Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/fTdBXzX_wjVsaCcMmc4AAQ6qlo4.roa
File: fTdBXzX_wjVsaCcMmc4AAQ6qlo4.roa (raw, json)
Hash identifier: YJPgDmA6+lWa70RWmr2Z2Yx5naS+Coy9SWZAG40kkJc=
Subject key identifier: 7D:37:41:5F:35:FF:C2:35:6C:68:27:0C:99:CE:00:01:0E:AA:96:8E
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BECDA29F8BF52E11E31F20F3D9F8A
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/fTdBXzX_wjVsaCcMmc4AAQ6qlo4.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207963
IP address blocks: 2a0f:5707:ad01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:da:29:f8:bf:52:e1:1e:31:f2:0f:3d:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d37415f35ffc2356c68270c99ce00010eaa968e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:ff:e1:57:5f:54:2b:7f:37:29:86:32:26:
b8:7f:5d:44:90:fd:25:d0:ea:f4:7e:55:c5:b4:6f:
61:8c:87:ca:92:11:3c:3d:42:a3:66:23:5b:34:35:
28:7c:17:08:84:21:f9:c5:d9:26:e3:19:13:a3:de:
8a:9e:1b:4b:f5:4d:3c:54:7b:04:93:6d:b5:c6:0d:
1c:6c:5a:e8:99:89:37:86:4b:3a:d3:f1:74:8a:b4:
3e:97:07:34:26:67:70:b5:7a:34:e5:88:e4:ba:d1:
10:44:d1:c2:6f:07:3a:4f:1f:44:9b:57:5e:7a:ec:
69:b7:0c:7b:9c:b7:5d:c2:44:8f:a9:29:8c:cb:5f:
9d:dd:37:cf:cc:23:c7:87:bd:26:28:b3:b9:9d:38:
bd:8c:58:4d:4e:7d:cd:18:39:fd:c5:37:9d:b2:21:
70:df:94:c8:af:44:2c:df:6a:dd:e8:7c:57:03:53:
49:d2:60:be:64:eb:b8:c4:0e:61:94:06:bc:6a:52:
ff:fb:53:fb:6c:e9:fa:34:59:92:e0:61:33:0d:13:
46:ae:20:4a:2e:29:40:9e:2d:82:30:fa:9b:49:7e:
9b:c3:36:1e:1d:5e:fd:92:30:df:17:8e:dd:97:4c:
82:2f:76:dd:ba:68:e0:f6:cd:1a:ad:27:97:7e:04:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:41:5F:35:FF:C2:35:6C:68:27:0C:99:CE:00:01:0E:AA:96:8E
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/fTdBXzX_wjVsaCcMmc4AAQ6qlo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ad01::/48
Signature Algorithm: sha256WithRSAEncryption
b9:04:8d:50:11:ec:9e:86:99:81:b6:ff:55:c9:c3:b1:63:e7:
58:42:54:04:5e:21:f3:b7:ee:28:b9:b1:e5:f0:ab:e8:d4:c7:
cb:e0:5f:5e:69:d1:6f:ab:19:55:82:2a:cc:a9:b5:0c:af:b0:
ae:80:4a:ef:ca:d8:91:ca:39:f1:38:4f:26:83:fb:92:9d:39:
dd:f0:d6:13:62:18:af:a8:df:06:e3:63:4f:b7:d4:29:f7:75:
48:01:f8:a5:83:63:6a:fe:5e:fe:2d:cb:5f:1b:f5:e8:f9:2c:
53:cb:d9:d0:6a:f8:99:c7:2f:63:b8:07:2c:5f:1b:6f:25:ef:
36:96:95:6a:e8:ee:f2:17:01:bc:96:96:e0:7d:6b:e2:15:eb:
79:8b:04:55:17:53:bf:77:70:04:70:26:49:f2:c2:42:c2:58:
35:93:b7:a7:0f:84:9e:cf:34:4b:c1:8f:63:f4:20:f2:f2:50:
22:9d:41:de:cd:ac:5f:fc:8b:32:21:9d:57:83:a0:fd:a5:b9:
f7:c4:a7:b9:f3:43:46:67:3d:3d:8a:80:b5:78:9b:59:2e:a8:
5f:37:fc:21:1a:a9:b2:ff:b6:b1:4c:b2:e3:5f:e4:20:33:b2:
2a:0a:88:80:9e:26:76:a0:8c:59:c5:3a:93:3b:f6:0f:ea:28:
cc:f1:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:34 2025 by rpki-client