Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/tvd71H71vKZmhl1lUI4Wfg7oqjo.roa
File: tvd71H71vKZmhl1lUI4Wfg7oqjo.roa (raw, json)
Hash identifier: e5ndVp+pna8lqdjnskWIAOqf7gaAH2YiQgOHVw4SZNM=
Subject key identifier: B6:F7:7B:D4:7E:F5:BC:A6:66:86:5D:65:50:8E:16:7E:0E:E8:AA:3A
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 0194214406C77492589DFB3879E6A0153005
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/tvd71H71vKZmhl1lUI4Wfg7oqjo.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a05:1500:910::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:06:c7:74:92:58:9d:fb:38:79:e6:a0:15:30:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6f77bd47ef5bca666865d65508e167e0ee8aa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:58:28:19:cf:db:60:40:12:52:3a:a7:9a:
ff:e6:2d:c8:31:0f:b5:1a:d9:79:c4:e8:0b:04:0e:
90:13:22:5c:45:8e:96:43:2f:b0:54:fa:61:0d:96:
ec:bd:13:87:d9:be:c8:52:c6:78:a0:f2:c3:4a:41:
50:5c:91:65:bf:49:44:9c:58:b8:ef:78:97:31:ae:
b4:29:e2:c2:b4:51:d8:20:a7:17:93:29:c3:0e:60:
93:e6:2a:91:cc:3f:42:53:e3:b7:b0:2c:45:80:79:
0d:34:5c:33:80:3b:25:ad:84:8a:85:b3:8b:40:db:
c7:a0:48:1a:91:28:78:b3:b6:a6:c5:8e:28:23:2b:
ef:67:f0:2f:2d:eb:32:82:59:b8:a2:4a:18:4e:d5:
44:38:e7:7f:a5:61:a7:bf:a8:9f:d2:bf:c2:17:cc:
5e:c3:3a:67:c4:e0:2d:68:ee:9e:c7:46:11:ef:6b:
59:c7:e3:2a:e0:60:eb:e3:52:af:71:d2:f7:6e:2f:
b1:39:fc:92:7a:f7:29:b2:18:3c:32:e4:f1:e2:35:
58:71:00:25:d3:f1:45:c8:b6:6c:a9:32:63:e1:fa:
10:1d:e5:ed:69:fe:8a:72:06:04:70:96:0c:12:e8:
c1:95:88:a6:ce:9a:14:c1:22:1a:3d:1f:a2:52:48:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F7:7B:D4:7E:F5:BC:A6:66:86:5D:65:50:8E:16:7E:0E:E8:AA:3A
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/tvd71H71vKZmhl1lUI4Wfg7oqjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1500:910::/44
Signature Algorithm: sha256WithRSAEncryption
4f:5e:ed:da:17:17:c2:fd:b6:76:2f:0a:84:45:a4:f4:5e:19:
83:00:bd:b5:7f:17:35:15:13:3a:bc:85:01:a9:8a:bb:db:0b:
ed:66:b2:ba:7c:e8:e7:9a:78:99:b3:43:a4:4b:96:22:a3:14:
b3:06:76:41:8b:4d:ce:33:0d:b2:56:c4:0a:8a:9e:86:bb:ef:
fe:b1:44:1c:3b:f6:26:2e:19:01:59:f5:77:ea:2a:32:92:a9:
32:4c:ed:fd:e2:cd:81:97:0b:44:fe:d8:46:2f:3d:98:5c:61:
e3:01:29:d8:c2:34:0a:8f:04:70:65:4c:12:b4:4c:4e:68:fb:
5c:0e:37:39:c3:e6:0f:fb:99:97:91:06:0b:54:d8:5d:dc:17:
58:5e:09:ce:d9:aa:5e:cd:64:1f:8b:08:01:be:96:5e:81:36:
86:62:8a:85:34:06:7c:98:53:4a:77:fd:74:e5:5f:72:d5:35:
e0:89:62:8f:39:b9:df:aa:5d:e1:01:71:db:48:06:08:04:fe:
9b:72:d8:35:6e:0b:22:e0:da:68:5f:f3:04:e2:7e:11:1b:b3:
b5:0c:d9:e3:f3:8f:42:c4:ee:d5:5f:0c:08:a4:7e:83:a5:68:
60:47:a6:68:6d:66:78:59:41:e5:ae:db:53:25:0b:64:28:ec:
11:00:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:43 2025 by rpki-client