Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xg2lL2H4Kg4A_kqpysPlQhxo_dA.roa
File: xg2lL2H4Kg4A_kqpysPlQhxo_dA.roa (raw, json)
Hash identifier: 6YknwHgISLKz/bHVdwLMQOoM4xZ1DrhWN5bAQ+kRDaI=
Subject key identifier: C6:0D:A5:2F:61:F8:2A:0E:00:FE:4A:A9:CA:C3:E5:42:1C:68:FD:D0
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214417D0FDDF4C59AE21240FBE5D6E34
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xg2lL2H4Kg4A_kqpysPlQhxo_dA.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:e9c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:17:d0:fd:df:4c:59:ae:21:24:0f:be:5d:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c60da52f61f82a0e00fe4aa9cac3e5421c68fdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:fb:2e:1d:15:6c:4f:66:c8:ab:09:f7:2a:
4a:7c:36:92:20:5f:21:4a:22:dc:ee:c5:7e:22:f1:
5e:68:78:f2:75:5e:c1:71:08:77:8b:30:d8:09:de:
37:e4:a1:74:91:7b:32:ed:20:92:c2:da:ef:52:00:
ad:cc:db:99:f7:5b:de:c1:f2:b6:43:ef:33:86:aa:
dc:d6:3d:c9:3e:c8:8f:a7:e5:a0:bf:db:43:2a:9b:
32:3b:4b:4b:b9:f9:d8:44:c4:19:69:b0:07:11:29:
ab:4c:88:d6:67:0c:af:74:c9:f3:54:ce:4b:f2:bc:
8f:95:3f:f4:8f:9b:25:89:37:ed:b2:04:c8:b8:a2:
a3:92:ad:08:1d:eb:03:4a:67:c9:91:e2:b0:64:b4:
e0:78:9d:40:eb:4c:2c:af:9b:4f:f9:9f:6a:64:02:
b8:6e:e6:ea:4b:99:e4:8d:d3:f6:d8:01:4a:e1:39:
b0:2e:39:40:20:77:6f:b7:ba:fa:cd:4b:5c:b1:70:
9c:f2:2c:0b:04:fe:62:79:0d:78:21:8c:e6:8c:e4:
74:f8:e1:6c:53:ff:52:9a:fb:8d:d6:18:cc:93:02:
2f:e6:e2:58:4b:c1:7a:0a:73:6b:c3:05:4c:90:81:
8d:60:56:e8:5a:ed:a6:be:ce:3b:85:c2:bb:74:c1:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0D:A5:2F:61:F8:2A:0E:00:FE:4A:A9:CA:C3:E5:42:1C:68:FD:D0
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xg2lL2H4Kg4A_kqpysPlQhxo_dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e9c3::/32
Signature Algorithm: sha256WithRSAEncryption
0d:d1:20:89:dc:c1:f0:4c:e7:31:ad:2d:5e:33:ac:a3:20:c1:
a2:23:c1:b7:a6:fd:47:a6:d1:02:c6:09:77:16:4e:45:c2:11:
13:1a:7e:ae:21:5e:f5:74:6d:62:d0:a4:b0:ab:c1:48:3b:ea:
ce:67:33:a7:57:eb:85:1d:46:8f:0f:34:b9:e5:1e:56:8f:22:
8e:c7:a2:89:3b:3f:7c:4e:8b:d6:dd:9b:6b:f7:76:08:8a:6a:
af:e4:8a:ac:cd:81:79:b5:9d:20:e9:a1:04:92:df:ef:cc:6d:
96:a2:fa:db:c1:40:9c:21:27:67:3c:1d:21:8f:33:59:bb:09:
13:4f:71:d8:15:65:bc:14:8d:c2:06:f5:08:66:b7:cb:a3:df:
e8:cd:1a:2b:c9:90:b6:fb:63:91:c1:63:70:98:eb:6f:7a:a4:
65:75:7f:88:13:b1:3a:c0:96:54:b1:05:4a:32:37:5d:a4:11:
75:67:54:0b:ad:e8:e5:e5:bc:e2:14:f4:65:3a:29:e1:19:80:
12:06:17:ef:f9:3d:aa:b6:7b:7d:4d:26:88:92:b8:02:ae:2c:
da:ff:46:e0:3a:85:e0:81:33:32:53:ca:ea:dc:cb:28:09:19:
e6:cc:02:29:47:e7:3a:c5:91:77:bc:67:3d:dc:9a:21:d2:45:
27:ac:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:53 2025 by rpki-client