Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6gqkRaqKvSn410qw4LgbKcTum5U.roa
File: 6gqkRaqKvSn410qw4LgbKcTum5U.roa (raw, json)
Hash identifier: BVPOxhWOkeR1JwGSZhKK0sFDCs1HWwnuEXeVIVjPe0I=
Subject key identifier: EA:0A:A4:45:AA:8A:BD:29:F8:D7:4A:B0:E0:B8:1B:29:C4:EE:9B:95
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01956C3C834AF9F03DA20CC72FE80AAF37E1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6gqkRaqKvSn410qw4LgbKcTum5U.roa
Signing time: Thu 06 Mar 2025 16:14:19 +0000
ROA not before: Thu 06 Mar 2025 16:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 2a0e:15c4::/32 maxlen: 32
2a10:6d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:3c:83:4a:f9:f0:3d:a2:0c:c7:2f:e8:0a:af:37:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 6 16:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea0aa445aa8abd29f8d74ab0e0b81b29c4ee9b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:5f:a6:dd:b8:81:8b:10:7a:16:bc:6b:cb:
f6:07:20:86:76:2d:c5:0f:c4:1d:f2:7a:81:48:42:
66:d9:40:bd:a4:1c:de:25:ea:68:d4:cb:b9:91:b6:
83:b1:49:d0:1f:7e:3f:bb:e3:1e:01:cf:78:9d:34:
24:02:a1:c6:e7:7f:0f:55:79:8d:27:79:1a:be:dc:
2e:f7:9f:1f:a5:d7:a6:13:98:3d:b5:da:33:c9:42:
43:b4:b0:1f:46:4a:01:26:81:b5:33:bb:46:3f:0b:
ff:05:60:2e:23:d1:80:5b:91:d6:5e:18:58:7b:ea:
c0:60:27:6f:ac:b5:bd:c2:b4:ae:87:fd:3d:9b:20:
ff:55:6c:05:5d:a4:3a:fb:2d:62:8d:61:ed:91:c3:
e3:d0:7c:46:90:70:b4:f0:fb:53:87:63:72:b1:2b:
f5:8d:da:a6:d5:ef:8e:54:43:c3:20:d8:8a:10:ae:
fc:39:0b:a8:9d:68:fb:ee:8d:aa:24:8c:c3:3c:e4:
a2:71:e7:48:08:b6:9b:d5:1e:79:e1:53:7e:b6:9f:
7f:30:87:da:ab:ab:94:dc:95:97:87:20:95:e2:ee:
d2:fe:cb:4c:80:5c:26:33:21:40:73:39:5b:aa:2b:
7f:05:1e:40:cc:22:0a:ed:8d:e4:a1:30:91:1c:78:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:A4:45:AA:8A:BD:29:F8:D7:4A:B0:E0:B8:1B:29:C4:EE:9B:95
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6gqkRaqKvSn410qw4LgbKcTum5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c4::/32
2a10:6d00::/29
Signature Algorithm: sha256WithRSAEncryption
02:45:52:9f:38:98:1f:76:a7:6e:ef:30:22:4d:28:3c:ff:31:
57:53:56:ee:8e:64:53:92:1e:ab:bd:3f:f2:04:66:91:dd:1d:
cb:e1:0a:76:f0:de:32:81:01:f7:eb:ed:74:bd:46:7b:10:3d:
5b:35:b5:de:03:1b:a6:77:14:d0:c1:2e:ae:8e:4f:1c:46:c8:
9a:1f:28:e3:78:10:ba:20:3c:64:d2:e0:5e:d8:2c:9a:fa:78:
01:45:f2:0d:32:0e:bd:8e:8b:e5:39:f8:bb:c1:65:f2:68:bf:
63:9f:56:4a:8a:c2:53:2c:b7:86:9d:5e:59:4c:6a:eb:70:72:
57:5a:a8:01:94:84:03:73:07:e8:44:af:93:1a:73:7b:ba:83:
66:51:ba:92:40:9a:b8:03:9a:58:d9:4a:56:be:6e:99:8a:12:
42:67:dd:1d:be:52:37:05:20:81:7b:bc:fc:ed:e4:3a:43:b6:
cc:1f:9d:9e:26:42:95:0f:e5:b6:d1:cc:bb:0f:ae:e2:31:db:
1d:19:72:8a:23:72:60:a0:4a:34:73:38:98:f6:8d:60:d6:43:
9f:bc:a1:3b:7b:31:5c:34:e3:9f:f1:1f:b2:2a:42:05:6f:80:
f1:52:d1:94:a2:31:72:db:a9:a8:41:30:0c:e5:36:e8:37:f8:
1e:51:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:18:40 2025 by rpki-client