Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/a0c5tAP64rJrQGbTaO53HXEP4pM.roa
File: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (raw, json)
Hash identifier: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=
Subject key identifier: 6B:47:39:B4:03:FA:E2:B2:6B:40:66:D3:68:EE:77:1D:71:0F:E2:93
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 01942748126F9465F23FD6E36A1E943FEDF4
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/a0c5tAP64rJrQGbTaO53HXEP4pM.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198998
IP address blocks: 2a13:b487::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:12:6f:94:65:f2:3f:d6:e3:6a:1e:94:3f:ed:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b4739b403fae2b26b4066d368ee771d710fe293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:b5:7e:c2:fe:99:45:b7:85:85:67:b5:6f:
a7:2a:4d:f7:f2:7f:20:d7:c7:bf:ac:0e:f7:8c:6d:
d0:95:ff:e6:f6:e8:91:8a:0b:67:c8:51:8e:41:4b:
71:dd:b2:07:5f:f0:ea:8d:0a:d4:3e:57:c3:8a:e9:
61:9c:2d:03:d2:9b:14:4b:d6:b9:81:a0:70:ca:d4:
de:86:4b:33:73:a0:1b:1d:a8:58:52:68:7e:41:89:
86:6e:b4:42:6e:23:6f:06:f8:55:f3:d5:cb:fb:95:
4c:b3:bf:56:ab:56:9d:9c:0d:1c:07:de:f4:fc:81:
c8:a9:c5:de:9f:c0:e7:88:1f:46:ea:b8:b0:0f:6e:
a9:6c:c0:92:5a:a8:8c:9a:c4:31:8f:cd:83:99:95:
3b:1d:c1:a4:4c:81:5b:ce:fd:bd:20:f9:9d:49:6b:
d7:21:94:ce:a4:5e:22:10:b9:97:0b:6a:b4:ff:b4:
46:b8:31:97:d2:5e:ec:a9:f6:b3:b9:a9:1e:6f:5d:
21:33:64:09:dd:84:6a:39:c0:36:bd:a2:28:ba:e0:
f0:16:57:33:40:c1:6f:bc:fc:2d:39:b4:6c:97:af:
f0:84:13:ef:f0:e1:c2:73:da:8d:35:96:38:5e:db:
fd:7b:dc:29:12:ff:94:12:89:e7:01:8c:37:3a:ee:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:39:B4:03:FA:E2:B2:6B:40:66:D3:68:EE:77:1D:71:0F:E2:93
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/a0c5tAP64rJrQGbTaO53HXEP4pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487::/36
Signature Algorithm: sha256WithRSAEncryption
4e:d9:6b:c2:53:8a:d9:ba:38:d5:ab:87:e4:f6:9c:5f:47:39:
12:b9:05:17:23:3b:78:fc:1d:15:46:b9:65:a4:18:46:4f:f2:
ae:4e:d0:3f:18:d9:9f:83:2e:e2:0c:7c:2a:87:d1:9d:d4:e2:
be:7c:93:c3:88:59:91:d7:c0:21:8d:87:54:e2:d2:c5:49:86:
a3:dc:a9:a9:f3:00:e2:ea:65:1b:fd:ff:19:b0:cc:a0:a7:ab:
93:dd:6c:f3:fc:a9:2a:05:d7:75:6d:4e:80:57:9a:68:59:81:
3d:c7:fa:41:01:46:32:2e:88:26:01:c7:38:40:8c:97:b5:bb:
ee:77:5e:59:71:b9:c3:0c:e6:52:fd:24:31:f3:3e:4e:fe:cd:
9a:a9:1c:30:cd:73:89:7e:50:dd:ab:dc:fb:be:37:d4:e3:d5:
66:90:95:b7:b1:36:e8:f9:50:56:e5:71:87:30:f9:33:ca:82:
5e:7f:33:73:e2:e3:f0:2c:0d:ac:47:11:48:a7:da:ce:b5:e4:
b5:b2:e1:88:fc:ce:a7:a5:ff:14:14:fa:66:01:9d:b1:f1:eb:
3c:71:04:54:57:ef:c1:4f:e5:26:7b:56:ce:c3:df:c3:67:d4:
68:72:e8:35:6a:6a:d0:16:34:f8:f0:97:4f:9d:1b:6a:46:ad:
60:bc:0f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:43:08 2025 by rpki-client