Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/n4kFPmoeu8N6PxKA-NEzsZAY5Kk.roa
File: n4kFPmoeu8N6PxKA-NEzsZAY5Kk.roa (raw, json)
Hash identifier: ZxwM3ELkSfxhBVVbUX7wLpIQ7CF+87Rkwd0JyuBuJ58=
Subject key identifier: 9F:89:05:3E:6A:1E:BB:C3:7A:3F:12:80:F8:D1:33:B1:90:18:E4:A9
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC768D53A79C4B02CD59C61731C74
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/n4kFPmoeu8N6PxKA-NEzsZAY5Kk.roa
Signing time: Thu 02 Jan 2025 05:48:21 +0000
ROA not before: Thu 02 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61350
IP address blocks: 2a0e:aa07:e038::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c7:68:d5:3a:79:c4:b0:2c:d5:9c:61:73:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f89053e6a1ebbc37a3f1280f8d133b19018e4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:e6:37:7d:37:67:a5:a1:79:5c:48:e8:22:
92:a2:38:88:12:64:1f:60:52:15:6a:d8:04:cf:27:
0c:b8:77:65:bc:ee:5a:5e:f5:3f:f7:2f:4c:3b:8e:
36:68:15:0c:ff:9b:36:a6:b8:52:f8:6b:f7:97:37:
94:d5:cb:19:82:0e:cb:37:3b:46:cc:24:9e:7b:84:
30:89:50:d7:a0:2f:b9:43:69:12:34:e3:37:be:0b:
39:36:b2:94:98:41:d8:84:3b:2a:5d:a9:2f:31:1d:
11:5d:61:63:ab:b1:c7:82:76:c0:26:8c:ee:c2:be:
1f:c5:46:d9:45:5f:de:02:d8:05:ac:00:3a:10:5f:
3a:a7:de:56:94:0c:5b:80:03:de:56:62:7e:e0:23:
ae:45:48:9e:be:b6:1e:e4:03:b0:89:1c:25:29:ed:
58:79:59:53:b6:f8:12:40:ed:9b:aa:0c:f1:77:f1:
5a:09:11:36:6a:2e:39:75:30:90:26:b2:9f:e3:6a:
7a:64:e5:ec:b6:eb:28:4d:66:a3:79:88:d5:d7:83:
53:4f:c8:71:a4:fe:c6:db:0f:08:a5:9d:f6:59:e3:
23:bf:25:e4:8e:8a:08:b6:4a:3d:51:e7:e7:30:50:
f0:9b:92:17:62:19:bc:80:ca:8a:39:26:67:6d:18:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:89:05:3E:6A:1E:BB:C3:7A:3F:12:80:F8:D1:33:B1:90:18:E4:A9
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/n4kFPmoeu8N6PxKA-NEzsZAY5Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e038::/48
Signature Algorithm: sha256WithRSAEncryption
11:28:bb:58:c8:5b:52:cf:d6:87:1e:e8:80:62:1f:7a:33:bf:
45:b5:12:8d:8d:e0:98:25:84:18:36:72:bd:3f:97:14:f4:dc:
7f:bf:18:06:1d:19:97:c8:e8:5c:32:84:db:58:72:ea:71:66:
27:a0:fb:54:da:02:49:57:4b:b9:e3:8b:28:de:28:4f:01:85:
04:5c:42:23:d6:98:6f:02:b1:f3:c9:38:f7:0a:bb:86:3c:d2:
be:5e:4a:ac:22:8f:5d:9f:b5:ae:72:f2:fd:f9:23:ea:3d:f5:
ef:c2:92:4c:c2:ba:77:0d:f9:53:7e:3c:c5:1e:09:33:e6:a4:
79:54:46:bf:6b:9e:7a:5d:1d:c2:24:82:0d:0c:5e:24:14:ba:
89:5f:7a:0d:45:7c:66:8f:ca:00:6f:7b:69:61:d5:92:a6:fb:
28:0c:c7:57:d7:30:e2:eb:c1:6e:96:55:a2:9b:76:4a:6c:21:
74:a0:b2:ab:c8:b2:36:25:5d:41:f7:fe:80:6a:84:1f:d5:bb:
e3:45:21:6e:ac:a5:c0:75:23:76:12:45:4a:b5:86:55:21:3f:
6e:3e:17:37:83:01:a8:33:c5:f8:c1:85:7b:67:c8:a0:07:89:
ab:1e:67:a7:df:5c:78:9a:51:60:69:a0:d5:13:c4:70:cd:8a:
bf:a2:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:46 2025 by rpki-client