Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/oKSHvOI6a3wBQ4njfGV3S_7Sbkc.roa
File: oKSHvOI6a3wBQ4njfGV3S_7Sbkc.roa (raw, json)
Hash identifier: zclvRtzWTLzWr7SKBjsrPG4/869JCHe23hkSJVxmGco=
Subject key identifier: A0:A4:87:BC:E2:3A:6B:7C:01:43:89:E3:7C:65:77:4B:FE:D2:6E:47
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 01961A01425E8196EE256E4022B643AE266D
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/oKSHvOI6a3wBQ4njfGV3S_7Sbkc.roa
Signing time: Wed 09 Apr 2025 10:03:32 +0000
ROA not before: Wed 09 Apr 2025 10:03:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212615
IP address blocks: 2a0b:7c80:2::/48 maxlen: 48
2a0b:7c80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:01:42:5e:81:96:ee:25:6e:40:22:b6:43:ae:26:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Apr 9 10:03:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0a487bce23a6b7c014389e37c65774bfed26e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:e4:35:4e:75:40:fe:18:47:38:e8:7a:6d:
c8:df:54:41:65:ad:75:7c:fc:d7:05:7a:f1:97:17:
b2:7b:40:1d:c5:e1:fc:13:ad:db:c6:39:fe:66:50:
d3:a8:d3:c0:79:22:56:76:2f:65:83:de:d5:f7:8a:
16:31:4d:fb:2b:42:90:35:76:ca:32:5b:ae:86:05:
0f:ba:f3:94:f0:f2:bc:e4:33:28:97:21:c9:5f:18:
4c:f5:5e:3f:15:4d:2c:c7:d2:50:d0:fe:49:29:a6:
53:14:c5:9d:b2:23:10:1a:e3:16:45:11:06:d1:3c:
77:27:d3:c1:9f:3a:11:10:53:dc:01:a4:85:d2:7b:
c2:2e:0b:46:13:9d:1e:88:25:87:80:27:9d:b9:e3:
8d:e9:7a:a2:ee:11:7f:11:4a:1f:82:56:4f:46:bb:
1a:93:a1:1f:f5:f6:c7:b2:d2:2b:f5:69:7f:5e:24:
ed:2c:be:1f:4a:6b:e3:4d:c0:e5:0c:7f:64:21:fd:
7f:36:f3:47:aa:ec:83:c2:a2:92:a2:66:32:1b:9a:
a3:76:78:ef:63:04:1f:b0:5b:93:2a:c4:53:80:75:
ab:1d:5f:c1:f9:30:52:88:9d:09:59:bd:07:f5:b5:
d4:57:5b:bb:3d:66:fa:98:31:67:d5:1b:6f:b5:fe:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A4:87:BC:E2:3A:6B:7C:01:43:89:E3:7C:65:77:4B:FE:D2:6E:47
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/oKSHvOI6a3wBQ4njfGV3S_7Sbkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7c80:2::/47
Signature Algorithm: sha256WithRSAEncryption
28:16:d2:2c:75:2e:ce:49:1d:00:ca:4a:34:11:65:ef:ba:f9:
d1:6c:7a:5f:95:6f:d5:90:22:d8:bf:4a:75:53:61:c6:68:f8:
df:2f:e0:27:94:12:82:7f:e4:58:bd:7a:a5:dd:62:81:7e:93:
1a:c6:54:d7:8b:a9:e1:04:09:c2:04:8d:89:a4:fd:dc:86:f9:
eb:1f:97:53:b7:d1:e2:c0:e9:7f:aa:67:1f:64:20:74:fd:79:
da:84:bc:6b:cd:7f:7b:4d:31:1f:3b:2e:ab:07:e7:1a:6c:c2:
b0:6f:2a:6e:52:e9:8a:15:88:21:e0:c9:b3:61:7a:48:13:62:
f8:50:ac:16:62:68:58:15:a8:69:b1:12:74:f3:a9:aa:a8:56:
9b:3f:d4:53:08:1f:7f:d9:f8:dd:3b:e7:f0:e1:56:af:3b:f5:
36:81:e8:31:30:a1:ce:58:85:11:06:8a:e8:c3:e3:f0:1b:ab:
69:29:9c:a3:05:4d:3f:b2:9e:bd:27:44:32:34:48:74:d3:e0:
34:77:7c:de:d5:cf:21:f2:49:94:65:49:e3:08:e8:bd:fa:d6:
cd:b0:f9:1d:5b:75:94:53:ae:7f:2b:6f:82:d1:5f:e8:ac:08:
27:0a:55:79:d4:f0:bb:27:2c:da:ab:fa:4a:39:51:7e:ad:b2:
c8:87:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:07 2025 by rpki-client