Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa
File: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (raw, json)
Hash identifier: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=
Subject key identifier: EB:ED:62:D0:DF:C4:6C:56:53:A3:D0:0D:97:68:58:98:85:D8:EA:43
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 01942444B4A0D9EA5B24ED5432F6E6947222
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43465
IP address blocks: 2a03:e140:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b4:a0:d9:ea:5b:24:ed:54:32:f6:e6:94:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebed62d0dfc46c5653a3d00d9768589885d8ea43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:40:9f:a7:6d:a0:48:6e:67:4b:6d:c0:f1:
0f:a0:e0:ab:75:8b:4f:af:f9:ac:00:b9:4e:49:65:
c0:32:05:00:39:af:30:ff:5b:ff:ac:f7:20:01:63:
b4:00:7f:67:75:b2:58:27:09:7f:2f:8b:14:4d:cd:
df:3c:19:b1:b9:62:27:e2:cd:21:d1:3f:8b:d2:d0:
6c:37:90:23:da:63:a1:c3:ac:4d:87:86:b4:9d:e9:
3c:38:d2:c5:cd:18:bd:4a:0d:1c:f7:d7:dd:77:c9:
8d:4f:bf:15:96:7a:08:b7:7f:c7:a4:e4:09:28:22:
63:4f:7c:a2:32:96:a2:19:e9:1d:61:43:d0:67:23:
3f:49:f0:12:04:db:a8:cc:c6:f8:18:5b:18:9f:cf:
1e:b0:ad:99:e0:16:c3:45:44:47:11:51:e6:74:8a:
cb:29:e7:58:58:8c:4c:35:fd:32:88:cb:a1:24:87:
5c:38:cf:28:b1:89:af:b4:4e:4e:41:7d:16:ee:69:
b5:b1:fd:dc:61:7a:40:49:e7:74:c0:a0:4f:f2:09:
5b:28:c6:9f:67:b7:44:a7:35:f6:23:0e:5b:35:68:
74:02:e8:9f:03:d3:a4:f9:ad:26:ca:7b:60:bf:5d:
34:7a:f3:a1:b3:1c:52:92:bd:fe:3c:76:1d:53:c3:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:ED:62:D0:DF:C4:6C:56:53:A3:D0:0D:97:68:58:98:85:D8:EA:43
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e140:5::/48
Signature Algorithm: sha256WithRSAEncryption
1e:9c:bd:c3:3c:29:df:36:e5:8b:c1:7f:b9:be:39:b6:70:41:
ae:e5:17:f3:f6:2d:42:ae:aa:b8:c9:d3:a8:3c:41:61:f4:50:
63:8b:4a:e8:c7:1b:ef:b1:89:61:12:bb:b1:d4:fd:a2:f7:d0:
0b:ad:36:76:db:ca:50:8d:64:08:e2:03:fd:f2:ba:9a:47:f0:
4b:22:30:a4:10:92:9b:68:44:21:c8:6a:ef:3f:51:ba:b8:5c:
fb:11:01:07:77:86:f7:7e:ff:49:2f:b0:82:bb:5a:b4:9e:d0:
d5:ba:47:a7:b4:ee:b0:92:8a:20:1a:07:62:49:fc:a6:bd:6f:
f0:8f:a1:80:fe:51:ed:51:cc:02:a4:e0:b3:dd:01:f4:ac:c3:
3d:f0:59:f0:93:45:36:f4:5d:c6:a7:61:fe:1f:a4:b9:be:3d:
f6:8c:fd:0d:26:d2:7f:d5:43:17:e9:aa:21:69:3c:44:14:0c:
ec:3b:2a:82:e1:8b:b3:4f:e1:cb:52:2e:d4:9b:f2:81:c8:86:
c3:5c:e6:8e:db:93:8f:86:54:83:4d:be:4c:38:bb:47:27:82:
51:d6:52:ab:76:ed:db:b8:a8:27:e0:8c:94:26:6b:0d:49:65:
51:cb:4c:b3:c4:3a:08:2a:ab:89:5e:90:83:e8:22:3a:b3:54:
ac:78:cb:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQkRLSg2epbJO1UMvbmlHIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew
M2UzYjEwHhcNMjUwMTAxMjM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmVkNjJkMGRmYzQ2YzU2NTNhM2QwMGQ5NzY4NTg5ODg1ZDhlYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L5An6dtoEhuZ0ttwPEPoOCrdYtP
r/msALlOSWXAMgUAOa8w/1v/rPcgAWO0AH9ndbJYJwl/L4sUTc3fPBmxuWIn4s0h
0T+L0tBsN5Aj2mOhw6xNh4a0nek8ONLFzRi9Sg0c99fdd8mNT78VlnoIt3/HpOQJ
KCJjT3yiMpaiGekdYUPQZyM/SfASBNuozMb4GFsYn88esK2Z4BbDRURHEVHmdIrL
KedYWIxMNf0yiMuhJIdcOM8osYmvtE5OQX0W7mm1sf3cYXpASed0wKBP8glbKMaf
Z7dEpzX2Iw5bNWh0AuifA9Ok+a0myntgv100evOhsxxSkr3+PHYdU8PTFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOvtYtDfxGxWU6PQDZdoWJiF2OpDMB8GA1UdIwQY
MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt
MGQyMDUyNWVkYzc0LzEvNi0xaTBOX0ViRlpUbzlBTmwyaFltSVhZNmtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0
LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgPhQAAF
MA0GCSqGSIb3DQEBCwUAA4IBAQAenL3DPCnfNuWLwX+5vjm2cEGu5Rfz9i1Crqq4
ydOoPEFh9FBji0roxxvvsYlhErux1P2i99ALrTZ228pQjWQI4gP98rqaR/BLIjCk
EJKbaEQhyGrvP1G6uFz7EQEHd4b3fv9JL7CCu1q0ntDVukentO6wkoogGgdiSfym
vW/wj6GA/lHtUcwCpOCz3QH0rMM98Fnwk0U29F3Gp2H+H6S5vj32jP0NJtJ/1UMX
6aohaTxEFAzsOyqC4YuzT+HLUi7Um/KByIbDXOaO25OPhlSDTb5MOLtHJ4JR1lKr
du3buKgn4IyUJmsNSWVRy0yzxDoIKquJXpCD6CI6s1SseMt9
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:58:35 2025 by rpki-client