Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fY3N_6FlCGEEgzmKx47sPa3u0hk.roa
File: fY3N_6FlCGEEgzmKx47sPa3u0hk.roa (raw, json)
Hash identifier: u02hR3496YrOguL65JR86miI/1frJ16sQhkiom+SvDw=
Subject key identifier: 7D:8D:CD:FF:A1:65:08:61:04:83:39:8A:C7:8E:EC:3D:AD:EE:D2:19
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBFA8F063A9B26497339C94563C64D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fY3N_6FlCGEEgzmKx47sPa3u0hk.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215660
IP address blocks: 2a0e:7d44::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fa:8f:06:3a:9b:26:49:73:39:c9:45:63:c6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d8dcdffa16508610483398ac78eec3dadeed219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:ad:f4:47:69:a0:7e:f5:4f:01:8d:36:ea:
98:08:4c:0f:8d:89:02:07:9b:47:ec:6f:8c:a9:3a:
42:2b:90:57:72:e6:3c:d7:a9:f6:7d:2b:84:85:69:
88:27:23:fd:3f:86:8b:13:96:05:0c:b7:91:cb:8f:
ac:d8:2d:95:14:d4:29:d1:71:c7:dd:94:e5:ba:a5:
7c:e1:dd:a3:34:2c:f3:9c:8c:60:0f:0d:86:71:86:
bc:fc:fb:96:9f:57:a1:cf:3e:61:8c:d2:dc:29:cc:
4e:8a:1f:7c:db:ea:fa:73:86:eb:af:a8:8b:4f:d9:
4c:e5:b7:73:7e:f6:a8:e2:7c:3d:46:5a:0f:78:70:
70:16:89:31:59:4b:cd:fd:6c:7c:00:46:b6:b0:1c:
2c:18:8c:91:70:93:75:22:70:8d:1a:76:14:c9:87:
9c:ad:0a:92:3f:5d:cf:59:b6:60:4c:74:88:b9:1f:
39:35:db:02:e9:5a:84:6d:7a:d3:1f:ab:22:77:82:
df:65:16:a9:7c:0c:9a:81:c2:4a:71:df:87:af:78:
45:53:91:23:99:62:04:cf:f0:57:bc:3e:bd:61:6c:
b9:a4:54:a8:42:bf:2c:1d:eb:68:bd:5c:58:2d:08:
c3:66:ac:aa:a5:69:70:d1:74:44:30:e8:e5:22:64:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8D:CD:FF:A1:65:08:61:04:83:39:8A:C7:8E:EC:3D:AD:EE:D2:19
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fY3N_6FlCGEEgzmKx47sPa3u0hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d44::/44
Signature Algorithm: sha256WithRSAEncryption
3d:77:9f:cc:62:c2:74:1d:da:88:29:46:6e:8a:67:eb:4f:80:
fc:cc:9b:ac:24:1d:f3:16:78:64:a9:da:d9:48:0e:2d:32:64:
27:78:45:f3:bc:27:fb:52:bc:6d:26:35:eb:54:ca:65:d2:5f:
73:d7:f1:5b:a9:d3:25:e4:ac:1d:f6:cf:b5:39:9b:d3:86:1a:
63:0d:12:b1:2c:3e:ef:7b:5c:cd:3f:77:3b:74:46:df:6e:ae:
00:43:37:1b:57:3d:3b:7b:37:75:ce:aa:82:4c:cb:e2:c4:c5:
37:f0:e8:0c:1b:b3:83:9d:ba:e9:45:b4:2d:46:c1:46:27:fd:
50:b6:04:36:9d:56:1c:77:60:57:12:e3:1e:5a:08:f4:e6:55:
c9:c2:75:a3:0b:71:db:a2:19:d9:06:4a:33:0a:fb:0d:00:07:
f2:07:3e:a0:39:fe:43:df:2b:07:2d:38:61:de:2a:87:5a:20:
ef:f2:c1:3b:67:eb:76:5c:85:e2:01:3b:47:46:3f:2d:20:64:
3e:61:46:1e:85:de:79:f2:40:87:5d:c4:3e:c6:f1:aa:58:13:
cd:08:f5:25:e0:50:d8:62:b9:d9:ea:a0:08:1d:9f:ea:ff:c0:
ad:4e:f6:ab:45:74:5f:20:90:51:01:1d:4c:f1:76:11:fe:b3:
e6:59:15:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:08:02 2025 by rpki-client