Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/D2kQV4a4-SzltU8ixGA6WZgf16A.roa
File: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (raw, json)
Hash identifier: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=
Subject key identifier: 0F:69:10:57:86:B8:F9:2C:E5:B5:4F:22:C4:60:3A:59:98:1F:D7:A0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F87313680C9FFF3BDBB8AE0975AC8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/D2kQV4a4-SzltU8ixGA6WZgf16A.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203323
IP address blocks: 2a01:5c40:c000::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:87:31:36:80:c9:ff:f3:bd:bb:8a:e0:97:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f69105786b8f92ce5b54f22c4603a59981fd7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:ff:f8:b6:de:63:cd:88:32:2d:a9:38:9b:
f6:50:5c:21:6e:10:ef:67:31:e2:2f:f3:66:a9:b9:
d3:f0:92:fd:e0:60:b9:c8:a2:4e:05:34:64:f5:2a:
a0:89:67:b4:86:40:24:05:4b:ba:a1:ce:f8:73:b1:
d8:ba:fa:66:8c:ec:8b:c7:cb:5f:1a:dc:8e:90:be:
e7:20:5e:eb:2f:23:52:97:d5:44:ad:83:9c:74:05:
ac:c2:2d:20:37:da:57:f7:87:0b:65:9b:d0:f5:9f:
8a:29:44:18:85:f1:54:27:45:be:f2:66:d2:59:31:
86:c1:46:85:79:00:db:ae:9e:33:d9:b1:e9:32:35:
0b:26:de:3b:a1:7e:1b:f3:22:bf:df:6c:e2:47:60:
ca:23:b3:c7:1a:13:57:4e:de:c5:8b:94:22:06:c3:
25:f8:e2:e9:77:1a:30:72:85:61:8f:a9:8a:3b:df:
a0:8b:e9:00:cd:e3:aa:84:60:43:36:d5:36:da:66:
fc:2d:2e:57:5d:4e:9c:9a:7b:b5:a0:6c:71:bd:c1:
f2:de:45:1c:6e:ce:44:85:25:25:1c:ce:4a:15:b8:
11:15:71:31:16:ce:c3:6e:50:24:9f:0b:b2:73:96:
bc:d4:d4:ef:c0:15:1c:87:2e:95:f9:0c:19:34:6f:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:69:10:57:86:B8:F9:2C:E5:B5:4F:22:C4:60:3A:59:98:1F:D7:A0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/D2kQV4a4-SzltU8ixGA6WZgf16A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5c40:c000::/64
Signature Algorithm: sha256WithRSAEncryption
68:61:42:7c:0d:9b:52:e6:49:81:a8:77:b1:15:bb:c2:a0:74:
75:2b:c7:6b:64:86:0a:6b:7c:95:db:d4:90:83:0b:04:13:ab:
89:06:c6:8f:04:c0:de:58:77:98:a5:5a:be:d0:e5:47:b2:ad:
6d:c6:67:f8:26:ea:d5:f3:c9:e4:ed:f7:41:0c:12:aa:5b:1d:
27:b8:63:e6:61:a4:06:c1:14:a6:69:b1:48:1b:1f:a8:ed:1c:
e5:40:b6:1c:ef:08:08:83:6f:f6:7b:47:04:10:90:8b:53:f4:
eb:a1:82:1d:36:20:70:2b:5f:72:44:bd:f0:ba:3c:6e:7e:0e:
2e:b4:61:18:b7:fd:13:a5:de:e8:f2:58:4b:ef:33:38:a7:13:
0a:1b:26:a2:aa:61:ca:09:61:c1:1d:ad:e3:73:f2:d7:75:a3:
99:86:aa:d7:dc:84:78:37:36:dc:4f:6b:cb:ab:46:f1:d4:cc:
dc:1d:0c:75:a9:25:f6:d2:6a:2a:18:28:9c:57:37:0c:9c:73:
8a:e4:b2:7b:a2:d4:e4:86:24:36:07:14:97:bd:f7:22:32:2b:
ed:8b:2c:53:74:80:04:df:11:29:a9:10:7a:80:b2:bc:62:b0:
32:45:68:1b:44:7f:a2:79:4e:33:85:b6:72:e7:9c:a6:f8:ef:
4e:dd:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:06 2025 by rpki-client