Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_EoIbs9KwwlMUnSUPixv4ZUbrCE.roa
File: _EoIbs9KwwlMUnSUPixv4ZUbrCE.roa (raw, json)
Hash identifier: K+oV4CGZgaapR0mpebt9zw3pkICDFKCSY4Q1MyWFxNw=
Subject key identifier: FC:4A:08:6E:CF:4A:C3:09:4C:52:74:94:3E:2C:6F:E1:95:1B:AC:21
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424453B61090C6572E252500F5DECE226
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_EoIbs9KwwlMUnSUPixv4ZUbrCE.roa
Signing time: Wed 01 Jan 2025 23:48:24 +0000
ROA not before: Wed 01 Jan 2025 23:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398343
IP address blocks: 2a11:a540::/29 maxlen: 29
2a12:ad80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3b:61:09:0c:65:72:e2:52:50:0f:5d:ec:e2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc4a086ecf4ac3094c5274943e2c6fe1951bac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:de:2d:e9:28:1b:9b:9f:41:5f:7f:52:69:
9f:c9:45:60:fc:b9:b5:83:83:ec:a3:6c:6a:7f:ad:
05:40:fe:78:1a:83:3f:cd:ce:5f:df:b2:c7:f4:5a:
5f:15:c0:03:de:9a:36:4d:54:21:99:fc:c5:0f:9a:
1e:dc:b3:b4:40:b9:f4:90:72:eb:b9:a1:87:d0:0d:
ca:14:96:bf:bd:8b:ca:30:60:73:e5:ab:82:2e:2d:
fc:bc:32:44:3b:e5:30:38:6e:47:3c:24:f0:7b:99:
5c:db:a7:85:f7:09:e8:9f:12:62:98:61:2b:ed:40:
bb:80:db:32:cd:89:69:fc:16:2c:1f:3e:37:bd:24:
56:34:e5:db:29:90:43:1d:93:ec:d7:d8:0b:a4:22:
00:0f:5f:86:09:5e:3a:1a:c4:92:7d:f8:e2:50:23:
4f:f9:15:ef:51:bc:05:dd:ac:39:04:ce:9d:5e:f6:
8c:fd:bf:58:66:8c:8b:24:0d:45:0a:aa:d1:17:49:
52:32:2f:47:6d:7a:38:ef:da:37:ea:d1:66:16:c8:
31:95:6f:48:82:e8:b5:ef:bc:e4:06:22:0d:11:19:
e3:10:c2:ea:c9:94:ad:f8:d4:96:9c:69:0f:a1:89:
c5:d2:88:63:74:c0:92:38:a7:7b:5d:ed:b5:9a:d2:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:08:6E:CF:4A:C3:09:4C:52:74:94:3E:2C:6F:E1:95:1B:AC:21
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_EoIbs9KwwlMUnSUPixv4ZUbrCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a540::/29
2a12:ad80::/29
Signature Algorithm: sha256WithRSAEncryption
31:b7:bf:ad:63:de:5e:c5:72:34:d7:cb:7a:de:bd:66:81:9d:
53:04:bc:4f:03:ac:cf:e4:a8:79:e5:ea:ba:26:bf:91:23:8d:
15:b7:e4:2c:fa:2b:04:0b:73:60:8c:55:c2:65:57:c6:15:17:
e7:cb:8d:40:97:5b:f7:ed:55:d9:c2:c0:6e:e7:dc:90:68:75:
62:27:ee:fc:be:8a:3f:87:73:5f:d3:66:1a:80:92:11:ed:96:
22:cf:5b:0a:19:37:1e:f9:bf:ef:d1:31:01:2c:53:5b:20:f7:
82:32:86:1e:ac:0d:b9:c1:6b:e0:99:bc:97:8e:69:a4:a1:72:
87:d1:23:72:f7:5c:74:4f:c6:87:c6:9a:c2:c1:b2:da:10:7d:
f7:6f:8f:9f:3a:28:34:ac:4d:7e:f2:6d:4b:05:04:8b:01:6b:
eb:71:aa:cc:aa:fc:40:f1:ec:23:b0:6c:bb:d1:5d:71:6e:0c:
64:c6:ff:40:7b:e6:d8:5a:3f:fe:30:65:6a:e5:b2:44:5c:b0:
ea:63:6d:e3:62:dc:41:67:29:f8:7c:cb:9f:57:29:6e:ca:70:
72:66:26:45:30:d1:ad:75:f2:9b:be:d0:b0:57:37:2c:7a:7d:
02:32:45:da:57:79:32:d3:4b:06:46:24:6d:34:8e:7f:86:92:
0c:f8:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:42 2025 by rpki-client