Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OXslETHOId6TFuR5lcH3CuoMMwk.roa
File: OXslETHOId6TFuR5lcH3CuoMMwk.roa (raw, json)
Hash identifier: 64DZdLTQ1T5jrGTUf+IA9zqb1/srCNCdmu1XPGv0z60=
Subject key identifier: 39:7B:25:11:31:CE:21:DE:93:16:E4:79:95:C1:F7:0A:EA:0C:33:09
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422204D0F62CDF64F92991385232D3D01
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OXslETHOId6TFuR5lcH3CuoMMwk.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214076
IP address blocks: 2a0e:8f02:f071::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4d:0f:62:cd:f6:4f:92:99:13:85:23:2d:3d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397b251131ce21de9316e47995c1f70aea0c3309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:3e:92:4c:f3:4b:21:34:51:c8:b8:db:2b:
d2:e9:4d:87:24:ba:57:d7:f1:3b:6c:3b:0b:71:32:
71:a8:fd:cc:46:e3:5e:3b:4c:c5:47:0d:8b:a0:59:
74:9c:ce:ef:84:aa:10:b0:b8:7c:0d:98:e0:78:22:
4b:29:fe:5c:08:67:e8:f0:3b:be:ce:e3:9a:fb:79:
ae:56:81:f5:fb:58:42:cd:5b:63:52:73:0d:a9:3b:
bb:57:01:46:5a:50:f6:fc:23:04:2f:6f:55:3b:ae:
35:9d:9f:10:ae:f2:49:1b:6f:93:4b:de:99:9e:d6:
38:2a:5a:b5:80:b5:80:33:43:74:9e:6e:2f:f3:8e:
89:53:4d:b7:1d:ee:e9:a8:f1:09:d4:03:52:70:2e:
40:4a:b3:13:ed:56:79:5b:b7:79:a3:29:83:a4:76:
00:c3:c7:28:54:10:6e:ca:a7:76:80:99:3c:aa:34:
c7:46:6a:2e:d6:54:d7:4c:c1:4a:8a:61:5d:27:cb:
a7:cd:00:a3:0f:ad:20:24:70:67:05:2c:1a:05:6f:
46:7e:de:ef:a3:c0:03:79:e3:ac:e8:e6:bb:5c:ce:
00:8a:4f:f1:0c:9f:29:f8:35:60:09:88:59:10:ed:
92:6e:7c:9f:03:9e:0e:a1:1a:15:e1:17:e5:84:35:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:25:11:31:CE:21:DE:93:16:E4:79:95:C1:F7:0A:EA:0C:33:09
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OXslETHOId6TFuR5lcH3CuoMMwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f071::/48
Signature Algorithm: sha256WithRSAEncryption
9a:f0:78:8c:ea:ea:d7:d2:4f:1a:d9:c3:51:61:d8:50:f0:9c:
bd:e8:0b:b9:bb:08:2f:ce:62:34:78:79:93:59:20:96:aa:9d:
35:dc:f2:b0:32:6c:0b:f6:b3:b0:75:ec:c8:dc:ca:8d:e3:a4:
27:c6:07:9f:bb:06:7a:77:a9:7b:c0:6d:60:d6:de:9f:b1:48:
8e:75:83:29:24:61:3a:2e:40:00:ac:b9:27:ff:eb:63:a3:f0:
40:64:ef:25:4b:ff:b5:64:73:1c:f2:64:41:0c:67:7f:df:1b:
a9:aa:d6:05:f2:27:aa:79:45:eb:69:61:6b:ac:f5:d1:f8:f2:
88:ae:ac:b8:e1:54:4d:c8:8b:20:ec:5c:4c:c0:22:cc:9e:cb:
c6:54:cf:49:d6:29:fb:b3:e3:a4:2b:cc:d9:f0:b6:d0:1a:17:
97:1d:14:cb:68:07:61:9c:29:da:cb:ad:6f:2c:7b:36:af:61:
6a:d4:4c:af:fe:c3:cd:7e:49:ac:8b:d3:1f:e4:de:91:7a:15:
2e:71:7f:55:1a:93:d8:23:34:b8:f9:14:bc:66:db:c6:5b:ab:
2c:0f:cc:f8:76:b6:88:ae:f8:28:f9:b8:2f:d3:84:04:98:2b:
ac:5b:5a:d0:f4:cf:ea:71:b5:4d:9b:93:a3:49:d2:02:ec:11:
1b:f6:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:46 2025 by rpki-client