Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/R7bu8qG1cHrF1V4napoZJ_0ac8k.roa
File: R7bu8qG1cHrF1V4napoZJ_0ac8k.roa (raw, json)
Hash identifier: 8pYmbeMeyeatySY+kjjQRXHpXEhr/sxXhbrbgg45kZA=
Subject key identifier: 47:B6:EE:F2:A1:B5:70:7A:C5:D5:5E:27:6A:9A:19:27:FD:1A:73:C9
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB7AE15444DAAAFD2A4B52070CCDF7
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/R7bu8qG1cHrF1V4napoZJ_0ac8k.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211211
IP address blocks: 2a01:48a0:4301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 18:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7a:e1:54:44:da:aa:fd:2a:4b:52:07:0c:cd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47b6eef2a1b5707ac5d55e276a9a1927fd1a73c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:91:81:49:02:bd:62:6f:5f:c5:6f:07:dd:
e5:3d:63:3e:a2:ef:9e:b5:ad:2c:0c:37:7e:2d:9f:
c4:ea:c8:b3:5c:35:c9:34:e7:c8:e4:45:1d:30:57:
b3:a1:c4:fc:43:12:cc:2a:63:ec:6d:90:55:2e:75:
4d:f0:b0:6e:8e:65:e0:40:ea:fb:39:5b:1d:cc:f6:
8d:fe:76:c4:b0:3e:e4:82:aa:8a:30:50:93:06:56:
e0:96:bf:73:17:7c:1b:52:20:17:7b:70:97:e7:7c:
e2:84:4c:26:d1:66:c0:ea:74:53:40:9b:37:b6:cf:
36:c2:4c:2b:f1:72:f6:aa:d9:ea:b2:e3:fc:7f:3b:
3c:04:b4:72:fa:b8:ae:23:b4:fc:7e:f6:86:f5:18:
e1:63:7a:66:7a:65:de:61:61:40:be:6b:e9:d3:68:
a1:56:a9:d1:f3:c7:57:c6:7a:1b:39:80:f8:53:62:
1b:bb:ea:8e:93:5c:f8:fe:fa:0f:93:64:49:31:e1:
03:d4:df:27:96:23:9f:41:6f:64:21:9d:f8:d5:e0:
08:2b:5b:36:f6:4c:0e:11:f5:c3:f1:a8:4f:1c:8d:
87:07:47:d0:1a:5c:a6:87:84:e1:ec:75:10:7d:20:
2a:ea:cd:a0:e5:04:f8:a1:a5:85:ec:21:47:ee:4a:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:EE:F2:A1:B5:70:7A:C5:D5:5E:27:6A:9A:19:27:FD:1A:73:C9
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/R7bu8qG1cHrF1V4napoZJ_0ac8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4301::/48
Signature Algorithm: sha256WithRSAEncryption
03:11:25:63:fd:55:05:e2:06:a2:94:52:e5:ac:a1:cf:9b:a3:
74:ce:bb:0e:30:66:8f:43:3b:39:28:8d:45:70:b9:35:95:2a:
b0:1c:fb:46:a4:8e:10:54:50:e1:9b:e4:3f:62:68:4a:8c:f4:
b7:5b:b9:3d:3e:76:ec:60:58:69:13:e0:90:ce:89:ed:0b:fc:
c2:ec:5f:fb:de:4a:1a:be:0d:17:7c:40:18:2d:5a:70:19:6f:
5d:9c:27:aa:c5:8e:8c:7a:9e:79:7b:b1:cf:5a:b7:c0:2b:36:
f8:a0:49:53:32:10:45:7e:17:5c:40:6d:06:6c:02:f5:b4:6e:
c9:f0:57:13:3e:f6:dc:3a:e2:b1:00:71:cc:39:87:b4:48:ea:
1c:08:d5:ca:09:ae:07:e4:c6:7a:26:92:2d:98:98:2d:fd:65:
3f:44:29:f6:ac:6e:70:1e:68:55:a9:ed:53:15:09:1a:e9:2d:
c1:50:dd:31:63:87:d7:a7:fa:30:78:f1:0b:16:a6:fc:9a:8d:
f6:94:ac:c0:9b:ba:d3:c1:cf:b3:b9:d0:d1:a1:50:b8:3e:30:
5b:90:5f:d2:4f:ea:28:35:6c:b0:e6:16:4b:17:78:9e:a1:0a:
8e:09:ff:2f:e9:c6:b7:1c:bb:cf:cc:1a:84:e2:eb:f8:c1:29:
5d:88:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:24 2025 by rpki-client