Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DryXQlC-O6D9dchGkCmKyUCSsXI.roa
File: DryXQlC-O6D9dchGkCmKyUCSsXI.roa (raw, json)
Hash identifier: B9dLWQKoYikqSd8ehtteDkH0W34vjGERp8Sj/XEwj6U=
Subject key identifier: 0E:BC:97:42:50:BE:3B:A0:FD:75:C8:46:90:29:8A:C9:40:92:B1:72
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01949809816D34650A2746EAB68BBDDFBBB1
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DryXQlC-O6D9dchGkCmKyUCSsXI.roa
Signing time: Fri 24 Jan 2025 11:19:07 +0000
ROA not before: Fri 24 Jan 2025 11:19:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43639
IP address blocks: 2a02:26f0:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:09:81:6d:34:65:0a:27:46:ea:b6:8b:bd:df:bb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 24 11:19:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ebc974250be3ba0fd75c84690298ac94092b172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:b7:6e:a0:f2:ef:9c:4e:14:45:07:45:86:
e1:89:fc:e2:98:f7:17:28:db:ba:90:ea:da:1c:34:
24:79:5c:91:26:bd:25:c5:20:49:83:a4:30:cf:47:
12:83:99:5e:7c:17:0a:c3:3f:07:37:d2:01:d9:5c:
fc:0a:b8:21:d8:86:07:50:67:33:f1:24:cc:4c:a6:
c4:d4:f7:14:ed:86:58:86:aa:0a:ca:b2:12:27:4f:
ab:1a:8c:2b:35:d1:53:f2:af:ea:16:52:5d:79:08:
33:e3:62:3f:b5:23:34:a8:e4:08:62:fb:87:54:32:
64:cb:5a:e8:84:ef:d9:6a:8c:ea:be:61:0f:d2:0e:
9b:c3:ee:2e:6f:25:91:4a:f8:1d:7a:9f:ed:ec:bb:
77:cb:fc:fe:18:d6:a9:55:37:35:43:02:60:2f:ef:
f0:9b:4f:87:0d:4e:73:c8:26:59:95:db:a4:b0:82:
c6:57:a4:94:b2:5b:8c:b3:12:6f:f9:45:8c:df:bb:
73:59:88:bc:49:c4:0a:72:62:3c:fc:35:3c:59:75:
fe:44:99:b2:31:5c:2c:72:cd:00:88:1c:27:43:6d:
89:92:6c:c5:72:2a:38:3c:5c:f0:91:a5:6f:6b:d7:
d9:b5:9d:67:7e:0e:f6:7a:aa:bc:2d:ae:18:9d:27:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:97:42:50:BE:3B:A0:FD:75:C8:46:90:29:8A:C9:40:92:B1:72
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DryXQlC-O6D9dchGkCmKyUCSsXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26f0:80::/48
Signature Algorithm: sha256WithRSAEncryption
64:99:a4:8c:0a:9e:ce:6b:89:2d:37:99:d7:35:ad:09:f8:aa:
8d:92:fd:23:83:cc:10:d3:a7:cf:c2:f7:74:66:e8:1d:22:90:
93:5b:4a:e1:7d:aa:42:cb:af:35:22:9e:0f:05:d4:bc:91:8e:
a1:c3:e3:60:aa:7d:29:b8:05:93:2c:62:0c:4f:a3:ed:71:c7:
3e:83:70:cb:f5:25:e4:eb:92:fb:25:47:a9:0e:73:dc:5a:41:
b9:38:2e:ed:0d:31:66:1d:b8:4c:17:a5:41:70:83:a1:74:0a:
0f:a3:56:e9:7c:4f:91:ee:ab:03:0c:c3:b6:e8:0d:ca:4e:11:
b1:ee:89:de:02:8a:0e:b3:da:c3:89:1c:a6:19:6e:b2:99:be:
6b:d6:14:2d:02:d2:78:87:7a:b9:c3:54:7e:b0:6b:54:35:10:
e1:a6:ae:4c:c6:b6:d9:7a:f2:77:05:5e:5a:1e:f2:d0:04:dd:
61:8e:f5:01:bd:3d:f3:4e:26:4a:c5:4c:9f:80:ac:6d:6b:89:
a3:4e:1d:11:54:6b:c0:34:28:8a:88:37:62:7f:f0:22:ed:f8:
a3:6c:1c:6a:85:e2:9f:a3:e4:5e:93:8f:02:0e:0e:e4:5a:35:
f7:5b:4f:b8:3e:62:fa:a5:8f:92:75:fc:2a:f6:14:cf:8e:73:
91:3c:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:21 2025 by rpki-client