Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa
File: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (raw, json)
Hash identifier: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=
Subject key identifier: F5:D2:8B:31:25:4D:67:DE:07:16:A3:22:5C:A6:94:BE:AF:BF:5A:39
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 01941F8C2433E27944118F19B215EDAEA706
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196952
IP address blocks: 2a10:d181::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:24:33:e2:79:44:11:8f:19:b2:15:ed:ae:a7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d28b31254d67de0716a3225ca694beafbf5a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:1f:b0:4a:20:53:66:c3:56:8d:19:a5:9e:
60:da:b5:7a:c2:5d:d3:68:83:e7:30:b2:2e:4e:e1:
9c:51:c0:f6:9f:3b:b3:8e:34:49:09:d5:e3:19:48:
74:aa:e4:fc:7d:43:16:5e:3c:3a:7a:41:b6:34:05:
f9:59:aa:04:80:2f:2b:c9:67:7f:dc:bd:52:04:63:
89:09:40:d2:2a:6e:aa:fa:d9:62:0b:1f:5c:79:4b:
4b:ee:0b:0e:d2:14:b4:61:12:af:d7:71:f6:95:6b:
6a:7e:62:72:7c:30:cf:83:c0:52:58:13:41:bb:f6:
7e:ff:a2:9b:ed:8e:73:db:22:18:b9:55:91:2d:28:
29:65:3e:84:e7:af:30:0a:1b:1d:75:58:9d:d0:50:
6b:53:24:19:e2:5e:a5:37:dd:8f:07:99:d7:45:52:
95:9f:87:72:24:c8:0f:2b:ea:99:ee:0f:8f:28:4c:
de:a2:57:35:b8:ec:2f:1e:ab:91:73:3b:31:6e:3d:
c8:47:5c:98:7c:84:98:e1:4f:95:be:8f:76:43:e9:
3b:c4:10:09:7b:be:59:a4:3f:e3:56:d5:ec:37:40:
27:59:55:ec:2f:fa:5c:af:da:f6:36:ed:e8:d1:fe:
c5:10:98:27:ce:f3:1c:40:71:ad:b2:7d:9e:84:b8:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D2:8B:31:25:4D:67:DE:07:16:A3:22:5C:A6:94:BE:AF:BF:5A:39
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:d181::/32
Signature Algorithm: sha256WithRSAEncryption
61:3c:e6:48:a5:eb:67:fb:ac:f2:17:38:a2:0c:44:5a:78:98:
54:35:a0:90:75:f1:c1:33:67:f5:43:81:df:99:59:57:f9:e5:
5c:79:c0:02:9d:f8:be:24:a9:ad:f3:bf:44:00:c3:d5:17:7c:
14:de:10:79:dd:8d:6d:b1:d9:f7:89:6c:75:58:40:5b:79:1c:
1b:b0:a9:f2:64:71:2b:69:d5:83:1a:dc:24:f3:e8:c7:1b:67:
ef:c9:a7:a9:99:b4:d3:08:68:d4:79:56:6d:75:88:8a:a9:cb:
0d:42:fd:f1:86:c7:65:44:cc:b6:6b:7b:1c:6c:68:41:52:52:
70:5c:35:7b:4a:1c:79:21:5a:00:b2:26:81:af:b4:ce:13:56:
77:90:44:d0:c2:41:f8:bc:5f:c0:6d:88:89:b3:54:8e:8f:62:
7f:18:8f:70:6a:c7:c9:c0:15:da:d4:78:ed:5f:aa:11:32:71:
ae:ff:df:6b:fd:b1:49:c3:1a:38:8e:16:9f:d5:76:3a:a3:9e:
25:46:8c:07:dd:cd:63:40:b8:0a:7d:c6:94:b2:76:36:8c:ae:
47:17:fe:00:43:88:fa:3d:5f:6f:51:86:6b:a4:bd:36:62:56:
84:2e:87:51:c9:e2:96:2f:75:55:5c:c3:16:33:4f:89:68:40:
cd:9d:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:39:49 2025 by rpki-client