Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-SQwhdkwtPeWcqvhTBLduzAIyjg.roa
File: 1-SQwhdkwtPeWcqvhTBLduzAIyjg.roa (raw, json)
Hash identifier: 9AVf2NxMLKEi/0h7cC64O5Co1oHjULzeIS5B8ehyA1I=
Subject key identifier: F9:24:30:85:D9:30:B4:F7:96:72:AB:E1:4C:12:DD:BB:30:08:CA:38
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422203620FEABF2DB45544432A21C4CE2
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-SQwhdkwtPeWcqvhTBLduzAIyjg.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208809
IP address blocks: 2a0e:8f02:f05d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:36:20:fe:ab:f2:db:45:54:44:32:a2:1c:4c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9243085d930b4f79672abe14c12ddbb3008ca38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:81:64:0c:68:7e:72:55:ea:b9:97:32:40:
20:d4:6c:a9:d6:e3:a7:31:c4:04:7f:0b:bb:4e:a6:
b5:31:70:f0:d8:10:14:9a:b9:fb:aa:68:eb:64:18:
11:a2:09:65:b6:d5:6c:5f:0e:1f:9c:13:2f:22:96:
31:5d:4d:3b:70:20:cc:fe:92:73:e6:04:e4:8c:c2:
d2:ee:fa:4a:19:45:9a:e9:5c:ee:d4:75:75:06:de:
3e:85:51:a6:b1:7f:6c:1e:e1:52:88:98:8f:1f:6d:
84:43:3e:cd:5d:5b:a0:1b:39:c7:ca:30:fd:6d:9c:
55:42:c1:cc:cc:4c:af:21:ca:d8:59:9a:72:ca:6e:
09:ec:ea:09:b2:30:8d:27:bc:ab:12:d2:e9:f7:93:
47:7f:21:94:d8:36:3e:67:99:ec:44:72:f0:21:27:
6d:9d:4f:63:77:3a:3b:44:af:d6:cc:fc:1a:f3:1d:
b5:e0:94:d5:25:09:a6:db:d6:c2:d7:17:28:d3:aa:
4d:6c:b7:f2:51:fb:53:69:e8:18:0a:ee:fd:1c:37:
38:9c:96:cf:9f:76:79:44:f3:9f:6a:f7:22:7a:16:
0e:9b:58:54:1b:9e:e9:82:f7:4a:23:c8:6a:6e:e3:
cf:20:9b:57:83:c5:2a:b7:d3:15:19:04:37:05:cb:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:30:85:D9:30:B4:F7:96:72:AB:E1:4C:12:DD:BB:30:08:CA:38
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-SQwhdkwtPeWcqvhTBLduzAIyjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f05d::/48
Signature Algorithm: sha256WithRSAEncryption
2f:95:33:35:4d:a4:50:17:20:53:b5:89:54:ff:5f:c4:c3:11:
cc:52:cb:d2:5a:53:f4:5e:e1:2f:0a:c5:ef:f2:b1:94:b8:48:
02:38:6c:18:2a:4d:5b:30:7e:66:d3:6d:55:c0:8d:8c:0d:4c:
12:bd:c6:51:e5:23:74:56:36:ef:c4:64:f4:91:2e:30:2f:0f:
3c:ab:79:f3:5a:a2:49:73:07:5b:b6:a4:b2:98:bc:28:ed:17:
72:d2:19:c4:9e:40:94:b9:e0:78:88:5d:ad:95:0b:76:15:e6:
29:e6:6c:dd:cc:37:81:54:51:db:ab:53:b9:7a:5e:c3:b4:3a:
d3:3f:4c:2f:46:9c:33:09:c5:6b:c5:e4:2e:a8:61:2b:87:34:
a7:b8:08:86:ea:32:5f:11:cf:09:e8:b7:1e:90:23:ef:4a:c3:
18:9e:74:96:ab:ba:0c:92:52:52:c3:e9:e3:40:2a:53:1a:38:
b6:fb:1f:ae:f8:10:7b:5e:fe:c9:3c:41:e1:5e:ee:1a:ae:a2:
3e:f0:a6:3d:3c:ee:aa:72:ce:dd:a8:8c:c4:19:ac:08:3c:9e:
57:e3:2a:29:73:a6:40:76:8e:3b:12:34:e8:6e:02:fd:7f:7d:
0b:bb:49:ff:8d:18:fa:a6:bd:04:7d:cd:ef:7f:b1:e2:74:10:
09:ab:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:22 2025 by rpki-client