Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/7uT6U1lLurQEaJor-cFGlwsDu_k.roa
File: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (raw, json)
Hash identifier: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=
Subject key identifier: EE:E4:FA:53:59:4B:BA:B4:04:68:9A:2B:F9:C1:46:97:0B:03:BB:F9
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194258F0E1871B411716CAF97779ADFD0EA
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/7uT6U1lLurQEaJor-cFGlwsDu_k.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9098
IP address blocks: 2a0f:b4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0e:18:71:b4:11:71:6c:af:97:77:9a:df:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eee4fa53594bbab404689a2bf9c146970b03bbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:fe:26:f2:01:77:61:84:5d:80:b7:29:c8:
d7:be:97:2d:dc:cb:80:b1:7e:a5:dd:27:c7:ce:ef:
a3:14:2d:2c:05:7b:f4:87:8d:32:d2:06:d0:0b:e2:
7e:54:2f:53:9e:17:46:45:b8:47:73:90:96:c5:e3:
5e:83:5b:21:d1:a2:96:ea:7c:b9:15:f5:eb:6a:6f:
84:e8:b2:53:e2:68:af:f2:9e:67:69:95:73:5d:52:
63:42:a5:ba:94:18:f4:2c:f3:50:9c:0b:48:fa:88:
22:88:c6:e7:e6:80:12:42:83:68:50:c3:1c:4c:3f:
42:9e:04:96:dd:fc:d3:52:11:ad:f4:3e:6d:c0:c8:
b5:9f:55:b6:c6:93:b9:5f:5d:7a:30:48:b8:2c:90:
93:2c:7d:b9:8f:97:cf:73:2d:7a:ce:94:1e:60:19:
c5:94:32:92:8b:4e:5d:96:7a:f5:56:c7:a1:a4:21:
a1:2f:c9:ba:6b:a5:4a:39:2e:df:0a:b6:d8:ba:31:
7a:ed:d2:b6:20:61:3d:91:30:f8:28:e7:31:dd:23:
57:f4:42:2b:a7:54:63:73:f8:81:73:0d:45:3b:ed:
c9:19:1c:69:25:cb:80:b5:41:51:2f:29:75:3a:56:
a5:f1:c9:d3:1f:25:2c:56:57:33:82:f5:b5:56:d9:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:FA:53:59:4B:BA:B4:04:68:9A:2B:F9:C1:46:97:0B:03:BB:F9
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/7uT6U1lLurQEaJor-cFGlwsDu_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
72:24:24:dd:bb:ef:36:da:de:54:e5:06:65:5c:76:b4:a7:9a:
fd:46:82:b4:d0:e7:74:d7:57:f3:27:88:35:0e:8a:cb:ca:5d:
e7:af:5c:0a:0b:60:54:6c:37:9f:ae:f6:20:7e:10:ff:98:3a:
86:08:00:ba:ae:16:84:8a:41:55:a9:34:89:f8:fe:3f:34:2c:
22:44:6e:64:df:cc:be:3a:dd:fa:c1:95:8d:a0:42:38:48:28:
1c:30:62:92:58:79:46:52:22:e4:64:ba:3c:19:67:f9:7a:b0:
6c:0f:f7:a3:42:34:67:3d:ef:29:6b:3c:83:d7:9d:c2:f6:a6:
23:31:e0:7e:79:ad:25:a3:b7:4d:98:df:89:2d:30:a5:46:0c:
46:f5:a4:ee:e2:43:d9:b2:6a:f2:3d:cf:75:60:e2:54:89:84:
b2:cd:d6:40:58:f7:55:1c:df:2a:ae:0e:fe:a2:e6:10:9a:28:
57:21:12:ba:8e:a7:d0:58:e8:e3:1d:67:a2:be:59:8f:a0:cf:
23:4c:c7:60:76:79:ac:8d:49:4c:75:41:cb:fe:fa:58:61:70:
6f:55:49:f2:af:f1:30:7b:85:9f:18:14:8c:3f:a6:af:85:28:
f7:13:5f:b8:83:09:ec:4b:ef:88:33:c8:38:30:54:c8:da:95:
20:f6:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:14:14 2025 by rpki-client