Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9l1LU6vhxehP_pQUKOsxdDCtk4c.roa
File: 9l1LU6vhxehP_pQUKOsxdDCtk4c.roa (raw, json)
Hash identifier: M9SdlMffEUjd/9zAke6Pbv9btXlDRe6+PWs1O7KZTbI=
Subject key identifier: F6:5D:4B:53:AB:E1:C5:E8:4F:FE:94:14:28:EB:31:74:30:AD:93:87
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F4CE28C8049A982B739AE7DDF850
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9l1LU6vhxehP_pQUKOsxdDCtk4c.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201288
IP address blocks: 2a0d:6f80:41a2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f4:ce:28:c8:04:9a:98:2b:73:9a:e7:dd:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f65d4b53abe1c5e84ffe941428eb317430ad9387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:88:3f:8d:35:ab:0d:75:80:1a:97:c8:40:
af:61:b2:d8:86:c3:30:64:07:b5:22:9f:5c:df:f8:
e2:83:f3:74:fb:07:2d:b3:69:e4:4e:ab:f7:3d:85:
22:56:76:0f:dc:8f:5c:40:8a:85:8d:cf:c0:36:6e:
71:e8:e0:08:05:14:9f:95:60:58:c9:ef:5c:d8:b7:
c2:68:fb:11:c0:9d:92:d4:d9:51:ed:65:11:80:f2:
14:cd:9a:6e:5d:6a:01:f1:e0:73:d8:3e:51:7a:29:
2e:4b:a7:42:55:df:79:a1:f5:86:80:83:f9:e3:9e:
e9:9b:18:f4:60:9d:9b:a5:35:fc:59:21:67:18:5e:
52:5a:fb:8a:b0:a3:53:8b:cc:62:d0:19:b9:a0:ff:
4b:07:e9:e0:12:57:57:a2:c3:fb:0b:35:69:91:e7:
fb:dc:4f:9f:e7:bf:81:aa:19:98:c2:6d:14:d8:9c:
1d:b0:19:c1:d1:7c:d1:2f:c8:09:78:31:92:4a:12:
94:20:2e:54:a2:9e:35:96:e2:ff:5e:26:32:38:a0:
72:0d:0e:17:a6:aa:26:09:bb:a2:ac:64:a0:60:0a:
5b:2e:08:03:07:c1:d5:b1:63:f7:ae:94:79:fa:bb:
cf:9f:ef:88:aa:5b:16:0d:cd:34:9c:48:2f:2c:70:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5D:4B:53:AB:E1:C5:E8:4F:FE:94:14:28:EB:31:74:30:AD:93:87
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9l1LU6vhxehP_pQUKOsxdDCtk4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:41a2::/48
Signature Algorithm: sha256WithRSAEncryption
75:f0:47:4f:9f:7e:18:5d:5e:0d:c6:58:a1:22:35:98:66:a0:
04:90:8a:3d:ff:9a:05:7a:ab:e2:9d:59:e4:25:9e:08:3b:01:
9a:5e:92:ee:67:bb:93:14:b9:1f:15:c2:15:19:16:11:18:2c:
26:27:3a:93:01:e9:16:5d:12:f2:05:8d:93:38:67:ab:d0:6a:
7c:33:53:66:47:6c:a4:46:fb:25:db:e4:7d:6f:5c:fe:51:a2:
54:22:fe:47:bd:7f:66:00:f6:78:0a:64:8d:e8:01:c7:e8:d7:
7c:be:aa:65:d0:b9:fa:6a:f8:31:e0:3e:c4:16:9d:69:8b:44:
b0:26:eb:5f:ca:82:97:fa:c1:96:ba:7a:4d:8d:c6:c3:cc:16:
6b:63:34:61:96:4c:b3:72:5f:21:2d:b4:1b:0f:67:f6:5a:9a:
d9:9b:ea:65:81:f7:2d:1e:dc:3b:e2:2d:06:1e:d7:61:bf:29:
e8:0e:4f:b0:f4:0a:c4:28:d8:c1:88:93:ae:da:7f:b6:5c:70:
30:54:7c:5b:e9:84:0c:8d:53:a6:94:ac:51:f5:57:3c:40:3f:
a4:27:c9:93:5b:be:dc:ac:ac:b7:40:bd:de:f7:73:ee:86:f4:
0b:72:cc:49:32:4f:66:2c:18:ef:fb:0f:71:20:f7:eb:14:87:
6c:62:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:30:15 2025 by rpki-client