Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0Ch3eLy3V4UUmWrIMTrNvMlVVLc.roa
File: 0Ch3eLy3V4UUmWrIMTrNvMlVVLc.roa (raw, json)
Hash identifier: HoRAXYdzGIGE+oItIJEJvrSu7ZVJ/1sYtLRcFbqIesM=
Subject key identifier: D0:28:77:78:BC:B7:57:85:14:99:6A:C8:31:3A:CD:BC:C9:55:54:B7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE7B66DFFB2F65B3994E81B0B9BA7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0Ch3eLy3V4UUmWrIMTrNvMlVVLc.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211760
IP address blocks: 2a0c:9a40:8c10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e7:b6:6d:ff:b2:f6:5b:39:94:e8:1b:0b:9b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0287778bcb7578514996ac8313acdbcc95554b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:dc:fd:a5:2f:68:73:99:02:48:ad:f7:19:
41:80:93:b6:9f:97:29:f1:67:d4:93:6c:7a:86:f9:
dc:08:be:c1:ac:f3:d4:b9:17:1f:66:a7:7d:8b:6f:
9c:66:bd:61:cd:21:b9:a6:37:9f:0f:c5:22:0f:92:
65:4e:ce:23:ea:99:cf:52:22:52:f5:0b:cf:de:8b:
22:d9:2b:48:81:c4:bc:d1:0c:db:d3:1e:b3:c3:ee:
e8:cb:88:7a:80:f0:33:6a:ac:40:75:43:3b:9c:ea:
c6:25:35:aa:de:12:92:28:83:bc:41:83:7b:fb:0a:
91:cd:a8:01:c9:70:28:f5:84:95:20:72:61:32:34:
c1:8c:7d:82:a6:55:aa:2f:9f:a0:c3:d3:d5:f4:e6:
16:91:4e:be:3e:b8:0e:9c:bd:07:8d:72:51:25:8c:
a6:35:97:c0:7e:e4:3a:37:ec:cd:91:3d:9a:76:7a:
37:b5:8c:de:db:a6:0f:0c:ec:1f:4e:4c:c3:fa:12:
75:73:97:61:6d:f8:1c:92:d9:80:6e:c3:28:48:f9:
5a:ba:f4:78:84:23:47:91:d3:76:47:85:5d:d2:2d:
aa:66:ea:f6:6a:ae:65:2c:e8:3f:e2:07:65:e3:41:
35:2e:2f:bd:c5:ff:af:48:fe:52:18:64:a2:1f:b9:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:77:78:BC:B7:57:85:14:99:6A:C8:31:3A:CD:BC:C9:55:54:B7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0Ch3eLy3V4UUmWrIMTrNvMlVVLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c10::/48
Signature Algorithm: sha256WithRSAEncryption
20:a5:09:2b:f2:fb:7a:bd:1c:55:8d:8e:2a:1b:6e:7e:d6:a8:
58:44:20:4f:43:e2:12:80:72:c7:7d:ee:5b:b7:be:53:eb:b3:
27:00:38:08:0a:58:4b:cb:8d:ac:99:3b:64:5a:ac:69:fd:a9:
3e:e8:6f:22:3e:36:1a:29:35:5e:14:7a:76:29:b2:59:eb:d1:
ed:59:59:77:cc:4c:45:52:b7:c9:8a:d5:98:9f:6d:1c:7c:19:
94:1b:ff:3e:cc:f0:65:b1:ed:89:2f:96:49:a2:17:06:d2:3e:
52:92:cc:c1:22:4a:81:dd:7a:e3:49:6f:78:ce:04:9b:6b:40:
fc:84:56:8d:0a:cb:6c:ce:59:7e:ce:61:1d:aa:2b:fb:0e:a6:
39:70:f6:c4:75:1c:fc:52:62:50:d8:6d:73:77:b1:ff:35:e7:
0a:fe:76:31:27:1e:86:a9:71:a4:10:06:57:20:be:84:c7:93:
8a:06:06:d8:64:60:08:52:d8:32:27:b9:6b:af:f8:90:34:94:
91:8a:29:ed:03:26:bf:48:89:49:14:79:b3:95:86:6b:85:e5:
25:db:14:64:45:51:90:2f:62:38:1f:a2:63:b8:33:9a:48:00:
e4:3c:67:04:a8:d1:50:b9:d9:2d:34:a4:60:ed:e7:55:20:52:
34:81:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:16 2025 by rpki-client