Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa
File: hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa (raw, json)
Hash identifier: Xo1DxXqBfY11s6cBh+ynDozHMZaWken4xmavWyHXw6s=
Subject key identifier: 84:42:26:E9:BD:64:72:D2:90:38:17:68:D4:49:D1:1B:55:63:9F:24
Certificate issuer: /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial: 0194258FB6654D1F2B2A0F4571D04AD32E7D
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207954
IP address blocks: 2a0f:24c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b6:65:4d:1f:2b:2a:0f:45:71:d0:4a:d3:2e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=844226e9bd6472d290381768d449d11b55639f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:53:ec:9a:f8:79:51:7b:22:e1:53:b7:39:
0d:e8:d0:f3:fa:fe:e8:7a:92:f1:e0:32:45:37:0b:
f8:b1:25:04:71:59:91:a3:43:fe:ad:70:92:84:50:
39:5a:3e:fd:d0:09:61:f3:b3:26:d5:e6:ac:26:70:
f7:c0:30:41:0d:0c:00:a2:28:a9:20:b4:87:90:3c:
e2:cb:04:e4:ba:14:dc:91:8a:38:3f:d3:23:4b:52:
d7:f0:8e:5e:fc:96:50:0b:b4:fe:02:9c:c7:f2:ce:
a0:64:2e:c6:bc:38:43:2d:e9:97:50:67:fc:b1:62:
aa:a7:47:42:d4:da:78:8c:38:dd:9c:ec:c3:1a:1c:
51:39:cc:79:56:e6:60:df:47:14:5c:7b:4d:fc:9c:
ce:23:ab:4c:51:8a:53:b9:88:b0:65:6e:e5:9f:aa:
ba:19:48:52:02:ee:2c:a5:74:5e:4d:a5:82:38:9f:
74:40:21:50:77:d2:17:d7:6a:f7:6a:be:6f:37:b5:
ff:95:68:25:10:05:37:3e:1e:ab:b2:9f:3a:ea:d4:
8c:e1:b7:9e:69:02:7e:ae:21:31:fc:d4:07:45:f8:
0f:28:45:2f:31:18:3b:88:24:74:2f:39:78:d3:9b:
4c:7c:39:2b:7a:2f:ed:db:6f:16:73:de:19:f6:3b:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:26:E9:BD:64:72:D2:90:38:17:68:D4:49:D1:1B:55:63:9F:24
X509v3 Authority Key Identifier:
keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:24c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:66:6d:27:15:62:c8:4e:17:61:05:d9:1e:ea:9b:9f:8d:90:
a6:fb:ea:c3:b6:a1:f7:67:38:1e:2a:f5:d4:f7:67:2f:70:53:
52:5a:8a:a3:d1:c8:44:33:44:20:a4:43:8d:9e:39:8c:25:5f:
b0:6c:15:36:ff:55:f8:ae:54:01:f7:ef:35:f3:c1:f7:39:0c:
09:77:54:08:8b:5e:08:c3:c4:88:77:0f:9b:09:b2:11:8b:c6:
03:8a:4d:e9:15:98:a1:58:61:a6:e9:30:04:1b:97:ee:60:d8:
ef:3a:99:06:93:3e:b5:fb:b0:bc:19:c2:69:78:6f:51:ec:2d:
61:29:82:97:a6:0e:67:05:f3:99:d2:a8:03:7e:b6:48:4b:5a:
c1:0f:14:28:8a:d4:37:ce:1f:fa:26:64:db:ba:48:41:e5:b3:
db:18:92:d7:d5:52:ce:04:55:01:c2:03:8a:f9:74:b8:b8:ee:
c6:3c:6a:50:5d:65:7b:cd:57:9a:bd:1d:83:7e:b4:2a:21:74:
b6:97:5f:32:78:ba:7f:ac:69:95:ef:41:dc:a9:b5:f9:53:01:
89:a2:50:b4:1c:c0:c8:f6:cd:d7:b6:d0:df:40:67:93:75:09:
4b:09:e4:4c:ac:25:65:50:cc:93:ea:6c:a3:ab:9c:91:6b:24:
c2:1b:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:04:45 2025 by rpki-client