Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rcBOJkjKtnmfg7G_UTSYw3N7g1c.roa
File: rcBOJkjKtnmfg7G_UTSYw3N7g1c.roa (raw, json)
Hash identifier: hY7tOtZHiaJ8hiEyFmK4tOsALwXQudEm1LJkixcBIXE=
Subject key identifier: AD:C0:4E:26:48:CA:B6:79:9F:83:B1:BF:51:34:98:C3:73:7B:83:57
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FC0232551311D152340A4052989266
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rcBOJkjKtnmfg7G_UTSYw3N7g1c.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216469
IP address blocks: 2a0c:9a40:8cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:02:32:55:13:11:d1:52:34:0a:40:52:98:92:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adc04e2648cab6799f83b1bf513498c3737b8357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:4a:86:0b:82:ed:40:d7:3e:97:dd:9e:64:
cb:12:56:bc:c6:58:03:c1:22:e6:73:0e:d1:c4:f1:
3f:29:99:2d:6a:16:eb:11:55:71:8f:d0:0f:ef:4a:
4d:45:36:b1:e0:c9:3b:5d:3c:9a:7d:c6:72:e4:28:
85:a4:fa:c3:db:9c:23:a7:c4:05:13:87:4d:27:3c:
0b:b0:36:dc:de:99:60:01:06:b8:a6:a2:7f:de:3b:
58:a0:ca:51:10:bb:db:6e:80:d6:7b:d5:22:be:7b:
83:13:fb:ce:af:67:e8:de:b1:2b:22:32:de:23:3e:
f3:ff:b1:42:b4:92:cd:e0:82:91:85:25:6f:cb:37:
f0:f8:67:83:11:fb:e3:46:64:ab:80:69:ec:85:a7:
ac:f0:4d:9e:0c:86:29:8f:89:e3:35:93:1c:89:2e:
06:7e:9c:d0:04:0f:c7:14:8b:9a:55:c3:0d:e8:b2:
b6:7e:de:d9:38:fa:c0:e8:f6:85:28:28:6b:a2:85:
7d:db:75:0d:71:e2:46:9d:a3:cb:a4:a2:49:09:bd:
13:00:0b:73:48:71:00:53:a9:7a:d2:e8:7d:24:96:
8f:3f:f8:66:5c:73:48:ef:28:fb:3b:e1:ca:c2:7a:
bc:07:4c:ae:ed:e3:52:d8:70:d3:ba:ce:ec:ab:bd:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:4E:26:48:CA:B6:79:9F:83:B1:BF:51:34:98:C3:73:7B:83:57
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rcBOJkjKtnmfg7G_UTSYw3N7g1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8cc0::/48
Signature Algorithm: sha256WithRSAEncryption
16:55:2e:63:e5:db:d6:a9:77:99:15:1e:d8:fb:05:6a:60:9e:
19:26:22:bd:d8:a8:d2:96:9a:b2:33:b3:1c:4c:64:e2:8f:ca:
ac:55:8e:2d:13:81:fd:ba:8f:da:45:57:68:11:13:1b:f0:b8:
fd:be:17:97:ed:55:71:95:48:02:54:e3:65:6c:dd:c9:be:85:
25:3e:34:f6:f2:15:80:a3:ce:8f:ff:92:84:bd:64:e5:23:60:
c8:33:b5:ea:81:c2:bf:f9:ee:5f:f1:da:05:c1:6f:9b:9a:67:
70:44:a1:8c:40:79:99:4d:15:93:75:40:10:d3:f7:71:c1:ce:
45:30:0b:4f:b4:95:3b:1c:5e:43:79:7f:0d:dc:a3:b4:e4:94:
e3:bd:3f:97:d0:52:22:c2:a9:b2:ff:0b:4b:93:2f:1c:31:67:
4f:c0:cf:d6:9e:7d:e8:25:35:7f:f9:29:7e:ac:a6:ea:8a:5d:
2b:70:1e:a0:d0:38:7c:62:52:34:9a:07:06:66:1f:4f:51:3e:
b4:81:89:4e:ed:92:f2:9d:37:d7:3d:b3:10:16:e6:c9:a2:a9:
c3:9c:8d:18:38:f0:e0:34:18:8a:c0:d9:77:6c:0e:e0:c2:8d:
ed:6e:52:3d:79:af:d7:7f:0e:82:e5:56:05:c2:71:88:4b:f6:
2f:e6:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:14 2025 by rpki-client