Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa
File: 79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa (raw, json)
Hash identifier: ql/wdfFz1qsER0EkZDThbVWptAlBg9mw+jziuKWlZyc=
Subject key identifier: EF:D2:D8:AA:32:8D:4C:93:74:A2:E2:86:CD:D7:1B:AA:F4:E5:01:44
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 01942748607BB46CED3198216F84FAF608C3
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210776
IP address blocks: 2a13:1200::/44 maxlen: 44
2a13:1200:10::/44 maxlen: 44
2a13:1200:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:60:7b:b4:6c:ed:31:98:21:6f:84:fa:f6:08:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efd2d8aa328d4c9374a2e286cdd71baaf4e50144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:db:62:e4:8f:e1:b6:a0:0d:f1:b8:60:1c:
ff:6d:86:99:64:fb:c7:f0:14:fb:6f:59:0e:2e:1a:
95:de:52:39:b2:12:aa:b2:e9:e5:61:7c:51:ba:58:
5a:4f:89:6d:98:ea:1b:43:6f:f5:cd:a5:74:8c:15:
3e:2f:5f:7f:8f:91:66:94:74:3e:1c:7a:5a:50:25:
d5:ff:75:26:3d:7e:b3:9a:e7:dd:bf:26:0c:d2:cd:
6c:a3:42:cb:58:8f:6a:9f:ac:4c:1a:5b:72:2f:a3:
b4:1c:be:22:4f:ef:94:aa:95:7c:7f:6d:61:5e:c6:
ee:69:5e:e6:16:5a:6f:f5:0b:8a:be:88:f2:3b:8f:
92:76:0f:01:97:ff:1c:a8:c7:bb:30:00:50:2f:9a:
f6:56:89:01:15:6e:e5:cc:da:58:61:0d:66:a8:78:
1e:8e:0b:eb:c4:21:0e:cd:db:18:b4:95:db:07:ba:
13:2e:f0:cc:61:27:09:7f:68:6c:69:5d:84:ef:b1:
d4:ac:82:b1:6f:29:2b:42:4b:86:8d:48:c8:fc:a5:
73:5f:80:39:95:29:58:b6:e4:ae:c0:85:1c:37:ff:
85:30:89:e1:a3:2a:06:3a:93:b0:8a:69:77:76:aa:
18:7f:64:b9:18:53:7f:bb:03:b8:fb:07:af:03:00:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D2:D8:AA:32:8D:4C:93:74:A2:E2:86:CD:D7:1B:AA:F4:E5:01:44
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1200::-2a13:1200:2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cd:fe:af:ea:01:77:e2:ee:9a:96:b4:41:6b:f8:54:4d:8c:38:
9b:be:30:29:45:ef:b9:f7:7a:cf:1f:44:70:de:e1:8d:c8:d0:
69:af:10:2e:93:a5:45:26:47:a7:d6:4c:49:79:07:85:c9:eb:
ee:a6:da:9d:dd:94:bd:ea:50:be:fb:c6:05:b9:5c:5b:85:72:
bd:47:31:2b:58:02:3d:3a:c8:89:83:fb:51:0f:96:21:45:bf:
42:a5:d6:af:38:91:47:5e:b1:06:11:dc:03:84:da:71:83:28:
9f:ad:0e:e8:2a:04:95:d6:db:a9:ec:f1:ed:03:cd:45:ec:08:
ca:04:0d:8f:1c:28:6c:2e:ff:3d:00:db:08:7e:9b:11:43:19:
fa:93:5a:d5:c9:29:01:26:f7:c8:c2:1b:53:de:35:86:3d:b3:
8a:fe:35:9a:5e:84:21:54:e2:df:95:0b:16:17:2c:5d:cb:4c:
11:2a:3e:1c:0f:88:fa:52:5c:fe:3b:11:56:68:8b:f2:f9:2b:
6d:91:d7:bb:1b:7e:02:74:27:ff:f1:1f:2d:3b:29:53:63:cb:
c6:2e:1b:91:db:10:b1:00:44:a7:d0:ca:70:00:ec:2a:6e:2f:
7a:b1:cd:b7:a7:6a:f0:e8:25:ba:22:29:cb:56:fe:11:b4:02:
3a:2f:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:23:14 2025 by rpki-client