Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ldV5QoFFgAFCUEkClvetJ__hiXo.roa
File: ldV5QoFFgAFCUEkClvetJ__hiXo.roa (raw, json)
Hash identifier: YNShms8o2Swyug0J9NOykCOYm2Nd9cAvalBds6vNvaE=
Subject key identifier: 95:D5:79:42:81:45:80:01:42:50:49:02:96:F7:AD:27:FF:E1:89:7A
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9F170BE003878FA19AF91DA2B4063
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ldV5QoFFgAFCUEkClvetJ__hiXo.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204093
IP address blocks: 2a0a:db80::/29 maxlen: 40
2a0a:db80:f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f1:70:be:00:38:78:fa:19:af:91:da:2b:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95d57942814580014250490296f7ad27ffe1897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:3e:5f:9a:34:d6:50:8f:71:1e:d8:31:62:
1c:69:1c:b4:b0:fa:c5:12:53:b1:9e:8b:1d:55:7a:
55:2a:62:60:b9:e3:47:c6:c5:45:f6:aa:9b:ec:23:
f7:61:d9:47:25:b8:05:6b:6b:05:57:9c:35:c1:f0:
f4:0c:c3:63:ca:2a:fb:5d:a5:af:f1:a4:df:7e:d5:
7c:3c:b5:b4:b1:fa:2d:89:ca:bb:a3:d4:25:bc:f7:
24:2b:f2:69:90:80:bc:ac:03:00:9e:6a:83:99:bc:
84:87:91:0d:76:13:af:ce:c7:6c:ed:c0:af:28:c5:
a0:f0:9a:ba:8b:fe:28:ad:57:80:b5:3b:ef:a4:91:
9c:0e:a0:f4:ca:eb:25:97:d4:d6:b9:94:1e:ae:e1:
96:7c:08:5e:54:95:26:12:43:48:3b:16:11:cc:50:
c4:49:3b:16:ac:58:22:8d:a2:e7:18:45:3a:a1:51:
e6:12:b6:cd:81:b3:16:3e:ff:cb:fb:c6:ea:95:b7:
66:ce:f6:1d:52:0f:90:5e:09:2d:9b:de:4d:cb:46:
28:6b:a6:82:a8:69:b0:9f:37:5f:0c:e2:f8:10:81:
39:50:69:ee:23:68:78:23:c1:48:aa:5a:9f:f1:1f:
23:53:9a:60:5f:5e:58:42:28:59:31:9a:81:f4:1b:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D5:79:42:81:45:80:01:42:50:49:02:96:F7:AD:27:FF:E1:89:7A
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ldV5QoFFgAFCUEkClvetJ__hiXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:db80::/29
Signature Algorithm: sha256WithRSAEncryption
2f:5b:64:32:9b:3c:1f:ab:41:5e:71:2e:b5:df:f7:57:9b:9d:
53:5a:bd:b1:92:a4:cd:c6:a1:b6:7d:6d:80:25:03:e9:e1:76:
b7:33:4d:32:e1:80:91:95:d6:47:18:35:4a:a9:64:24:83:18:
fc:18:bb:72:8e:a7:6e:39:05:75:77:95:40:0b:ac:58:92:9c:
cb:87:24:0c:e3:43:e8:8e:fa:f5:93:1b:a0:7d:6f:cc:7c:fc:
dd:88:ff:66:31:66:af:9e:24:67:b9:de:f4:d2:db:b0:d6:4e:
22:f9:d7:ea:c2:fa:f5:2d:0e:c9:c4:47:d0:ff:55:75:91:f9:
0d:d1:e2:6d:b5:33:ce:2c:be:ed:8d:e7:fa:a7:97:28:70:b4:
f2:b4:c4:42:9a:cc:69:e6:5b:e2:77:81:17:72:e0:37:f6:72:
31:fb:ac:0d:01:1b:10:a5:c2:75:80:bd:e2:cc:01:5d:52:59:
fc:78:e8:7b:32:a9:a5:74:00:7c:66:11:69:bf:60:da:50:35:
7d:d8:6e:5e:49:54:8b:f6:c0:28:0c:92:9e:7d:4c:07:41:97:
95:a3:f6:ca:ba:58:af:36:51:07:4e:b9:af:9d:14:17:1e:d8:
28:59:0e:9d:bf:6b:21:c7:2f:d8:83:e4:8d:58:5e:c2:0b:5e:
59:84:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:50 2025 by rpki-client