Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SkZ-ECuHtoHSbaImXnwOVXL5rdc.roa
File: SkZ-ECuHtoHSbaImXnwOVXL5rdc.roa (raw, json)
Hash identifier: HN0L8CAg6kZFYPXpwQV7treUg/JBxzEYFmTEm0dj6S4=
Subject key identifier: 4A:46:7E:10:2B:87:B6:81:D2:6D:A2:26:5E:7C:0E:55:72:F9:AD:D7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489951F2BA66B3D61D85E95F3D5CBE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SkZ-ECuHtoHSbaImXnwOVXL5rdc.roa
Signing time: Thu 02 Jan 2025 13:50:56 +0000
ROA not before: Thu 02 Jan 2025 13:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201702
IP address blocks: 2a09:e681::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:99:51:f2:ba:66:b3:d6:1d:85:e9:5f:3d:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a467e102b87b681d26da2265e7c0e5572f9add7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:51:2c:96:87:08:1b:56:85:d8:56:19:db:
e5:39:f8:84:5b:c8:9e:dc:03:1c:1b:8f:47:10:cf:
92:83:fa:65:c4:76:15:9c:82:ed:90:80:4b:02:db:
45:bf:19:b1:b3:0c:3b:5c:60:08:8b:44:a5:ba:98:
13:08:bf:11:7c:fd:15:d7:9a:bc:3c:71:51:cb:59:
71:01:3a:b9:96:65:fb:b4:39:f9:20:8e:7f:20:6e:
3b:f2:b7:89:42:3e:0b:df:e9:3d:5a:1e:f5:71:11:
1d:a8:29:2c:09:65:f6:4c:a9:76:d4:17:6d:c3:71:
35:8e:c5:f3:46:4b:88:40:3a:12:36:f2:af:d4:1a:
4a:79:4b:7b:41:5b:f0:eb:47:d3:e2:02:3e:07:87:
97:1b:92:d0:26:e9:8a:42:88:47:6c:a5:1b:a5:d4:
f2:ec:84:a6:57:86:82:95:9d:56:5b:f6:37:68:c9:
d4:83:9f:08:21:b0:d1:73:ae:e1:96:79:38:22:87:
9a:64:75:59:4e:89:58:aa:ef:b8:ce:03:29:1a:b8:
2d:95:59:ef:31:cb:64:19:74:b0:07:83:87:9d:de:
f8:38:4e:8e:22:48:62:34:97:ef:67:ef:72:07:88:
c8:61:f9:32:50:9d:57:bf:5b:14:87:9d:bf:48:e2:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:7E:10:2B:87:B6:81:D2:6D:A2:26:5E:7C:0E:55:72:F9:AD:D7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SkZ-ECuHtoHSbaImXnwOVXL5rdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e681::/32
Signature Algorithm: sha256WithRSAEncryption
96:17:ce:6d:e7:e6:ab:93:91:65:4f:8f:d3:94:b9:b2:94:76:
33:1b:6e:b2:c2:8c:f0:f7:58:60:44:88:d2:38:19:bd:6a:5b:
89:7d:c4:af:b8:51:a1:bb:da:b3:22:92:84:94:32:0e:50:60:
82:28:4d:2c:a6:17:91:49:01:4a:1e:70:d6:cd:93:46:71:d7:
46:c9:f5:0b:b0:89:d0:a6:d4:59:a6:19:9e:f7:66:15:5b:50:
90:e1:0c:db:bf:28:0f:da:46:1e:2a:4b:55:a8:b8:d9:34:83:
b8:ee:05:39:da:61:ca:79:c8:17:5e:ea:aa:5e:39:31:7d:c1:
4a:32:d4:54:9a:8c:15:b5:04:82:5d:1e:db:eb:46:bc:b0:93:
c5:f0:70:63:06:59:b6:dd:d2:b5:85:16:f2:be:ac:46:e7:8c:
ad:15:7b:fa:4a:8f:cd:e7:a1:49:3c:b8:e4:73:5f:d9:46:99:
ad:b6:3a:a9:c0:d3:b2:26:5b:40:9b:d0:ba:6e:75:97:41:e9:
47:4d:9a:3b:08:57:8d:49:72:d8:55:85:ed:01:35:f1:41:74:
d9:ba:27:56:99:8a:9e:7f:2e:6b:44:e4:4d:5e:8f:87:5f:1f:
04:27:5b:ad:7d:f9:fb:e8:75:66:6a:0a:6e:21:53:b5:37:09:
27:a0:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:13 2025 by rpki-client