Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DmP8fEY68fGaxJ5bSa4JbNszHEo.roa
File: DmP8fEY68fGaxJ5bSa4JbNszHEo.roa (raw, json)
Hash identifier: OzX6EUiscP7UzTJ/Vc5Jto2e6Aoky1eqaAkQRc5Pm0c=
Subject key identifier: 0E:63:FC:7C:46:3A:F1:F1:9A:C4:9E:5B:49:AE:09:6C:DB:33:1C:4A
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD1B41CD2C0D6DCEC82619674C741
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DmP8fEY68fGaxJ5bSa4JbNszHEo.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198276
IP address blocks: 2a0c:9a40:8390::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d1:b4:1c:d2:c0:d6:dc:ec:82:61:96:74:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e63fc7c463af1f19ac49e5b49ae096cdb331c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:6e:8d:db:2e:e2:e6:fb:0f:f0:f8:76:db:
8f:41:8f:21:f9:51:a6:ce:21:68:4d:cb:d2:d3:b2:
6f:4b:01:e3:11:d4:ef:ac:fc:9b:13:bb:00:e0:e7:
c5:17:f7:ce:e1:50:ee:e8:24:d8:b3:ba:6d:e0:ca:
5a:e9:6f:48:25:81:4c:aa:10:91:f3:13:1b:b2:cb:
60:c9:0e:0e:c4:0b:eb:00:77:5c:ac:ad:e9:b7:4e:
aa:6a:d4:51:f8:3b:18:5d:3a:94:d1:c9:10:b5:5c:
29:44:85:76:3e:d7:a0:ea:88:60:93:a9:f2:e8:28:
49:96:02:e3:77:ae:fb:9f:5f:46:75:18:d7:d9:fc:
c1:ae:c7:16:f6:2d:d5:43:b8:94:8d:01:be:82:20:
49:50:bc:c5:d8:f2:10:ea:7f:87:ce:45:8b:a5:b0:
b7:2f:ab:15:b0:6a:a7:ed:e5:75:96:1b:b0:82:a8:
e0:ea:f8:9e:61:88:33:03:d5:8c:1e:c5:36:5c:57:
09:22:10:1b:b1:7b:76:fd:e5:4c:dd:a3:24:6d:61:
57:79:2d:93:86:f2:09:d2:c0:32:2e:f4:9a:b1:30:
db:c8:b3:be:36:16:9a:7d:37:dc:0f:83:3c:26:38:
0e:9e:79:78:9c:a8:1d:ae:4e:4c:c1:12:ff:ba:14:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:63:FC:7C:46:3A:F1:F1:9A:C4:9E:5B:49:AE:09:6C:DB:33:1C:4A
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DmP8fEY68fGaxJ5bSa4JbNszHEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8390::/48
Signature Algorithm: sha256WithRSAEncryption
2d:98:d5:f2:60:03:ba:54:27:f4:76:3a:3c:43:2a:37:f1:c5:
93:d4:73:84:d9:8d:7e:24:cc:40:e8:0d:95:c9:42:80:62:e2:
c1:c6:23:aa:da:25:6c:2d:3f:81:ba:d2:24:48:ab:5a:d7:77:
e6:ec:97:55:ab:7f:5d:cb:07:2f:89:ac:ef:fd:14:a4:75:d2:
ff:f6:34:8f:00:a5:a9:03:2d:54:dd:6a:ce:7c:73:7b:f7:f4:
ef:85:0c:48:0a:2e:fb:73:5b:18:a5:8a:f2:d6:0b:8c:fb:8d:
7c:f0:84:f1:68:1a:f5:d5:66:f4:96:e9:50:58:b5:a8:a4:8f:
59:49:84:26:e4:8a:a3:e8:cb:82:64:8e:cb:11:34:cb:10:cb:
df:36:48:8e:42:63:21:4d:ab:c7:3f:a3:ad:e2:b1:a8:44:f7:
80:ff:16:61:47:2d:df:d7:36:54:74:98:a8:90:28:35:9e:75:
2a:02:f5:2c:3a:73:a9:e6:99:97:d1:be:21:85:79:31:c0:dd:
7e:1a:a9:0b:d4:76:7e:94:13:18:c9:d1:0a:9b:e8:5a:94:65:
7a:28:63:da:65:16:c6:59:ab:c8:1c:7a:a3:45:72:36:28:d5:
3a:2d:19:ab:36:1e:fb:30:a4:f9:a1:60:35:c0:48:38:cc:e3:
b0:be:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:23 2025 by rpki-client