Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/9nLBkii6i9kqzksN6JMZwCrzYV4.roa
File: 9nLBkii6i9kqzksN6JMZwCrzYV4.roa (raw, json)
Hash identifier: qHoR8g3sPS0H1p08Rknlh5VjMVgipRCKDg0svuFgx6s=
Subject key identifier: F6:72:C1:92:28:BA:8B:D9:2A:CE:4B:0D:E8:93:19:C0:2A:F3:61:5E
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019425FC1859A96453A607D9E54EF3061C8F
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/9nLBkii6i9kqzksN6JMZwCrzYV4.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202283
IP address blocks: 2a02:1041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:18:59:a9:64:53:a6:07:d9:e5:4e:f3:06:1c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f672c19228ba8bd92ace4b0de89319c02af3615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:8c:e1:a3:06:db:ac:86:da:0e:d4:20:81:
95:75:3a:d1:d6:2d:9a:88:f4:ba:c3:10:36:5e:6b:
8b:67:4f:04:6c:41:e0:e5:ab:d4:2c:b8:51:39:80:
f9:b9:a3:93:86:21:bd:5b:8d:6e:c6:5b:4d:72:75:
c4:d8:8b:15:14:52:a3:dc:23:0d:9d:da:46:01:60:
80:d5:9a:a3:20:c2:e9:9d:6d:62:60:c5:43:9e:f0:
95:1b:20:74:1f:1b:a5:31:52:1f:ba:fe:cc:79:0e:
6c:fe:63:2c:d9:03:a2:17:12:6e:14:6d:35:a3:cb:
b6:ef:9e:67:d4:d6:91:ea:cf:d6:18:16:0f:6d:6b:
4a:f7:5b:d9:bc:63:15:35:ac:c9:fa:ab:91:2b:4e:
8a:e9:87:aa:92:b1:04:79:e2:a2:8b:7b:34:49:51:
da:31:d6:42:78:fe:5e:e2:2e:6b:fb:d0:2b:27:4f:
7f:87:cd:e7:a0:a2:40:de:7f:61:84:9f:bb:55:ec:
02:0e:e1:60:a5:8f:57:6e:c6:51:4e:47:ed:7a:21:
75:a0:60:64:52:4e:a4:9a:7d:82:8a:8d:fb:f5:77:
98:c5:30:87:f6:26:c4:87:af:5e:36:fb:63:f6:f0:
46:ea:a9:e0:c1:20:40:dc:9b:e3:cf:bf:01:92:18:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:C1:92:28:BA:8B:D9:2A:CE:4B:0D:E8:93:19:C0:2A:F3:61:5E
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/9nLBkii6i9kqzksN6JMZwCrzYV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:1041::/32
Signature Algorithm: sha256WithRSAEncryption
5f:96:04:e0:f9:44:ec:79:98:82:3a:83:23:fd:aa:d5:03:de:
2a:23:10:68:75:1b:7d:b2:bf:c6:5c:32:6a:0a:84:64:89:64:
a9:7d:ea:ca:15:86:06:27:39:e9:f9:89:19:03:c4:5a:ab:a2:
e3:10:f2:5f:f2:d5:a8:fa:6c:f8:31:7c:ac:15:25:24:5f:58:
c4:8e:a0:dd:7d:d3:71:d4:40:1a:51:8d:3b:8d:e3:28:a8:6f:
b1:29:37:10:b0:de:44:61:87:0c:a9:de:5e:ba:3d:6b:b9:2d:
40:ad:9b:cc:13:f7:c9:60:3b:fd:55:e9:b0:16:a8:e7:aa:d5:
c6:53:c7:ce:5a:25:12:74:69:d3:2e:aa:9e:eb:de:14:72:70:
f4:b2:57:18:78:58:c2:e2:f8:1b:e3:d1:64:9e:da:5e:bd:cb:
32:0a:b9:26:59:7e:63:e8:d9:1f:42:53:33:57:b0:0e:33:d6:
18:ec:b9:0c:28:25:aa:1b:e8:b9:94:88:7c:5f:eb:d9:86:01:
1a:ac:20:d4:fe:2b:4b:09:34:7b:bb:98:d2:88:a0:bc:f3:7f:
2b:22:9b:c4:46:ba:95:ab:4c:13:95:df:2a:5b:b5:77:20:3c:
32:6f:d3:15:aa:07:44:c8:7c:c1:a9:10:d5:e8:03:1d:ac:f5:
c8:45:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:22:09 2025 by rpki-client