Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa
File: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (raw, json)
Hash identifier: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=
Subject key identifier: 85:26:8B:30:68:ED:E4:34:FD:27:44:3C:7D:8C:6A:8D:0D:BB:0C:9D
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0194274816445558C3DA6E2FA8472EDA5CDC
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211390
IP address blocks: 2a13:b487:1600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:16:44:55:58:c3:da:6e:2f:a8:47:2e:da:5c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85268b3068ede434fd27443c7d8c6a8d0dbb0c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:82:00:62:88:71:75:a0:45:2b:06:e5:94:
26:67:2f:a7:0b:51:d1:6e:d6:71:27:ef:85:6c:f9:
4c:02:6d:cb:78:db:d6:37:88:7d:df:c5:0b:c4:0e:
21:65:9c:84:8b:c0:77:e6:19:56:45:c4:3a:10:25:
78:6e:e2:11:32:1f:56:4f:f9:a2:89:39:ce:3f:4a:
1e:a4:3c:7f:ee:55:66:de:16:56:98:7a:e6:e4:07:
e3:dc:f0:8f:e4:1f:72:86:f8:de:54:fa:9d:4b:ee:
7b:a9:40:bf:29:40:a7:23:e0:91:aa:79:91:9d:fc:
99:6e:6d:6c:c5:24:74:d9:34:52:fc:a0:06:b2:ea:
54:80:0d:ee:87:a0:c7:27:34:bf:20:bf:22:ee:16:
23:eb:f9:e5:70:04:f0:24:52:8b:61:63:3b:f0:82:
ee:eb:9b:71:d2:94:c1:aa:fc:2e:94:57:3c:96:17:
a5:12:b9:91:c4:39:18:92:00:0a:f3:55:3e:f9:76:
dc:e4:42:b7:a5:f6:60:a2:4e:e8:6a:4c:9e:14:69:
f2:46:f4:4b:fe:39:5f:bd:43:3a:53:8c:3a:98:36:
17:27:b8:7b:a3:22:5d:52:83:ae:29:2b:52:c0:3c:
8b:14:a4:e6:21:de:39:db:99:01:56:af:74:ab:22:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:26:8B:30:68:ED:E4:34:FD:27:44:3C:7D:8C:6A:8D:0D:BB:0C:9D
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1600::/40
Signature Algorithm: sha256WithRSAEncryption
8d:0b:67:37:91:90:d1:cc:13:35:e3:82:d0:cc:bb:10:4f:d2:
e0:7b:0a:a3:e3:0b:75:1b:67:22:21:51:ff:ff:ce:f9:18:56:
f1:3a:de:af:d6:af:a9:79:ba:49:1a:15:95:bc:5c:ec:17:e4:
22:b0:fa:58:c4:6e:51:4a:fe:77:0c:6e:f8:a1:88:f7:34:7a:
80:25:e3:02:1f:9d:f6:4f:24:2c:1a:9b:4b:47:73:e7:23:5e:
f4:cd:ba:96:b3:1b:b1:54:bf:cb:de:18:73:f7:2d:74:42:4e:
55:7a:a8:43:5f:46:e3:d5:46:22:79:cd:65:e4:72:be:4f:0a:
3b:e4:c5:80:1f:69:a8:dd:ed:c8:74:5f:51:94:49:9f:8f:88:
24:19:e8:dd:0e:39:0b:47:77:63:3f:27:91:ff:e8:30:ce:20:
79:c2:54:d6:d9:3f:37:c3:57:df:0f:6f:b2:34:7d:2f:ba:0c:
1b:1d:e4:1c:f3:23:7c:0e:c3:89:bb:ba:c5:20:5c:b6:ad:86:
f2:04:b3:c1:4b:7f:d7:1b:39:0e:51:84:f7:bd:db:16:0c:71:
51:1e:0f:1a:f7:f5:a0:de:e4:a1:47:6c:e2:70:ec:4b:f6:07:
74:ac:36:9c:4a:20:e8:cb:17:4f:e3:57:ba:b4:0d:b5:1f:14:
ab:40:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:02 2025 by rpki-client