Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_cQPL8a6QmGA1UF3DrTebQthuOs.roa
File: _cQPL8a6QmGA1UF3DrTebQthuOs.roa (raw, json)
Hash identifier: 6jAqEAwGE85BWe32/fo+JAgyTGeJzhR7ZBRXYZ/70F8=
Subject key identifier: FD:C4:0F:2F:C6:BA:42:61:80:D5:41:77:0E:B4:DE:6D:0B:61:B8:EB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC575E017089C6A490367529342A2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_cQPL8a6QmGA1UF3DrTebQthuOs.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49134
IP address blocks: 2a0c:9a40:8200::/47 maxlen: 48
2a0c:9a40:8201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c5:75:e0:17:08:9c:6a:49:03:67:52:93:42:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc40f2fc6ba426180d541770eb4de6d0b61b8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:eb:7b:73:ac:7d:51:a0:1e:30:4c:f3:eb:
45:5f:c3:73:e1:7d:a6:ed:44:5c:a7:6b:b6:80:61:
9e:cc:f5:58:b1:16:30:1d:61:4e:a7:5d:f4:0b:57:
3a:3e:91:52:6d:c4:55:6a:48:f8:51:55:2a:ce:d8:
ae:bb:e0:18:e6:be:77:eb:9a:ec:cf:1b:7f:b8:0a:
5f:3b:d4:d4:e7:03:7c:42:f4:8a:30:a9:e5:8f:2e:
40:31:71:6b:ba:5b:42:2a:07:29:15:67:f8:37:17:
ad:ea:e8:cc:86:f3:1f:aa:94:eb:e1:29:ae:af:33:
61:a0:89:70:1d:a4:04:c6:34:78:71:09:fb:f5:f3:
03:91:6b:29:3a:c0:2e:c3:37:4c:cf:31:68:6a:f0:
92:1f:86:a8:1b:55:45:0c:e8:4c:4e:4b:ff:ca:3d:
23:13:8c:35:62:cc:fa:fe:ea:78:de:76:33:68:2a:
a3:69:14:d8:c6:a1:0a:7c:d6:1d:c4:44:29:92:1f:
32:b0:8d:06:e0:a0:e2:e0:4e:8a:bf:ee:fd:c7:13:
b5:29:93:75:ad:c3:eb:b5:99:dc:fa:38:0b:8c:a4:
bd:2a:0f:56:0e:a5:4c:a5:29:0e:4c:22:bd:14:0c:
25:36:46:8a:a3:1a:d0:22:d0:0e:00:6e:59:f4:6b:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:0F:2F:C6:BA:42:61:80:D5:41:77:0E:B4:DE:6D:0B:61:B8:EB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_cQPL8a6QmGA1UF3DrTebQthuOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8200::/47
Signature Algorithm: sha256WithRSAEncryption
cb:b4:38:13:76:29:66:b4:2a:70:b9:b2:82:b7:3f:f0:c6:24:
76:bb:8c:5d:83:79:c2:5b:3d:46:49:e1:35:25:d9:ed:47:70:
f6:6b:2f:46:08:34:0c:a6:e3:d8:6a:6c:59:b5:6c:e4:d2:76:
42:ae:4d:01:8b:bf:a3:fb:f3:c7:ee:66:51:78:a9:d4:49:84:
bf:cc:98:cc:94:b0:38:6c:aa:5d:fd:0b:22:d5:10:1d:5b:6d:
a4:6b:8f:b2:fa:7e:b5:bc:58:37:9c:6a:6a:0b:bd:9b:62:55:
14:33:d9:88:4e:04:77:b7:d8:7d:cd:6f:65:12:67:e3:75:59:
ac:b1:e4:fc:5b:e0:20:83:8c:44:98:8c:8d:b7:24:39:d9:ed:
a5:00:e4:60:a1:4c:57:48:9f:94:73:32:6f:76:31:6b:a2:d7:
d3:89:f4:be:e3:1f:82:0f:2c:02:e7:8b:5f:43:ff:26:b4:b7:
59:6d:f7:70:f2:a2:f3:a9:5c:68:6a:35:e8:3c:6f:75:16:15:
c0:06:c3:20:ea:33:cd:40:f0:1e:1a:fd:7b:83:65:b3:9d:e5:
39:c3:29:7a:04:c5:9f:96:82:16:da:94:4c:d6:f7:c3:b4:66:
74:ec:d8:c9:7c:ab:11:06:ff:02:ce:9d:07:06:7e:06:0a:90:
c9:67:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:20 2025 by rpki-client