Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/redZ5Lo-6i46yM5qdUMWwkSisZE.roa
File: redZ5Lo-6i46yM5qdUMWwkSisZE.roa (raw, json)
Hash identifier: HxevwAQ5SK1xf86uDMqoDN6xfryXXeJR1/gwiD3DlWk=
Subject key identifier: AD:E7:59:E4:BA:3E:EA:2E:3A:C8:CE:6A:75:43:16:C2:44:A2:B1:91
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 019420D6048DC7C57A82D556277EB658FA99
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/redZ5Lo-6i46yM5qdUMWwkSisZE.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150296
IP address blocks: 2a0f:7880:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:04:8d:c7:c5:7a:82:d5:56:27:7e:b6:58:fa:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ade759e4ba3eea2e3ac8ce6a754316c244a2b191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:55:16:6e:8f:44:3f:f4:a6:17:28:5b:7a:
dd:e4:30:ec:d7:a8:4d:0e:19:c8:21:7c:d4:db:0d:
b0:54:0c:38:26:7a:04:03:3f:65:74:44:84:23:06:
21:d7:f6:7b:b0:3a:04:be:ca:39:44:d7:44:06:17:
fb:c3:63:21:33:1b:da:ca:d0:e1:2b:d4:76:ad:29:
c3:e6:ed:e7:78:2a:aa:88:d8:5a:98:ac:ae:a9:c9:
c9:73:ae:d4:c5:0b:fa:53:22:f3:df:66:b1:4f:f5:
49:a8:17:ae:0a:40:7f:7e:42:b2:20:38:eb:4e:4c:
28:58:37:94:8b:d1:f1:f2:eb:79:49:d3:da:34:b4:
4e:dd:b1:e1:6d:20:3d:5a:73:a0:74:f0:43:c8:28:
82:0e:7e:a9:fc:25:53:f9:6d:ca:0a:da:c3:86:e2:
63:8a:63:71:b6:ff:18:ee:65:b1:71:b5:37:fb:bf:
00:bf:12:41:f8:4c:ba:b7:1e:7d:6e:54:6f:b0:d9:
2e:fc:84:6f:6c:36:6e:00:0e:5e:57:53:9a:ad:9e:
c1:b3:4a:e9:45:5e:bd:bc:bc:ae:4e:e6:50:39:a5:
f8:e8:38:bc:f8:69:32:14:c5:ec:0e:b8:bf:88:7c:
53:ec:06:e9:ff:7f:bb:27:3b:f6:bc:cc:3f:d1:e3:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:59:E4:BA:3E:EA:2E:3A:C8:CE:6A:75:43:16:C2:44:A2:B1:91
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/redZ5Lo-6i46yM5qdUMWwkSisZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7880:202::/48
Signature Algorithm: sha256WithRSAEncryption
7b:b5:23:93:ba:a4:d7:13:ec:1c:d7:29:52:2f:77:fa:ea:cc:
ae:36:07:dd:49:0d:71:03:af:5e:f6:7c:69:42:38:71:c2:5f:
2a:43:4f:6a:30:47:7e:97:6f:07:e3:b2:1e:0a:ab:a0:a3:5b:
18:27:09:39:27:e5:b2:68:6a:09:89:9b:82:30:af:ee:9f:e4:
d2:d7:69:72:e5:46:1e:7d:b3:b6:ab:b4:fb:c5:0b:62:b8:43:
06:39:c3:11:5b:1f:37:57:0f:d3:fe:9a:f8:e9:8a:ed:a7:b9:
26:ea:81:49:a5:8d:59:e2:29:d9:b0:be:4c:2e:d6:68:8a:0e:
f1:7c:12:0f:a5:ea:a1:f3:87:54:de:b1:9a:f8:b4:1e:10:16:
d2:05:28:c5:ce:81:0f:67:0a:be:8c:7d:8d:82:b7:92:b6:4c:
2f:c1:82:e0:82:53:e5:e5:79:ad:e3:51:0f:53:f1:a8:02:3c:
de:34:00:9f:bd:be:e5:67:16:74:f3:56:3f:90:13:67:2d:1f:
17:a4:28:8c:d8:99:a3:a9:4b:69:f1:49:da:80:b0:bd:b5:27:
02:ce:9d:47:97:89:8c:d5:fc:15:ee:74:51:5d:c2:8f:b8:5e:
50:bc:af:7f:44:06:17:f8:7c:09:28:f1:b7:58:51:75:f2:47:
74:80:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:21:29 2025 by rpki-client