Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5lTKhK9NFlcQTvJ7ZFBXDDfPJiU.roa
File: 5lTKhK9NFlcQTvJ7ZFBXDDfPJiU.roa (raw, json)
Hash identifier: 8eVJNCSFTxjZ9XC2nhNzhYomcqdQxFcA8S226oCyxUg=
Subject key identifier: E6:54:CA:84:AF:4D:16:57:10:4E:F2:7B:64:50:57:0C:37:CF:26:25
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0194ECE99D4449D2A464918F100297E076B0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5lTKhK9NFlcQTvJ7ZFBXDDfPJiU.roa
Signing time: Sun 09 Feb 2025 22:52:00 +0000
ROA not before: Sun 09 Feb 2025 22:52:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214223
IP address blocks: 2a0c:9a40:80d0::/48 maxlen: 48
2a0c:9a40:8800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ec:e9:9d:44:49:d2:a4:64:91:8f:10:02:97:e0:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 9 22:52:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e654ca84af4d1657104ef27b6450570c37cf2625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:56:e6:0d:b3:67:0f:73:cf:67:10:8c:2d:
6f:2d:0c:4c:38:f5:02:41:7f:b5:42:89:4c:84:d8:
1d:fe:3e:d6:0e:1b:a6:89:03:ce:80:ff:6b:79:5f:
46:a6:7e:16:91:3e:0a:ce:0f:e8:b1:3d:ee:44:be:
91:ca:18:eb:22:f7:1d:03:06:e1:35:91:17:10:f3:
fa:76:e9:55:a7:80:4a:88:f9:42:0a:bd:74:1a:f9:
e4:a6:83:0a:86:9c:08:41:99:43:c5:bd:f9:28:15:
43:ac:3b:0a:a8:44:36:a9:94:7c:ab:37:1b:d7:3e:
8d:7d:88:85:29:2d:5f:9d:d8:49:06:fc:e4:2a:8b:
e4:85:91:52:c4:ee:47:94:ef:33:28:66:be:eb:8e:
5c:92:b8:d3:80:2d:c8:0d:e7:4f:c5:9f:9e:2e:20:
c9:14:e9:0f:64:85:97:ff:38:9a:84:d2:9b:b6:12:
21:55:fe:92:be:8e:36:cb:c1:6c:a6:5c:96:99:9b:
3f:3b:07:db:94:11:6a:35:f5:00:f7:65:26:f2:0e:
ee:cf:98:2a:40:87:d0:68:b7:a6:09:ab:38:40:1f:
7a:f9:ab:bd:ec:61:af:a7:ca:9b:fd:9d:7d:35:a0:
b6:8e:b2:05:0d:65:29:b3:27:f4:b3:e1:89:ae:56:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:CA:84:AF:4D:16:57:10:4E:F2:7B:64:50:57:0C:37:CF:26:25
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5lTKhK9NFlcQTvJ7ZFBXDDfPJiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80d0::/48
2a0c:9a40:8800::/48
Signature Algorithm: sha256WithRSAEncryption
46:7a:b1:f7:bd:ec:fb:3d:56:94:d2:df:e3:cb:81:ea:0a:5f:
89:8f:0d:28:33:bf:45:07:76:ba:83:77:43:08:47:33:8b:4c:
96:8e:e4:d0:c7:73:41:d1:80:40:0b:f8:96:d5:48:3c:43:25:
ce:24:86:9e:d6:39:14:49:97:43:e2:53:2f:26:d8:fd:51:d1:
cd:ec:b8:65:c6:45:60:e2:d8:d0:7a:8e:a3:57:4b:4e:9d:2a:
5a:7f:a4:58:fd:d0:1b:db:05:da:24:24:6b:92:10:18:3a:eb:
95:75:df:a3:51:3f:65:5c:04:81:75:d7:32:bf:e2:c3:9b:23:
7a:28:fa:eb:47:60:ea:44:80:93:2e:b5:7b:6e:76:4f:8c:dc:
53:a3:5e:1f:30:b0:1c:56:5e:a0:dd:d5:77:2f:a7:6c:7a:a2:
77:cf:01:44:28:03:1d:17:01:19:12:1b:b3:bc:6d:e9:88:69:
65:ef:ff:ab:fe:48:12:d5:b8:2c:71:28:66:b0:f9:f2:0c:c1:
80:5a:e4:ba:34:94:6d:ac:61:c6:42:d4:b7:30:dc:81:58:f8:
b0:7a:60:3b:49:3b:a5:a7:2d:2a:b7:e2:83:dc:22:08:ab:8e:
da:56:8d:05:d7:8f:cf:ae:fe:46:16:c0:fa:68:b7:9a:3c:07:
b5:87:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:32 2025 by rpki-client