Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/A8PVa9vWSAwziXQoA3-_9FI8Klw.roa
File: A8PVa9vWSAwziXQoA3-_9FI8Klw.roa (raw, json)
Hash identifier: XOf6bTSMS9ukvYg53bvOoLSXUdGWB4/jS9MgEcYi5I0=
Subject key identifier: 03:C3:D5:6B:DB:D6:48:0C:33:89:74:28:03:7F:BF:F4:52:3C:2A:5C
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9F2BFE1D4F62C78E1C7C50F0F6CEF
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/A8PVa9vWSAwziXQoA3-_9FI8Klw.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212789
IP address blocks: 2a0e:a6c7::/32 maxlen: 32
2a0e:a6c7:1000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f2:bf:e1:d4:f6:2c:78:e1:c7:c5:0f:0f:6c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03c3d56bdbd6480c33897428037fbff4523c2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:50:88:39:36:50:c8:20:65:fc:9f:58:1f:
57:c8:97:0d:35:4d:ca:fe:14:60:3a:2c:cc:6b:94:
15:94:fc:c2:df:ec:00:aa:81:a7:52:06:44:b6:64:
33:17:29:7b:4e:62:4d:77:d5:7a:8b:ea:6a:5e:cc:
c9:c8:c5:92:8b:8d:16:fc:f9:11:d0:66:99:9b:e2:
6c:eb:92:9a:f0:3c:45:db:1b:a3:80:3b:64:f7:22:
b0:a2:5e:cd:5b:ea:d5:3e:ac:81:cd:7d:f9:0a:17:
38:c9:f2:c8:b5:e1:f3:13:c4:e8:75:2a:8d:ad:a2:
ce:5f:fe:aa:6b:57:87:55:9b:a1:5e:02:b9:78:0e:
02:d8:c8:2e:f4:b9:d2:f8:b2:80:cb:5b:ce:c3:b1:
d5:8e:da:ae:6b:7b:04:5a:5b:ca:1f:86:e3:7e:cb:
ef:92:86:bc:a8:03:22:56:3e:77:de:11:df:8a:97:
47:4e:f0:36:83:0a:85:ab:be:cb:c6:c7:30:a7:52:
22:b7:ca:69:89:eb:6c:ed:c7:a5:4a:bb:2f:76:f8:
ec:eb:fb:30:41:3f:9d:4e:41:7a:56:8b:fc:09:22:
28:f6:e5:df:7a:84:58:8e:b7:63:02:5e:c2:94:42:
dc:1c:04:be:6e:ba:82:3f:65:b8:18:8f:d2:42:71:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C3:D5:6B:DB:D6:48:0C:33:89:74:28:03:7F:BF:F4:52:3C:2A:5C
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/A8PVa9vWSAwziXQoA3-_9FI8Klw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a6c7::/32
Signature Algorithm: sha256WithRSAEncryption
1a:c7:b1:9f:cc:81:8c:3f:3b:45:a4:be:82:68:ce:77:3d:0c:
d8:6d:de:9f:b0:69:5a:a2:e2:92:5e:29:46:e4:98:52:67:dc:
f2:64:24:38:8f:7a:e5:7e:bf:fa:89:66:87:37:0b:3f:19:eb:
2c:c0:07:6a:5e:da:1b:64:00:4d:0b:da:5c:2a:84:57:f1:a9:
c4:42:00:ed:bc:6f:37:fb:96:61:0e:15:a8:0f:6c:71:97:39:
62:32:da:56:9b:43:69:53:c2:16:bb:f8:8d:8e:64:c9:d2:06:
35:fa:f8:12:b3:da:63:68:e6:8a:f8:8d:d7:0c:00:8a:1a:02:
e7:88:e7:4b:39:95:2c:b5:4e:a5:27:3b:8e:df:70:cc:56:aa:
9f:c0:4d:ba:3b:50:55:dc:41:c8:b7:74:f4:1c:2b:24:5a:68:
23:e6:a5:e8:63:0f:3e:c8:77:09:08:81:70:ce:d8:39:41:d0:
39:ab:22:c3:07:ef:ee:29:dd:81:8c:0c:cb:05:59:35:d4:35:
b5:1d:31:7c:49:41:f9:4b:88:c2:9d:54:ba:7f:b9:e8:a8:c3:
72:69:23:e9:c7:96:d9:56:ab:d3:74:4c:a3:89:fb:2d:e1:bc:
a7:50:69:8b:4c:20:fc:b3:60:36:bf:dc:31:f8:19:19:b3:e3:
8e:ec:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:32 2025 by rpki-client