Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/H9jk6TBNDx4g5AVYdK8wTDq6xVM.roa
File: H9jk6TBNDx4g5AVYdK8wTDq6xVM.roa (raw, json)
Hash identifier: /ChHd8NIq2HxZt7erR8HDTu75KW3IOMeuKxXMgQZNzM=
Subject key identifier: 1F:D8:E4:E9:30:4D:0F:1E:20:E4:05:58:74:AF:30:4C:3A:BA:C5:53
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE7070F89AC36D5A0C547F165A698
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/H9jk6TBNDx4g5AVYdK8wTDq6xVM.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211758
IP address blocks: 2a0c:9a40:8260::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e7:07:0f:89:ac:36:d5:a0:c5:47:f1:65:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd8e4e9304d0f1e20e4055874af304c3abac553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:06:48:39:fb:ff:e4:bb:58:4e:6b:9b:60:
90:f1:c2:80:d0:13:35:d9:26:f7:79:be:ef:6f:f1:
a6:f9:9b:49:35:9d:eb:ad:c6:42:72:c3:64:7f:69:
b8:8e:72:fd:b5:c9:d6:80:17:54:8b:4b:ab:69:1d:
5d:12:c7:1e:35:d6:11:f8:72:ba:1a:b7:74:02:34:
29:a9:df:7b:19:7c:e9:2d:02:23:d1:b1:92:50:d4:
d2:55:22:91:29:1d:24:f5:13:57:08:4d:dd:5f:81:
c0:ac:93:0e:38:e6:86:b9:4b:72:12:b3:18:f4:e2:
d8:13:14:75:3b:88:1d:86:7f:0d:97:a9:4a:6d:46:
ae:b6:8f:1e:ed:a4:b8:86:8b:d9:50:45:e9:f8:1f:
64:0e:0b:76:b0:0d:c3:a6:9d:e3:05:df:62:c6:cd:
41:e0:48:4b:a1:1b:b5:48:d6:d3:f4:ba:65:5a:88:
b6:5a:06:9c:fd:8d:e3:54:b9:ca:1b:c5:d4:75:e9:
3f:b8:8c:a1:81:f5:05:16:9b:5a:e2:6f:94:ac:23:
b4:57:88:12:b8:4f:3d:27:6a:93:51:62:a7:f8:47:
7e:58:79:19:66:4f:74:9c:fe:a1:f2:67:c0:9c:1d:
8d:09:b6:a2:15:1f:8e:7d:c7:4d:46:eb:92:06:ca:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:E4:E9:30:4D:0F:1E:20:E4:05:58:74:AF:30:4C:3A:BA:C5:53
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/H9jk6TBNDx4g5AVYdK8wTDq6xVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8260::/44
Signature Algorithm: sha256WithRSAEncryption
ab:d5:a8:91:9d:8f:61:d2:2b:8d:54:5c:98:8f:1e:0a:9f:19:
e5:a6:20:8f:e9:05:c2:2a:1a:fa:6f:3e:c4:df:a3:5d:b4:6c:
83:ca:ec:81:bb:e0:43:a5:e2:40:b5:ad:6c:53:fe:f4:57:dc:
ff:2a:08:3c:40:29:14:ef:20:e8:48:02:0f:e3:24:f8:fb:fa:
45:52:06:58:82:7e:1b:90:da:05:2c:bc:a6:e2:fd:1a:8c:bf:
4d:f2:f4:c2:e9:ff:51:9c:90:e5:dd:a4:42:13:69:a3:ea:2d:
30:b9:ea:1d:27:bc:94:54:f6:4f:05:99:1b:6c:08:0a:cf:ed:
04:8e:3b:0a:1c:92:c8:7e:ef:7a:81:3c:ae:07:19:67:b9:d1:
0e:cb:bf:71:c9:c8:db:ff:2e:9c:ca:d9:da:53:28:d4:57:6c:
67:75:1c:19:b8:85:a7:0f:de:e2:7f:a5:04:87:a4:39:45:4d:
8e:4a:65:cc:e1:67:cf:57:54:5d:a6:99:50:cf:a5:34:ce:94:
24:fa:15:e9:39:49:7d:ab:04:9b:2e:45:15:0b:0f:e9:14:24:
54:5f:99:a5:b0:84:eb:c7:98:2a:89:a9:94:c0:21:8c:7d:ba:
74:e6:98:6e:f4:e6:94:0f:4c:75:27:59:76:fb:e7:79:2b:90:
90:b8:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:35 2025 by rpki-client