Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xPcNA35Ow8yKyDqFF4y-URZpTpE.roa
File: xPcNA35Ow8yKyDqFF4y-URZpTpE.roa (raw, json)
Hash identifier: XyUCq9ttpeiJ/QhVKSzjlLTTT+m63VQ1lbgBq26KPZQ=
Subject key identifier: C4:F7:0D:03:7E:4E:C3:CC:8A:C8:3A:85:17:8C:BE:51:16:69:4E:91
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01942220527DAE182E927F7AED0B7B4137A9
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xPcNA35Ow8yKyDqFF4y-URZpTpE.roa
Signing time: Wed 01 Jan 2025 13:48:51 +0000
ROA not before: Wed 01 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215505
IP address blocks: 2a0e:8f02:f066::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:52:7d:ae:18:2e:92:7f:7a:ed:0b:7b:41:37:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f70d037e4ec3cc8ac83a85178cbe5116694e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:db:3c:f3:3f:83:35:76:a4:c2:74:9b:98:
5f:b3:d8:de:e2:63:f6:d4:1f:82:df:39:5f:1f:19:
bb:1c:fa:75:19:cc:50:9f:7b:ea:18:38:52:d1:e1:
e1:52:f0:dc:a7:7c:a2:80:45:57:8d:6a:2e:b9:4a:
56:63:07:5b:65:3d:5b:30:7c:c4:50:f0:05:a4:e1:
06:83:50:dd:fe:d7:b1:74:36:a6:e3:db:dd:36:cd:
ea:35:f5:8c:a6:90:27:63:1b:c5:c9:48:33:2f:b0:
d8:0c:4c:b0:14:db:c6:18:82:19:82:6a:cd:2a:4d:
2a:1a:e9:ce:e0:14:7c:20:f5:52:6d:86:f3:fc:ae:
57:30:a6:d6:df:49:e5:cb:04:c2:36:98:77:a8:5c:
66:57:eb:8c:33:3c:77:63:2c:16:fd:a3:de:26:c7:
e0:55:fa:c7:0b:ff:f5:30:bf:a2:72:6e:af:37:c8:
e4:84:b3:4b:48:dd:b5:ab:17:d3:e4:d3:ea:12:d9:
7e:6f:5f:47:0f:e8:53:15:2c:4f:40:21:40:59:0a:
f5:9c:77:f1:79:37:89:ff:a4:73:63:7a:89:62:40:
0f:93:42:bd:b4:6f:c5:74:e3:58:6b:44:b9:e1:d5:
71:e8:a1:ca:d2:0d:88:12:6c:f0:f8:77:46:7f:a0:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F7:0D:03:7E:4E:C3:CC:8A:C8:3A:85:17:8C:BE:51:16:69:4E:91
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xPcNA35Ow8yKyDqFF4y-URZpTpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f066::/48
Signature Algorithm: sha256WithRSAEncryption
51:5e:1b:40:b8:df:59:38:05:7b:b3:a0:5b:5e:12:d5:bd:74:
46:37:06:bd:ac:95:0f:c0:74:39:b0:c3:a1:2c:ca:48:8a:cf:
bf:7c:4c:0e:46:b9:6a:68:5b:71:83:4b:6a:67:00:5d:e7:d9:
53:dc:8e:5a:b6:c3:cf:85:80:b6:5f:13:ad:0c:27:72:fd:cb:
20:2f:50:d1:77:e9:c3:96:f2:e9:7c:50:d6:99:ce:0b:46:7d:
c9:22:89:c6:c2:e0:cb:69:57:db:f5:40:c2:44:b0:3a:ac:00:
e2:27:9a:ec:58:d6:05:dc:6a:9a:f5:6f:a5:d2:c3:a6:84:25:
87:9b:61:00:9f:e9:80:a6:d8:b1:cf:09:e0:df:59:ee:6c:38:
ec:99:da:e9:0f:8b:8f:c0:9a:07:cb:48:53:66:f1:84:a1:54:
98:0b:f6:84:b4:9d:58:6a:83:26:6b:cc:96:ba:9d:fa:f4:2c:
10:06:b1:80:3d:b4:b8:73:53:6f:01:5f:06:73:88:d5:de:31:
62:c3:5c:9d:a0:b7:62:cb:9d:75:21:f2:bb:cc:29:1d:aa:0d:
98:b2:21:f0:c2:de:2f:cf:c3:a7:81:17:04:b3:93:49:45:c8:
62:29:5a:93:bd:b0:56:77:9c:10:e8:52:67:40:57:39:fe:cd:
cf:54:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:36:18 2025 by rpki-client