Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cmu8PMp2kr6FffLIKQ7aEJLSkRg.roa
File: cmu8PMp2kr6FffLIKQ7aEJLSkRg.roa (raw, json)
Hash identifier: B2v6zqfiqvJhqDX39v/ZQ3lFzQJt8txmzT7YTHbgaX4=
Subject key identifier: 72:6B:BC:3C:CA:76:92:BE:85:7D:F2:C8:29:0E:DA:10:92:D2:91:18
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED4E62BBCA038D25AA9AFDC919F11
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cmu8PMp2kr6FffLIKQ7aEJLSkRg.roa
Signing time: Thu 02 Jan 2025 05:48:25 +0000
ROA not before: Thu 02 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205298
IP address blocks: 2a0e:aa01:ab04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d4:e6:2b:bc:a0:38:d2:5a:a9:af:dc:91:9f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=726bbc3cca7692be857df2c8290eda1092d29118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:5c:14:fe:b4:01:4b:a9:6d:0d:65:69:c0:
27:65:af:be:29:bf:f1:e4:e3:04:88:fd:9a:84:be:
b6:f3:ee:e1:7a:76:54:6c:e6:02:97:14:38:05:24:
cf:6b:48:91:7d:75:0b:bb:90:52:22:3e:f4:06:e9:
cd:c1:e1:46:03:7f:db:77:af:59:30:52:dd:04:3f:
f0:df:6d:56:4c:f2:2e:41:7c:b9:cc:f6:f9:78:48:
27:d6:c3:5f:b3:d4:80:32:2b:95:11:ca:d0:de:a7:
93:e9:c4:cf:9d:a3:2e:65:ef:9e:11:83:a0:1a:f3:
4d:a8:3f:1f:0d:4f:c7:e4:89:1a:f4:c0:93:90:a1:
ec:4f:94:05:90:a4:a9:94:7c:78:03:54:c6:82:28:
15:87:79:f1:9f:ec:60:0e:c3:b0:ac:33:35:46:a3:
96:4f:86:52:66:39:22:f8:e2:eb:8d:4c:2c:da:f6:
e8:cc:97:f8:d9:7e:7d:24:5c:be:d9:61:0a:57:a4:
56:8f:c0:3c:13:83:be:4e:01:7e:6d:74:f9:a6:9f:
ed:7c:de:99:bb:3f:3e:fd:5a:2b:51:f7:1e:5b:97:
67:ab:8a:a2:16:ff:82:ca:58:f4:fb:19:1c:f7:cd:
2c:07:a2:dd:6a:55:16:1f:54:6f:0e:79:c2:89:52:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6B:BC:3C:CA:76:92:BE:85:7D:F2:C8:29:0E:DA:10:92:D2:91:18
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cmu8PMp2kr6FffLIKQ7aEJLSkRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:ab04::/48
Signature Algorithm: sha256WithRSAEncryption
10:4d:3e:29:8f:1e:1b:18:0c:f7:f3:5a:94:d0:99:90:e3:1f:
dc:5a:a2:9d:89:6e:ac:45:90:79:60:15:ca:a1:07:1f:9b:1d:
a4:b7:58:93:af:03:77:01:81:a8:d4:85:67:b8:5d:8c:6d:e7:
94:af:23:66:2e:eb:92:07:52:0f:65:7c:60:90:11:d2:cf:ff:
0c:0b:1e:31:b3:d4:fb:f3:c4:8c:4c:c5:ef:89:2d:91:f8:12:
34:32:d5:9f:21:58:57:81:f3:df:2e:13:99:69:96:0c:8c:12:
09:04:f1:ec:63:03:c9:fa:54:14:e0:57:78:65:cf:6c:67:a1:
e8:79:ca:c4:6d:17:56:c4:1c:99:3b:72:93:27:26:91:eb:4a:
3a:c5:dd:07:54:7f:b4:2e:8f:72:28:a2:d2:b2:4e:0b:a4:5d:
8d:62:1f:f4:b6:29:b4:88:2c:03:80:d7:cf:6f:fb:99:43:ca:
05:32:33:63:5d:81:7e:a7:84:f6:16:06:88:72:e2:2c:77:bc:
41:eb:27:d1:fc:a9:23:da:af:38:44:0a:82:a7:b0:8a:7b:6e:
d4:49:ed:66:5d:d4:a6:a3:28:a6:96:a6:64:d5:e2:a8:3e:07:
38:c1:6c:37:85:dd:06:19:66:6d:dd:69:df:f7:72:ed:9f:fe:
55:34:1a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:59 2025 by rpki-client