:AC:C4:54:FB:A4:EF:81:00:AA:89:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01953843CE9F788FE3F8AFD7AA37BEB23159
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2U1KrWdXzEgErMRU-6TvgQCqiRY.roa
Signing time: Mon 24 Feb 2025 14:02:02 +0000
ROA not before: Mon 24 Feb 2025 14:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8285
IP address blocks: 2a0f:1586::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:43:ce:9f:78:8f:e3:f8:af:d7:aa:37:be:b2:31:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 14:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d94d4aad6757cc4804acc454fba4ef8100aa8916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:00:19:f5:5b:44:e0:69:d6:62:2b:1a:60:
e7:ad:2a:39:ee:70:8f:1a:62:b0:7c:bf:8a:4b:61:
44:8e:3b:e2:89:98:72:ea:f5:f5:e3:75:2c:fa:ba:
23:6a:e1:39:ce:5b:fe:77:8c:2b:85:8b:9f:76:9e:
b9:e7:53:c2:6d:46:5b:c5:80:ee:60:90:56:ca:f5:
1c:bd:49:7f:79:f8:7b:c0:07:c4:b1:91:b9:22:ae:
8f:57:2d:2e:87:79:11:b5:ea:cc:15:7f:5c:43:8c:
dd:53:d5:81:66:a5:fe:e0:d2:6a:53:7f:ad:40:69:
84:37:e7:5d:31:24:6c:76:1a:2b:b7:d8:9f:61:ba:
9f:49:b2:f7:3c:d4:82:64:5d:36:8e:3b:fa:d5:f8:
35:c0:f6:f5:b1:0e:6e:69:8a:2f:57:b9:08:93:65:
f2:0e:01:66:6e:a2:d6:8f:56:92:02:66:88:c9:af:
1e:1b:f7:a5:4e:7b:9c:9f:7a:51:88:31:9b:95:93:
b3:71:f0:81:74:54:61:ac:f7:fe:d3:3e:83:04:74:
25:cb:47:8b:86:b7:fd:d2:22:25:29:dc:63:62:55:
50:41:a5:2b:73:c6:57:99:8d:40:08:95:c5:88:01:
a9:40:b3:5f:35:19:57:03:24:4f:18:ef:d7:bd:fc:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4D:4A:AD:67:57:CC:48:04:AC:C4:54:FB:A4:EF:81:00:AA:89:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2U1KrWdXzEgErMRU-6TvgQCqiRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1586::/32
Signature Algorithm: sha256WithRSAEncryption
9c:5a:b4:3c:2a:0e:de:3f:e7:c4:40:3b:15:0a:3a:7d:1a:f6:
a7:db:cd:9f:0b:0b:a3:f2:66:f6:c2:97:3a:2a:4c:15:1d:2d:
01:5b:df:ab:8d:e1:bc:f4:d8:ae:be:81:20:87:04:0b:82:38:
a6:8c:ca:42:6b:19:5f:79:90:93:c1:ee:c6:bf:33:bf:2e:64:
f1:e5:e8:8c:41:04:e0:fc:13:a7:42:d8:5b:10:da:74:5c:c5:
91:3d:e4:11:5c:44:d9:dc:ce:cb:6e:44:23:5a:4c:6a:b9:8a:
99:76:20:fd:ce:b3:9a:75:06:e1:e4:35:bf:d5:99:0e:1d:58:
75:2d:04:d6:a6:58:cb:15:c0:6d:69:7d:83:fb:04:5a:11:50:
40:c1:75:ce:f8:da:9d:30:0f:04:ba:6e:2e:b2:bd:39:13:01:
3d:b1:20:85:4f:8c:a6:1a:ea:fe:2f:c9:32:e2:6f:0c:99:a4:
0e:52:6a:ca:49:72:13:1a:54:e9:d4:94:ed:c2:1e:e2:a0:53:
83:9a:e9:7d:58:05:81:aa:7c:8e:47:dd:fb:e2:08:21:f4:6f:
1c:2b:0a:d8:2f:a6:e6:33:8a:55:5b:b9:29:45:ec:a5:9a:a2:
8c:87:4b:47:1c:61:d7:03:d3:f4:a2:75:d1:83:24:2d:7e:7d:
81:fa:a2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:57:57 2025 by rpki-client