Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Ox9GZAka0glhoxQ2kcpTG40p5TY.roa
File: Ox9GZAka0glhoxQ2kcpTG40p5TY.roa (raw, json)
Hash identifier: 9fZOyfSbu8PtJINC4B8NBR5wPhorryRlu5FEj0R87qc=
Subject key identifier: 3B:1F:46:64:09:1A:D2:09:61:A3:14:36:91:CA:53:1B:8D:29:E5:36
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 019746151B8828399B2C32017DA64F4332E7
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Ox9GZAka0glhoxQ2kcpTG40p5TY.roa
Signing time: Fri 06 Jun 2025 16:31:17 +0000
ROA not before: Fri 06 Jun 2025 16:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211604
IP address blocks: 2a0a:280:1200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:15:1b:88:28:39:9b:2c:32:01:7d:a6:4f:43:32:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jun 6 16:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b1f4664091ad20961a3143691ca531b8d29e536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:c2:fd:ae:47:80:e3:20:4e:a1:1f:d2:69:
59:2b:e6:96:00:ac:44:e2:da:eb:fe:3b:97:06:e7:
cd:8d:06:00:5b:74:11:17:4a:96:f8:ca:52:1b:50:
2e:6b:68:a1:81:29:83:87:6e:a6:f6:20:19:02:4d:
f5:33:fe:10:9e:87:4a:96:54:42:a8:67:fd:1e:fe:
56:6e:d3:3f:b5:6f:6b:0e:15:b3:dc:cb:78:77:03:
d1:6c:0b:7d:3f:60:29:23:c6:c6:4f:49:ea:69:0b:
51:a7:9e:7b:a5:fa:e6:f8:cf:14:29:4d:02:7c:f1:
8a:4a:5e:98:f0:57:08:d7:6a:d8:77:37:8b:bc:1a:
4c:06:c0:4f:e9:6e:58:a7:dd:e5:90:d4:94:9e:c9:
8f:f1:35:fb:9a:2d:97:c5:6e:01:98:51:d9:4f:bf:
38:bc:c2:bf:ec:9d:86:77:34:aa:fb:41:5c:71:6d:
76:85:5b:e2:84:f1:cd:10:58:93:89:c7:ed:9d:01:
c9:33:9f:d6:a4:a9:7a:c0:64:c0:1d:81:69:24:05:
30:a0:d2:42:30:21:c5:42:0f:53:3b:ec:28:27:c4:
42:1e:8c:14:03:bf:96:47:b6:64:7a:37:b2:6c:69:
2b:b5:78:ce:49:97:84:6a:7c:2b:3e:d3:54:d3:d3:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:46:64:09:1A:D2:09:61:A3:14:36:91:CA:53:1B:8D:29:E5:36
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Ox9GZAka0glhoxQ2kcpTG40p5TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1200::/40
Signature Algorithm: sha256WithRSAEncryption
79:c8:d1:b6:7e:c6:af:6d:fe:99:d7:be:2c:63:21:5e:cb:bf:
62:fe:46:03:47:4b:2b:9e:7c:27:ad:a2:10:ce:83:c6:46:3e:
2e:a5:6e:1e:f3:33:4d:03:27:c7:34:aa:dd:44:33:05:ff:30:
0f:82:30:71:e6:fb:db:8c:aa:da:ac:39:9d:66:07:e7:3c:78:
c2:a5:d8:cb:b5:94:de:25:d2:c1:e1:e3:10:08:23:0e:fe:2f:
a8:5e:ef:1a:66:62:84:3d:1f:87:9a:67:68:ab:01:d8:d8:ed:
88:8a:e1:aa:ee:06:37:66:49:b7:d5:8b:19:47:05:9c:d4:34:
fa:9b:35:77:fe:7b:c4:92:f0:ea:d8:0c:0f:b8:af:5d:01:f5:
1d:9b:e7:9b:02:1f:c3:cc:cc:0c:7f:f6:aa:bb:0d:1f:73:d9:
b0:ff:1a:88:ed:4b:8c:47:97:c0:70:98:82:fb:5b:73:8c:36:
c3:9d:c6:d3:e3:4f:47:2b:3e:cb:fa:a2:ba:25:07:ec:2b:0e:
d4:d7:fa:24:45:93:bc:0f:06:01:04:0f:27:e4:ed:8e:f9:4f:
f2:c6:d7:bb:27:cd:79:22:30:69:16:2f:9b:f3:d8:13:30:a4:
20:30:fd:dc:df:75:95:38:14:5f:a3:52:88:08:22:1c:c4:4e:
53:5e:f1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:17 2025 by rpki-client