Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/8siXkxau2138dP6m5aJN0wtpHTI.roa
File: 8siXkxau2138dP6m5aJN0wtpHTI.roa (raw, json)
Hash identifier: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=
Subject key identifier: F2:C8:97:93:16:AE:DB:5D:FC:74:FE:A6:E5:A2:4D:D3:0B:69:1D:32
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0194274816F42532BF4C330788B8544AC112
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/8siXkxau2138dP6m5aJN0wtpHTI.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212164
IP address blocks: 2a13:b487:1300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:16:f4:25:32:bf:4c:33:07:88:b8:54:4a:c1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2c8979316aedb5dfc74fea6e5a24dd30b691d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:be:25:9b:54:9b:b0:a6:50:40:59:38:62:
3c:d0:75:27:d6:a2:a6:3a:18:52:74:c8:89:39:c0:
36:50:51:50:f8:0e:dc:24:9f:a4:8e:93:f4:bf:66:
2c:12:25:93:90:18:48:5b:72:a1:3c:df:64:49:46:
84:ca:bf:4a:bf:48:33:ab:3c:45:62:3e:a4:13:a7:
b7:aa:63:e2:09:42:28:ef:e3:92:6e:a8:35:5c:a8:
b1:21:56:bf:75:87:1e:ff:65:4c:0f:4a:6a:85:4d:
ae:97:6f:4b:9b:4b:80:f0:0a:f3:59:02:b9:c1:c8:
7c:05:f2:be:b7:8b:79:23:a2:ce:a6:22:84:50:86:
34:2d:19:b5:56:9a:d6:bf:45:4f:38:95:4f:ac:f3:
4d:69:17:2b:3b:a4:28:5c:9d:fc:b7:36:ea:bc:dc:
40:9d:d6:f7:fc:f3:3f:0c:ed:41:64:c4:d5:34:d1:
f0:55:4e:c8:8b:34:41:71:87:5c:66:ec:71:c1:dd:
34:47:e6:70:7b:cd:f7:38:b0:b0:b8:7f:69:f4:30:
85:89:77:d2:c8:24:3d:8a:f1:86:ca:45:06:17:41:
54:02:f8:48:d1:da:50:67:9c:77:74:ad:8b:31:31:
1d:3f:ee:f0:00:7d:42:54:3c:89:ab:02:f4:a3:ac:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:97:93:16:AE:DB:5D:FC:74:FE:A6:E5:A2:4D:D3:0B:69:1D:32
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/8siXkxau2138dP6m5aJN0wtpHTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1300::/40
Signature Algorithm: sha256WithRSAEncryption
45:e6:e0:7e:93:55:fa:20:b3:55:68:ba:1d:1b:75:a7:62:75:
2b:4a:ea:09:13:e2:50:81:36:0f:5f:55:d2:43:05:52:ad:90:
c8:ba:f7:45:f1:77:77:f9:5d:28:57:19:f2:80:80:ef:8a:b6:
ac:54:1d:6d:23:b7:3d:51:25:b6:ae:ef:a5:5e:72:c2:55:4b:
fb:f6:8d:11:5a:8e:d1:ce:92:2c:64:49:36:62:13:7f:9a:45:
d7:ca:c9:92:17:23:27:3b:89:db:c1:44:d2:66:6e:1a:54:42:
89:5d:aa:bd:3b:44:ca:6f:8f:30:a3:27:c0:56:5f:d8:5a:53:
c4:f1:0f:a9:59:32:8f:50:8e:58:a6:ad:cf:db:6c:6f:2c:8d:
b2:59:68:1f:12:42:c4:60:c4:4e:d9:fd:05:14:ba:bf:bf:32:
3d:e8:16:74:55:d1:85:f0:46:de:a4:11:48:97:da:b0:2c:01:
65:43:f4:23:3d:be:4a:4a:bf:19:62:09:2c:51:0b:b3:5f:f5:
82:07:bb:dc:ca:00:a9:4d:dd:4e:53:0a:17:13:68:92:19:31:
55:92:a8:c2:fc:bf:03:26:cb:3b:ab:e3:7b:f7:f9:c5:11:58:
b9:c5:15:e4:a1:19:74:2f:54:eb:f7:b6:62:d9:2b:91:16:9c:
ac:47:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:16 2025 by rpki-client