Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_oNXoctiOdK0S4-E5lzzg4wsMXk.roa
File: _oNXoctiOdK0S4-E5lzzg4wsMXk.roa (raw, json)
Hash identifier: m8zubYI5pTwukSrhJHEVaNsXlRiO5OkYBe4lQq2KNAs=
Subject key identifier: FE:83:57:A1:CB:62:39:D2:B4:4B:8F:84:E6:5C:F3:83:8C:2C:31:79
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD88C06FFAE7B62D2D91AAAD91C3B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_oNXoctiOdK0S4-E5lzzg4wsMXk.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200965
IP address blocks: 2a0c:9a40:8160::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d8:8c:06:ff:ae:7b:62:d2:d9:1a:aa:d9:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe8357a1cb6239d2b44b8f84e65cf3838c2c3179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:d4:e7:30:f6:fa:27:62:7f:9e:43:15:bf:
6f:6d:9d:20:3a:03:f7:b6:bf:e0:ef:47:61:f9:7e:
0d:b7:70:da:c9:7d:e3:4f:f0:a1:af:5d:d9:ce:eb:
11:cf:95:2b:1c:41:3e:af:1a:0a:99:c4:fe:ae:c7:
5b:cb:e4:3f:da:21:23:e9:a5:52:6d:ee:7d:5b:02:
03:be:97:aa:00:88:fa:ff:95:ea:2b:25:a3:cf:9e:
39:63:c9:f0:2d:17:f6:6f:10:4e:be:2d:85:f9:45:
1c:48:5f:6e:41:ad:8e:24:dc:a2:45:b2:c7:68:20:
61:5d:aa:2b:97:c5:3b:2f:cc:11:c9:79:a3:3b:ee:
79:52:bf:c9:73:88:de:c1:a6:fe:bd:55:3a:17:6e:
25:3b:5f:f8:8a:ec:97:34:ce:9a:0d:55:35:80:5c:
9a:89:24:4a:47:27:d9:44:00:5d:9d:16:41:e5:b2:
c2:58:d3:3c:5f:5a:a5:ae:85:70:f7:34:e3:f6:6d:
ac:4a:b1:c3:86:1a:78:8f:ec:5d:34:ee:f5:e8:58:
93:b3:9b:e7:b5:e9:14:b5:c2:bb:97:a6:3b:01:2d:
f8:1a:df:05:d5:48:82:eb:9b:32:c3:7d:9e:ec:aa:
e1:1b:a7:40:24:71:05:d8:34:e8:ba:8c:5e:10:9d:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:83:57:A1:CB:62:39:D2:B4:4B:8F:84:E6:5C:F3:83:8C:2C:31:79
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_oNXoctiOdK0S4-E5lzzg4wsMXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8160::/44
Signature Algorithm: sha256WithRSAEncryption
60:18:89:6c:2d:cf:21:c7:2a:61:60:bb:ab:ac:63:dd:94:3c:
4f:c7:51:c8:bb:80:20:51:66:36:13:92:2c:34:46:88:d9:5a:
26:1b:1f:5a:02:7c:43:eb:2b:08:22:83:3e:1a:f4:2e:79:e5:
8b:66:64:0b:2e:b0:4d:92:53:5e:2b:45:c8:a2:41:77:b9:70:
ba:9e:3e:c3:42:d1:6c:35:11:8e:d5:74:e4:78:0e:39:a5:02:
a4:8b:38:9c:cb:c1:7f:13:1b:a4:cd:9f:ee:6d:8f:78:c4:ed:
5e:3c:0c:a7:3f:02:94:6e:b6:bb:cc:54:8f:a2:b4:19:b0:56:
5e:4f:c8:b7:5b:b9:62:ff:46:f0:e9:64:e8:69:a6:92:a7:e1:
a1:02:4b:ba:f3:4a:dd:38:0a:3e:22:d9:1c:e4:ff:c9:a6:52:
97:70:66:41:fb:58:17:1d:07:72:28:fe:06:58:d9:67:5a:6c:
db:6a:c8:cd:44:0f:d3:5a:88:81:c4:44:c6:76:42:6e:e8:94:
ec:b9:57:9c:2d:76:d2:2a:00:00:58:36:52:c0:1a:fa:14:87:
48:10:63:0c:e3:c2:e9:8c:10:b2:96:d4:ac:c5:6a:e4:fd:64:
99:18:f6:09:f8:1e:29:12:67:21:9d:02:92:dc:de:5f:24:17:
fc:98:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:09 2025 by rpki-client