Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/6DAE46YGraEJYVV3HiGtZg9tT3U.roa
File: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (raw, json)
Hash identifier: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=
Subject key identifier: E8:30:04:E3:A6:06:AD:A1:09:61:55:77:1E:21:AD:66:0F:6D:4F:75
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 019420D5F3975BA53A812B7231C44F911C6D
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/6DAE46YGraEJYVV3HiGtZg9tT3U.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58010
IP address blocks: 2001:67c:1bf4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f3:97:5b:a5:3a:81:2b:72:31:c4:4f:91:1c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e83004e3a606ada1096155771e21ad660f6d4f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:02:8c:3e:19:72:77:96:87:dc:09:42:1c:
2b:52:3c:93:73:5f:77:53:96:08:b8:a1:a7:d3:ce:
5c:9c:cd:63:03:97:27:36:ff:3b:17:4e:55:94:18:
ef:f7:eb:af:3a:a8:01:37:c1:3d:7e:8d:6e:c3:e3:
0e:28:19:1c:ae:1a:16:05:70:08:d1:97:45:30:41:
a6:b2:2e:ec:1f:95:1d:75:86:27:4d:04:2b:59:38:
ef:9f:28:ab:8b:44:a3:a5:be:5b:6e:2c:3d:0a:1a:
5e:00:13:6c:20:ca:e5:0c:a9:52:55:42:3b:7b:8e:
45:07:c0:20:85:ad:2c:34:14:dd:96:47:36:e8:d0:
64:d1:b5:25:a8:2a:2c:e2:04:61:f5:0e:a2:96:a7:
0d:fe:f4:05:a3:22:4f:2b:71:e4:bc:d9:69:29:b2:
1f:af:f4:9d:28:29:3a:3d:ba:d2:ce:de:70:ef:19:
e7:b5:cf:25:2c:33:15:7e:df:60:11:57:e1:7b:44:
62:f6:57:09:ea:17:d0:82:36:95:a3:51:a3:1b:f5:
01:10:d8:62:4d:00:0a:81:26:92:cf:c9:9f:98:3e:
9c:5a:06:6a:43:de:2c:95:c8:24:0d:b9:8d:2d:83:
53:0b:32:3a:60:d5:1e:9f:a4:99:f4:48:6e:47:ce:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:30:04:E3:A6:06:AD:A1:09:61:55:77:1E:21:AD:66:0F:6D:4F:75
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/6DAE46YGraEJYVV3HiGtZg9tT3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1bf4::/48
Signature Algorithm: sha256WithRSAEncryption
86:3c:db:9f:df:65:5b:0e:de:e6:92:9e:3d:88:e1:3e:76:8d:
5a:8f:0f:57:7c:1c:c0:e2:4c:64:fb:63:48:5f:5c:fd:bc:19:
67:69:34:5b:e0:a9:27:b7:84:47:e3:e0:45:92:51:d5:cd:eb:
e4:76:82:a8:1f:80:69:e6:ff:46:4c:b8:9a:be:62:2c:47:d5:
cd:8b:75:a5:a6:e3:81:24:ba:09:db:05:ba:14:87:65:7a:3c:
66:b0:5e:ad:cd:1f:59:56:d0:44:21:59:8f:e2:19:9a:df:ce:
ee:8e:ef:e8:34:51:fb:3c:16:1c:83:87:43:b8:b5:59:c6:36:
d8:04:6e:2d:21:b3:35:cb:09:19:3c:2f:c7:1d:0d:15:7a:87:
ed:dc:08:3d:b1:32:5e:e3:a7:dc:3f:40:93:12:bd:77:fa:e6:
95:f4:03:20:68:96:fc:62:46:f3:9f:15:56:b1:da:1d:6c:8c:
61:46:4b:3b:73:92:ba:6e:76:92:92:68:b2:1b:bc:a6:76:92:
40:8a:1d:33:c9:62:77:49:20:cd:8b:1c:84:4b:ce:4c:19:a5:
ee:27:ab:ce:5b:08:eb:3c:1d:a0:52:3b:0b:04:a0:f9:35:44:
1f:8b:66:da:8f:d1:77:0d:63:f3:b0:95:09:32:8b:76:9f:c2:
94:04:ae:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:27 2025 by rpki-client