Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P5pjzEqETgaoILyrVqAf8yaTsNM.roa
File: P5pjzEqETgaoILyrVqAf8yaTsNM.roa (raw, json)
Hash identifier: FP41pjnJICnaMPDustIqk1vAQWM2Yc1nAUxjRxJtAjk=
Subject key identifier: 3F:9A:63:CC:4A:84:4E:06:A8:20:BC:AB:56:A0:1F:F3:26:93:B0:D3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01965C2859E1C5FA4DD39F2682E783AF5824
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P5pjzEqETgaoILyrVqAf8yaTsNM.roa
Signing time: Tue 22 Apr 2025 06:21:10 +0000
ROA not before: Tue 22 Apr 2025 06:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 2a13:e107:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:28:59:e1:c5:fa:4d:d3:9f:26:82:e7:83:af:58:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 22 06:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f9a63cc4a844e06a820bcab56a01ff32693b0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:aa:2d:68:b1:ce:36:1e:b0:54:17:9e:3a:
58:da:86:39:0a:cc:6b:d8:07:bf:4a:d3:fd:6a:1b:
56:86:ba:f5:e2:e0:3b:1b:d8:8e:f4:2f:3c:9e:1e:
5b:6c:e3:a3:28:3d:5c:d0:88:43:09:3e:7c:fe:05:
de:b1:93:fd:da:a7:72:d4:18:e1:83:be:fe:47:36:
ec:7e:a4:ad:f5:4b:85:56:6f:ae:59:a4:29:df:17:
a7:64:17:46:2b:79:72:6e:cd:f0:06:9a:19:1a:8e:
f7:c9:83:41:38:ea:29:87:0c:fd:b9:c6:0e:bb:10:
6b:cf:5f:a4:7f:90:c0:70:c2:c1:08:9b:29:30:82:
eb:2e:d9:08:6e:78:07:91:eb:c9:5d:5e:97:d9:64:
76:9c:cb:60:1c:b3:a5:e8:d8:e9:98:3c:4f:de:97:
1a:3c:a2:e2:c5:a3:f1:85:c1:b9:b2:1a:bd:bf:a5:
50:19:c5:99:b3:10:c4:98:8c:54:77:1a:cb:6c:91:
29:2c:05:31:31:e6:5b:70:b1:7d:53:ca:49:97:c5:
41:9b:8d:72:79:02:f5:c5:cc:32:0d:30:9b:a7:60:
1d:2d:1f:ac:77:dc:8c:f7:26:6b:4a:8d:76:f5:36:
4c:56:f3:a2:55:47:ef:59:a9:43:55:3d:e3:54:a6:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:63:CC:4A:84:4E:06:A8:20:BC:AB:56:A0:1F:F3:26:93:B0:D3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P5pjzEqETgaoILyrVqAf8yaTsNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e107:77::/48
Signature Algorithm: sha256WithRSAEncryption
ad:b0:f9:ba:d0:57:f8:7d:d2:b3:5e:3d:2a:7d:10:a7:d9:ce:
46:74:0e:02:5c:cf:ce:06:42:b7:7f:6b:f1:ce:3c:33:90:22:
c0:d9:86:f6:45:cd:2d:f2:1a:73:ec:73:98:19:ae:58:ea:cd:
8f:34:c2:d3:bc:4f:cc:a0:e0:c8:d7:06:41:f3:29:e8:b0:3d:
4d:84:66:65:4b:35:0e:8d:50:f8:e0:0b:0f:57:cc:63:0a:52:
c1:ba:6f:45:60:33:3d:6d:41:8e:5f:96:60:fc:3d:61:2d:67:
9e:ae:f5:6a:c6:13:e7:a9:03:ea:21:5d:c7:c9:12:13:b3:88:
a3:81:49:65:67:a2:02:0b:96:fb:dc:cf:ba:54:8b:35:e4:d5:
88:9b:38:f8:37:e5:c7:97:08:1a:16:5d:39:71:6e:75:3e:06:
a4:5e:cd:25:6b:1b:05:13:2c:5a:56:e0:d8:d0:d5:22:b9:8c:
83:c4:d3:1b:85:1c:ef:6d:bd:de:b1:7b:c2:cd:18:99:d9:11:
ae:af:38:49:32:4c:43:63:2a:a3:79:97:be:5a:4c:9e:5f:d6:
04:dd:ee:c1:f9:57:15:06:ec:cc:b3:ab:35:aa:e8:8f:82:8a:
b5:77:83:fb:7f:b5:f5:df:e9:10:8f:cc:1a:33:a2:50:8d:b3:
09:c9:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:02 2025 by rpki-client