Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/U179jHYVg_Z0xMvsOH7RWHRV0JY.roa
File: U179jHYVg_Z0xMvsOH7RWHRV0JY.roa (raw, json)
Hash identifier: qAq8gQtVLON1xEsw96nwghWB+2IEvnYNGoYOTtsqD5E=
Subject key identifier: 53:5E:FD:8C:76:15:83:F6:74:C4:CB:EC:38:7E:D1:58:74:55:D0:96
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0194258F985937B45EC77545138F3522868D
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/U179jHYVg_Z0xMvsOH7RWHRV0JY.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214337
IP address blocks: 2a0d:2406:3c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:98:59:37:b4:5e:c7:75:45:13:8f:35:22:86:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=535efd8c761583f674c4cbec387ed1587455d096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:c1:7a:65:2d:96:39:a5:78:a2:d1:8d:70:
77:a8:b8:4c:fa:f7:52:9e:a7:ec:c1:dd:87:eb:3f:
e0:f0:29:e5:3e:51:ac:8e:c4:05:de:e0:0b:6e:8f:
c8:69:33:03:5e:7d:2f:d4:ca:bc:34:5d:83:fd:c3:
4d:8e:16:0a:0b:0a:d3:63:b0:db:d3:a3:78:e0:19:
23:b8:68:82:81:5e:87:9a:69:92:90:0f:74:bf:b9:
8a:d2:a2:85:f0:86:1e:57:3c:76:0d:8a:27:a2:82:
18:66:17:a9:65:42:5e:f6:7c:83:35:4e:cd:47:8a:
b4:79:00:ad:af:4b:6a:44:38:6a:d0:3c:bd:e8:1a:
e5:9d:90:63:23:63:5e:9d:9b:0c:76:a2:92:db:0f:
cf:7a:06:fd:45:11:34:b9:29:3b:60:8d:65:b9:1d:
67:55:2b:e7:f6:90:1d:ce:1f:96:fc:27:ab:f9:2f:
ed:31:8e:c3:69:2f:74:1a:7a:a8:3b:53:cf:b8:f2:
17:40:24:35:55:ef:9a:1c:b0:49:c5:31:28:ed:9d:
00:e5:2e:c9:33:15:2a:02:c0:9d:05:63:19:4e:68:
ac:cb:f3:3d:b4:b2:c1:ca:96:3a:b7:00:9e:ec:e8:
7f:69:36:3f:f6:4a:88:46:0a:e2:d9:ca:64:61:91:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5E:FD:8C:76:15:83:F6:74:C4:CB:EC:38:7E:D1:58:74:55:D0:96
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/U179jHYVg_Z0xMvsOH7RWHRV0JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:3c00::/48
Signature Algorithm: sha256WithRSAEncryption
3f:42:c1:2e:b5:a3:d8:82:6c:66:54:ca:fa:bf:4a:37:69:62:
16:cc:f5:7d:b6:c9:75:dd:0c:e2:91:5d:53:c5:9c:19:0e:9a:
93:3d:8d:45:2e:3a:8a:96:dc:f9:de:fe:33:bb:18:61:ea:bb:
d2:06:b5:a3:eb:d6:97:64:d6:39:a4:53:78:57:d5:e1:ac:fd:
7f:c5:77:c8:5f:e3:94:b6:b2:7d:d9:3c:6b:1a:6f:d7:ef:5d:
c0:e9:96:8e:8a:5a:3c:00:67:a0:64:c4:e2:9f:5d:fd:53:21:
a8:ea:c0:f2:40:50:7e:be:71:79:95:11:79:45:82:9c:e2:54:
a5:07:14:cd:5e:92:92:28:d7:2c:ac:9a:1a:44:1b:0b:98:35:
ff:ac:df:9b:3b:29:1f:df:6a:d6:49:2f:e0:19:f6:84:f1:38:
76:14:36:b7:0d:88:5b:3f:87:4e:cb:59:72:5e:dc:16:20:d8:
ea:49:3d:64:f6:a4:cc:c5:c9:0a:4f:c0:3f:56:8e:3f:39:7f:
bd:19:99:24:1e:33:51:cb:7a:ff:09:15:5f:34:ee:62:42:60:
93:ed:8d:d1:48:40:f6:ff:92:db:a7:40:b0:16:5c:8a:9e:6f:
b3:ab:d1:26:e2:b8:59:b6:32:70:d5:1e:9c:a2:bd:cb:10:be:
b6:1e:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:42:23 2025 by rpki-client