Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/qY4Pn2rojeUbBpawT6zBM5pztdI.roa
File: qY4Pn2rojeUbBpawT6zBM5pztdI.roa (raw, json)
Hash identifier: bdIYON38cjUERyQWKrGfXHpQNcizuWiDaFQ+QLNzEDg=
Subject key identifier: A9:8E:0F:9F:6A:E8:8D:E5:1B:06:96:B0:4F:AC:C1:33:9A:73:B5:D2
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 019425FCB5521C45D4BA64F2E1CDC29F8FF4
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/qY4Pn2rojeUbBpawT6zBM5pztdI.roa
Signing time: Thu 02 Jan 2025 07:48:26 +0000
ROA not before: Thu 02 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 2a04:f400:3001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b5:52:1c:45:d4:ba:64:f2:e1:cd:c2:9f:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Jan 2 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a98e0f9f6ae88de51b0696b04facc1339a73b5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:be:10:49:1c:b8:ae:44:f2:88:e3:2b:ab:
09:0c:00:d7:f1:6b:a8:55:f6:69:4a:6c:82:1b:81:
95:32:2c:c4:f1:4a:0d:01:a0:08:5d:4b:f4:1d:9e:
ce:37:e9:8a:62:8f:eb:ee:b9:29:4a:fa:b0:9e:c8:
6d:e6:8f:e5:20:47:3d:7e:18:35:d0:8e:31:10:ec:
49:06:e5:65:09:9e:02:a7:f6:b7:5a:3e:58:61:2d:
a9:a2:66:0b:30:4a:a0:2f:85:88:22:f8:70:06:75:
89:b8:5b:7b:61:43:cb:11:97:6b:a1:e8:9b:6a:66:
99:e0:c7:cb:72:af:89:e0:fd:0c:32:dc:18:09:bc:
b3:ec:80:e1:d0:60:78:a5:9c:c5:4d:9c:59:53:d5:
39:dc:92:e6:14:b0:f9:a3:f7:ec:1e:02:3f:b8:ad:
5a:47:bd:07:19:2c:77:cb:09:0f:ad:56:40:9b:ae:
01:05:83:67:fa:6d:d6:2d:4c:cf:1d:18:7b:82:00:
7f:78:a3:25:97:a0:ba:f9:40:0b:14:ab:ea:01:4f:
9e:82:64:ae:cb:d0:02:d7:d3:36:2a:59:e5:96:fa:
43:08:7b:9f:f1:bc:85:dd:f6:60:90:64:2a:bb:92:
35:89:07:4a:57:72:02:eb:a0:54:f3:fb:08:4d:f4:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:0F:9F:6A:E8:8D:E5:1B:06:96:B0:4F:AC:C1:33:9A:73:B5:D2
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/qY4Pn2rojeUbBpawT6zBM5pztdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:f400:3001::/48
Signature Algorithm: sha256WithRSAEncryption
76:89:24:cd:42:9e:88:5d:16:fe:72:e8:23:7a:58:88:07:37:
8f:e4:45:80:1d:aa:ee:ea:30:76:71:58:fc:a7:b0:51:85:44:
9d:bf:ee:33:01:40:e1:45:33:de:3d:5a:54:43:61:66:14:5e:
be:57:7d:4a:aa:e2:65:0c:29:e6:45:62:5d:5c:6c:b5:43:d7:
72:97:04:1e:84:e3:06:81:56:22:de:0e:89:12:ec:ba:fb:6e:
17:3e:d9:e0:a7:75:e1:8f:76:3f:05:57:05:4f:73:cb:0e:99:
ae:29:34:82:b7:97:3a:b4:42:61:49:87:d2:0a:01:de:71:51:
53:c1:2a:bb:7b:eb:90:9b:23:f7:44:2e:3a:e3:49:53:b6:87:
08:fa:c7:54:eb:41:94:36:1f:f5:83:48:00:6d:78:7f:eb:3b:
af:fa:04:8c:68:53:65:98:01:b5:31:ee:61:ac:1a:51:ed:3f:
75:27:35:8f:10:93:08:9f:c9:b5:87:fb:5d:f6:c1:92:9f:45:
f2:d6:bd:01:db:a0:8e:02:d6:8a:36:bd:cc:9e:d3:80:21:e4:
8e:4d:ff:dd:33:19:25:48:76:95:63:0b:07:06:61:da:40:9d:
26:3b:36:91:b6:e1:ad:22:29:d3:80:e6:be:9f:52:b8:c9:32:
0b:9f:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:00 2025 by rpki-client