Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa
File: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (raw, json)
Hash identifier: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=
Subject key identifier: 1F:A9:8F:4C:1F:7E:1E:95:8F:0F:65:64:A5:B5:13:06:DC:72:7A:AB
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBF9DEB0751B1FE531F5111BAAE12
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216425
IP address blocks: 2a01:e281:a500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bf:9d:eb:07:51:b1:fe:53:1f:51:11:ba:ae:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa98f4c1f7e1e958f0f6564a5b51306dc727aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:a2:3b:3e:52:a2:83:16:e9:2d:1c:cb:4d:
e6:92:55:64:90:ea:76:e9:dc:c2:e3:de:ad:11:70:
4d:97:d1:93:48:c8:19:63:2c:d1:f4:ee:8d:39:a2:
a2:30:88:dd:ae:a3:bd:9a:b7:ec:ed:e6:0d:d0:21:
ba:37:c5:db:6f:a7:79:a1:8c:12:67:07:ab:11:17:
f9:32:c8:ba:59:4a:4a:34:ff:b2:d6:ca:ca:ef:84:
b9:9e:ed:08:ef:5a:09:b9:f9:3d:54:1a:38:c5:27:
b3:eb:6e:8f:d5:c5:e1:df:f2:3a:0f:f9:eb:d8:b0:
ad:77:af:ed:61:3e:9b:39:47:62:0b:54:0d:44:a8:
fc:8e:9c:5b:ca:a3:a7:33:3f:3a:0e:13:a8:9c:1b:
d7:49:3b:29:03:c0:c2:19:5c:25:09:4b:13:ca:de:
00:3b:1d:5e:67:cb:e0:47:84:7b:14:3e:bf:4c:ca:
28:fa:44:5e:8e:59:07:f1:14:75:61:5c:92:7e:70:
ec:ef:99:09:8a:2f:69:ba:82:92:c8:a7:e4:90:e4:
bc:7b:f0:b8:23:4d:f6:34:0a:38:a6:63:b7:1d:f6:
b7:af:2e:25:7e:06:40:bc:d5:98:a8:4c:d4:a3:03:
45:c0:de:a6:06:48:b8:03:ab:cd:9c:29:94:5d:06:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A9:8F:4C:1F:7E:1E:95:8F:0F:65:64:A5:B5:13:06:DC:72:7A:AB
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a500::/40
Signature Algorithm: sha256WithRSAEncryption
9f:21:cf:a8:cf:6a:00:cf:20:de:9e:8b:62:b0:f1:00:07:c5:
3d:7f:e0:03:cd:ba:3d:08:60:04:fc:cc:60:4a:7b:cd:1f:01:
47:ab:19:dd:c2:d9:8d:5d:6d:a7:20:cd:3d:85:9e:4b:7f:60:
4d:b3:97:02:07:24:60:c6:aa:d2:c3:08:1b:cd:c3:e9:e8:fe:
e6:a2:ea:dd:38:5a:3e:ce:31:9d:9f:16:b2:1c:38:be:38:9b:
1a:13:9c:7d:85:21:f8:61:79:ce:3a:bc:9d:95:a0:2d:cd:c5:
c1:dc:b8:ab:10:01:6b:01:e6:99:ab:b7:c8:bc:b2:8e:cc:fe:
a3:a6:30:64:6d:3f:0d:ed:0e:bd:ea:1b:27:21:aa:19:2f:c1:
72:70:6f:10:13:96:d7:3b:0f:83:95:47:48:b8:f2:8f:23:aa:
7b:99:68:cb:c8:28:8b:ba:6e:54:d5:ed:73:27:f3:74:83:e9:
82:c3:8a:0c:2b:ac:21:25:e7:d8:a1:04:c6:4b:a7:71:02:1b:
cb:0c:d6:9f:46:63:17:2a:41:37:2a:cd:8f:86:62:a3:be:eb:
48:61:a8:10:8a:44:88:c7:ef:44:df:9f:e5:aa:93:d0:db:42:
f8:b4:03:9c:b6:7e:e3:a8:64:5d:e9:51:64:47:fd:16:65:a2:
c8:52:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:43:41 2025 by rpki-client