Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dgRDsleizFFiXe9DaqQOkGqkv1w.roa
File: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (raw, json)
Hash identifier: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=
Subject key identifier: 76:04:43:B2:57:A2:CC:51:62:5D:EF:43:6A:A4:0E:90:6A:A4:BF:5C
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55CD6268968D2F366269E0EFAE681
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dgRDsleizFFiXe9DaqQOkGqkv1w.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200063
IP address blocks: 2a10:4646:290::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5c:d6:26:89:68:d2:f3:66:26:9e:0e:fa:e6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=760443b257a2cc51625def436aa40e906aa4bf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b3:24:50:18:79:a7:b2:9c:6f:e9:a2:61:cc:
95:3a:57:0b:90:a0:38:b9:6e:e6:7d:25:26:55:bf:
c5:51:f8:dc:2f:75:c5:82:0f:16:54:30:c6:5d:c6:
57:af:0a:a8:c1:62:ea:74:3b:24:7c:5a:e3:97:93:
17:6f:94:4e:58:13:58:cf:2c:f1:d6:93:47:59:e3:
34:9d:c6:32:b5:d4:2c:85:4a:5d:4a:f7:a9:e9:78:
7e:fa:34:d8:6a:72:7a:14:ad:bd:c8:b3:56:59:06:
98:23:96:37:f4:b5:58:5b:44:ef:c3:c5:d4:c7:3b:
76:ac:05:1f:fe:7c:91:65:d0:ca:5b:ea:96:f0:f2:
6a:51:0f:e8:4f:28:4b:e3:f9:73:79:04:15:96:3c:
3c:04:81:f0:f9:6d:24:d1:b3:2e:c3:13:c1:c1:7c:
34:39:56:37:6e:f7:05:6c:bb:39:ed:6f:4a:1a:16:
a9:65:ac:96:3e:49:cc:53:a1:c5:a8:cd:e9:e6:6a:
f5:b6:66:d2:93:ff:5e:56:31:5e:a4:92:ad:0d:43:
c1:2d:41:9f:5d:2e:84:86:3b:6d:1f:ec:1c:ba:7e:
22:f9:57:6e:3f:70:22:e9:42:d9:25:9f:8b:0a:ed:
a7:a6:47:d6:b4:9f:67:0c:65:4f:79:1f:f6:ea:5f:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:43:B2:57:A2:CC:51:62:5D:EF:43:6A:A4:0E:90:6A:A4:BF:5C
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dgRDsleizFFiXe9DaqQOkGqkv1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:290::/44
Signature Algorithm: sha256WithRSAEncryption
a5:21:2c:d3:27:bb:c1:f8:77:74:9b:07:6f:4e:e0:ed:30:fd:
7d:e2:b8:30:e8:58:ba:c1:bf:f0:3e:88:fb:70:6d:ad:45:f2:
4f:39:82:8e:6e:2e:a4:08:7f:7c:06:a0:b8:d2:51:d8:ae:fc:
9b:32:44:ac:08:37:ed:6d:a2:9d:d4:0b:d4:1f:f6:08:d5:e7:
6c:09:7d:08:55:e2:63:14:f7:1f:57:d9:d3:a4:9a:16:09:cf:
ad:42:f5:00:89:99:f5:6c:87:18:39:19:a0:1c:63:46:c0:3d:
1b:94:64:a6:92:a2:c9:e4:1e:a0:44:e6:83:c4:c0:98:3e:6a:
ec:14:0e:ac:52:5c:f0:a2:28:94:82:01:e1:26:a0:59:9b:46:
8d:7d:10:8d:28:ef:30:13:44:ff:e1:6f:38:f9:d8:ff:06:c4:
a5:82:79:97:c8:73:a9:ca:73:e9:28:db:63:42:f0:6c:bd:06:
45:4f:19:40:e7:01:a1:3a:6d:3f:40:f1:62:f5:2f:88:c1:81:
eb:bd:51:36:f4:3d:ba:91:64:f5:33:28:db:23:34:15:c8:14:
60:9a:a6:cc:2c:f3:84:8a:58:01:4e:2d:98:63:19:48:97:ef:
04:49:5e:e1:c8:9f:c6:0e:61:a4:47:e5:d3:67:a9:14:ea:cb:
6e:b5:b9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:03:07 2025 by rpki-client