Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa
File: 4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa (raw, json)
Hash identifier: ZVBB3cjYOT3VqfWQ4/A+wZjufx+V4UWOyQ4pBr48oC8=
Subject key identifier: E2:4F:43:69:24:07:5F:0D:AC:F0:8D:04:CC:ED:58:FA:33:69:4D:88
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 01942067E1E1BDFA23336169A65519254198
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 781
IP address blocks: 2a0c:1100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e1:e1:bd:fa:23:33:61:69:a6:55:19:25:41:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e24f436924075f0dacf08d04cced58fa33694d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:64:df:0c:90:6f:d2:f7:7b:47:6c:c3:68:58:
14:98:a0:2a:92:b7:41:c3:54:16:c2:e4:7c:4c:cf:
a3:45:9b:81:63:f5:71:d0:27:7a:a1:bc:e8:74:94:
bc:36:d8:fb:d8:c7:ac:c9:77:45:fd:05:fc:4c:ba:
0b:f4:15:53:ec:11:d0:af:e6:c5:c2:6e:9b:c5:00:
6b:1c:3f:4f:bd:4e:91:e2:bb:03:91:e1:21:44:29:
a5:78:56:03:c9:f4:cb:ff:f7:2a:63:67:fe:f5:96:
4c:be:db:05:ab:78:e4:97:30:af:88:4d:d6:81:7e:
df:1f:b5:36:d8:52:10:3a:0a:35:f6:c3:c5:a5:9d:
c2:a7:81:9b:11:47:41:99:2b:10:ce:d2:47:82:f8:
ec:ed:ad:02:bb:8a:39:32:02:90:d6:1a:49:a5:c7:
70:2d:68:4b:e4:e3:65:23:be:10:0a:61:42:4e:d3:
f3:ff:65:92:2a:07:12:0a:78:45:36:a9:4b:41:00:
54:2a:fb:75:02:32:5a:91:21:2c:df:c5:c2:ce:90:
4c:79:3a:fd:bd:64:22:f3:31:81:e2:81:d2:5e:18:
6a:22:6f:6f:9c:b4:b0:d2:98:ce:1d:af:84:9c:e8:
78:e1:a7:92:fe:15:5a:ed:53:31:64:5b:72:ec:44:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:43:69:24:07:5F:0D:AC:F0:8D:04:CC:ED:58:FA:33:69:4D:88
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:1100::/32
Signature Algorithm: sha256WithRSAEncryption
cb:b1:0b:3e:9f:ba:27:23:fe:fc:00:d7:d5:90:17:36:bf:1b:
44:43:b2:2c:dd:11:9c:08:93:73:82:36:98:df:7c:94:92:c6:
c7:9b:f9:46:0e:0d:96:c4:f3:41:c3:87:d8:6d:99:2e:d8:0b:
55:e7:87:77:f7:25:95:94:4b:8c:67:d2:e3:1a:6f:f6:cd:e0:
11:ae:05:04:10:de:ca:ae:28:83:eb:c8:6b:17:02:48:93:d1:
86:7c:0b:68:a4:5a:66:6b:05:d5:da:d4:9a:e6:c5:38:7d:39:
40:b9:29:9f:e9:80:80:b1:40:48:d5:66:60:5d:ad:6c:d8:70:
c4:f9:d0:d2:80:0f:b7:8d:31:e0:ad:65:35:d8:4c:e0:6d:22:
83:25:f6:bd:34:cc:04:14:d1:40:a2:c2:fd:00:f6:65:a7:82:
f4:be:0c:34:2c:64:e3:4e:52:39:6c:58:f6:11:fe:4d:56:9f:
8e:6f:5d:95:0d:70:c2:e6:21:f1:52:8c:dd:d9:9f:f8:5f:13:
ee:80:d0:d8:bb:6b:08:37:c9:32:37:f5:8a:39:64:a4:23:3a:
7d:ba:78:66:cd:a2:d4:da:64:52:18:7d:7c:81:a0:29:06:64:
cd:fd:92:86:8b:f1:1b:32:81:a8:92:ff:9a:49:66:af:d0:e5:
a1:fe:8e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:23:18 2025 by rpki-client