Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mmC7k6yjTtmjHP6EGDjtbj-4D74.roa
File: mmC7k6yjTtmjHP6EGDjtbj-4D74.roa (raw, json)
Hash identifier: A+Ys9P8kLeIoLlipSCHWCRWw/vQLltNRl06fjSmfqc0=
Subject key identifier: 9A:60:BB:93:AC:A3:4E:D9:A3:1C:FE:84:18:38:ED:6E:3F:B8:0F:BE
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC41A1ECF6B379F00C1CCA44B69F6
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mmC7k6yjTtmjHP6EGDjtbj-4D74.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41108
IP address blocks: 2a0c:9a40:8081::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c4:1a:1e:cf:6b:37:9f:00:c1:cc:a4:4b:69:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a60bb93aca34ed9a31cfe841838ed6e3fb80fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:5e:9e:cb:04:45:3e:4c:d3:7b:85:de:81:
2a:1a:ea:85:21:1c:0d:80:11:c2:0c:77:bc:c3:0a:
31:c9:fd:45:d7:4c:07:b0:da:ef:7a:53:47:c6:85:
02:13:bb:c5:82:1d:3b:90:62:38:02:7a:3d:88:98:
e1:65:f4:fc:b7:93:7e:31:6f:88:05:2f:51:68:74:
1e:59:df:b2:54:95:b5:fb:1c:92:f5:11:f6:98:b2:
89:98:f8:95:42:3f:b9:a4:1a:04:8b:1e:8c:eb:8d:
b4:21:16:4a:28:57:77:43:09:71:78:fd:80:78:84:
8e:26:84:c7:b3:68:9b:52:76:a1:94:3a:3d:85:20:
d0:5d:84:28:24:fd:23:27:be:2a:20:e3:79:d0:23:
dc:ee:85:48:54:d7:09:9d:6a:3f:e5:6f:e4:82:51:
5c:c9:38:86:5d:12:96:b3:ec:a6:92:ab:99:aa:80:
a1:a8:ce:7e:bf:bf:3a:a5:79:5a:74:34:8e:8f:af:
a1:0f:4e:65:fd:fa:26:14:b8:78:7c:8f:ad:72:75:
75:df:bd:bb:20:a8:ab:27:31:a6:67:e5:75:24:95:
1b:c0:5e:23:f8:81:f3:d1:ce:ed:a7:dd:8e:4e:4e:
b5:03:9c:d7:3c:56:99:5c:47:55:41:96:53:51:23:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:60:BB:93:AC:A3:4E:D9:A3:1C:FE:84:18:38:ED:6E:3F:B8:0F:BE
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mmC7k6yjTtmjHP6EGDjtbj-4D74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8081::/48
Signature Algorithm: sha256WithRSAEncryption
6c:d9:eb:ee:40:76:d5:1f:1f:dd:b6:c7:4d:d9:64:b2:15:3f:
7e:5a:3c:b6:22:09:43:5a:0d:21:18:b3:43:5e:2f:d5:f4:50:
de:a7:d9:63:32:31:50:d6:ce:49:e0:4f:26:38:1f:92:c1:a6:
3f:2f:4b:06:87:a5:4e:86:28:85:19:45:31:f4:b2:47:83:ba:
cd:ed:db:5b:b1:bd:d2:49:ff:82:a3:f8:dd:a9:ba:29:07:03:
ca:d1:5f:43:3b:e6:6b:1a:29:d3:c0:99:dc:88:e2:22:07:ad:
df:54:8e:40:b4:4b:93:9a:52:a5:2e:c6:3c:a8:ec:e9:0f:45:
1d:08:ab:b6:f8:06:bd:7a:c7:4d:fe:02:10:57:ff:fb:b2:f3:
ac:93:dc:53:ac:b0:de:fd:70:d5:d3:8e:76:ca:9e:dc:d2:15:
08:ef:f8:c5:ae:e2:02:f4:77:38:87:a5:3b:a3:42:20:18:68:
dd:a3:11:4f:4a:16:88:4a:e5:74:c4:43:21:4c:51:8a:03:da:
2e:ec:24:bb:5f:66:97:10:1c:6d:a1:a4:8e:5c:dd:56:2a:b5:
c8:2e:f3:93:6b:16:f0:7e:35:e5:70:3c:19:ec:a3:74:49:a1:
3d:05:e6:ca:cb:fc:43:0b:b3:66:f7:29:c6:fe:30:46:37:a8:
ee:f2:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:15 2025 by rpki-client