Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/omhPmTLYuIPW1wJ2DpQW09y0wx8.roa
File: omhPmTLYuIPW1wJ2DpQW09y0wx8.roa (raw, json)
Hash identifier: PeMSbUPJlpQV9qLXE3zKdVmQ1Glxbv67xS02BDMmagU=
Subject key identifier: A2:68:4F:99:32:D8:B8:83:D6:D7:02:76:0E:94:16:D3:DC:B4:C3:1F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE13AC961F0CB4BE6498D14BFB7E4
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/omhPmTLYuIPW1wJ2DpQW09y0wx8.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206824
IP address blocks: 2a0c:9a40:8090::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e1:3a:c9:61:f0:cb:4b:e6:49:8d:14:bf:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2684f9932d8b883d6d702760e9416d3dcb4c31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:83:40:cf:17:e9:be:e3:42:79:d5:5f:87:
0c:a0:3f:f9:a1:75:75:c5:77:27:e4:00:57:1b:a5:
67:66:e8:82:bf:2e:c4:8e:ea:c1:b4:84:a0:bd:ca:
55:e3:af:31:1c:de:20:26:42:91:54:e2:a2:f5:6c:
77:11:d4:43:44:25:ba:65:88:4f:92:5c:aa:1e:a6:
22:c6:5d:6b:92:12:e7:4b:48:1f:bc:76:24:fa:fe:
f9:cf:db:2f:6a:9c:05:8f:36:89:4b:98:b2:1e:12:
ac:fd:4a:7b:c2:37:d4:72:d1:fa:9e:6d:24:5a:3e:
16:6f:6f:05:9e:bf:6b:b7:64:b3:d7:11:29:38:98:
f1:f8:9e:23:db:00:3c:6a:92:43:95:46:ea:e1:0d:
7f:5e:14:a1:f0:3b:48:af:25:53:03:4a:c4:c3:2c:
1a:62:20:c8:e3:29:90:99:56:fd:34:ac:7c:83:46:
07:29:91:13:35:27:d6:f4:ea:d0:a0:aa:0f:cd:fd:
ee:b4:26:1c:49:8f:48:1e:27:e7:75:72:bc:60:d4:
75:51:75:17:57:16:83:0f:0d:0c:b3:33:1a:8c:50:
28:03:0f:9e:5d:11:86:42:e1:38:4e:4d:46:12:87:
c0:65:f2:65:4a:79:77:c3:18:33:10:b5:ee:dc:29:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:4F:99:32:D8:B8:83:D6:D7:02:76:0E:94:16:D3:DC:B4:C3:1F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/omhPmTLYuIPW1wJ2DpQW09y0wx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8090::/44
Signature Algorithm: sha256WithRSAEncryption
9c:ed:e3:1b:44:be:03:74:24:70:d8:08:41:26:d6:e3:9c:38:
d7:65:a1:c1:2d:e1:20:46:bd:2f:3d:85:b9:2e:85:db:42:39:
46:c0:b1:66:b4:d6:d0:64:83:1b:65:ad:e4:bb:61:9c:00:fa:
66:41:4d:92:58:7d:05:3c:4a:34:d3:12:02:f8:74:2a:dd:72:
97:2e:da:e0:bb:d2:e8:e4:9b:6c:b1:92:05:63:24:fd:e9:ce:
f7:09:95:f7:45:3c:c8:a4:61:d5:e9:c7:17:89:96:34:dc:a6:
86:48:f8:4a:32:2b:c6:d4:db:02:79:66:ac:81:51:ba:7c:87:
93:21:91:15:ec:41:00:8e:48:8a:ac:db:65:e9:fc:1c:1e:31:
fd:fe:65:05:b4:cb:1e:6d:92:47:e5:f2:4d:7e:e4:fd:95:0e:
18:c2:b7:d3:6d:c2:c1:79:30:d2:89:35:94:35:2a:af:53:2d:
92:f3:ec:fb:10:ab:5b:e5:24:e8:f9:8f:86:bf:d3:f1:96:23:
60:1d:00:77:39:13:90:c7:f1:ef:e0:0c:88:52:99:43:de:97:
d3:22:2b:ff:6a:eb:93:42:ea:20:46:e1:fd:43:7c:26:3d:8c:
51:50:24:8e:de:5c:91:85:9d:0f:e8:51:27:01:ed:8a:8d:c4:
eb:e5:fa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:46 2025 by rpki-client