Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/cEtsDjT6xc6RO8_HAfNqu-ZQOeo.roa
File: cEtsDjT6xc6RO8_HAfNqu-ZQOeo.roa (raw, json)
Hash identifier: 4oThoLynepSgHcsQ8lmx11opXTxEmOvWtQ82IY3KYBk=
Subject key identifier: 70:4B:6C:0E:34:FA:C5:CE:91:3B:CF:C7:01:F3:6A:BB:E6:50:39:EA
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 01958C0BAAE3C0CC25842C3EEF62DF265596
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/cEtsDjT6xc6RO8_HAfNqu-ZQOeo.roa
Signing time: Wed 12 Mar 2025 20:28:49 +0000
ROA not before: Wed 12 Mar 2025 20:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 2a14:47c0:e001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:0b:aa:e3:c0:cc:25:84:2c:3e:ef:62:df:26:55:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Mar 12 20:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=704b6c0e34fac5ce913bcfc701f36abbe65039ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:3e:c8:bf:78:48:a0:ff:29:5a:42:e4:c1:
69:e1:3c:ec:ca:ac:71:b1:72:6a:06:2d:79:bb:17:
c5:4e:d8:01:84:7c:8a:51:77:77:8f:2b:63:2b:a9:
51:1b:c4:13:cb:01:a3:e6:a2:af:31:c3:94:5c:bb:
85:f5:62:c4:7a:b5:de:1d:c6:58:9e:71:f0:4d:01:
ed:b9:1d:a5:2a:ad:29:a7:11:3a:70:85:6a:18:53:
18:be:a2:ee:ff:ab:7f:f6:4a:05:74:20:b2:5e:e6:
d2:df:b8:ea:7e:2b:80:2c:b7:57:3b:48:a3:11:8c:
fa:0e:f9:00:eb:08:18:32:2b:e5:36:ce:54:dc:a9:
30:aa:3b:ab:36:d7:a8:6e:14:2b:06:34:df:96:45:
10:50:61:55:e6:39:db:98:f3:6c:5e:97:7e:67:29:
23:5d:17:8a:79:6a:fb:93:ee:3b:3c:53:8a:04:97:
89:80:36:cb:45:68:25:62:a4:a1:2f:86:3d:3b:b7:
8e:96:75:31:46:6c:7f:82:79:c4:2c:e8:d8:32:2e:
0e:cd:48:16:f6:cb:ae:c7:bd:f7:3a:8d:94:90:d5:
26:31:80:1a:c5:1f:06:d0:7e:99:df:ec:17:11:cf:
76:09:15:75:87:69:67:cf:10:f9:85:d7:6f:34:7a:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4B:6C:0E:34:FA:C5:CE:91:3B:CF:C7:01:F3:6A:BB:E6:50:39:EA
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/cEtsDjT6xc6RO8_HAfNqu-ZQOeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:47c0:e001::/48
Signature Algorithm: sha256WithRSAEncryption
9f:45:fe:ba:07:56:93:fa:6a:9b:89:d3:50:6b:0f:d7:ae:cd:
d7:44:c7:7b:1f:69:fc:db:0a:80:ee:e9:8f:7b:42:27:7c:0d:
a8:66:c1:4f:29:7d:f3:ae:00:17:c1:c7:a2:c4:ce:34:e2:94:
ff:f0:30:6e:90:ae:f8:de:39:67:cc:4d:97:eb:67:25:66:c8:
98:e0:31:c0:8b:53:da:c0:a3:e6:c1:96:d5:2e:fe:8a:1d:58:
27:3e:90:ad:95:ff:fe:31:67:0b:d1:b0:4e:f9:0b:ad:59:6f:
7c:dd:43:75:95:aa:07:a0:fa:e7:42:29:76:54:14:6e:61:5f:
39:76:eb:86:ac:fb:2d:e6:01:10:cd:4f:96:77:31:c2:46:1f:
8f:2e:2a:96:33:8f:f2:fb:1e:d9:a1:e0:1f:84:81:b0:fd:45:
d6:34:c6:c8:92:94:31:6e:61:a8:93:c0:20:41:77:8f:5b:d2:
c2:d4:59:8d:00:bb:58:56:51:69:42:f1:c6:98:4f:8c:e1:d4:
90:82:7e:27:7a:7a:af:eb:95:47:e2:5b:42:29:87:eb:6d:3f:
cd:c7:5b:34:af:63:6e:4b:52:bb:88:e6:af:49:e2:a8:d5:2b:
15:34:b3:ac:51:09:0d:7a:f3:29:41:7d:4a:b1:52:62:8f:ab:
9d:58:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:57 2025 by rpki-client