Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa
File: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (raw, json)
Hash identifier: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=
Subject key identifier: 9A:46:6E:F7:34:35:E5:22:DC:34:AA:CC:25:FE:87:F3:39:84:BC:43
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01941F8C878955BB60041C814C9A81D35062
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44803
IP address blocks: 2a0f:f01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:87:89:55:bb:60:04:1c:81:4c:9a:81:d3:50:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a466ef73435e522dc34aacc25fe87f33984bc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:8d:b3:ac:dc:90:6f:56:82:5b:a3:c8:0b:
94:58:d2:53:a8:41:3b:8c:dc:ce:f6:56:27:de:06:
fa:55:cf:75:dc:93:1e:fc:9e:8d:5e:e4:75:48:a6:
47:f7:09:e4:cc:64:28:2e:71:68:88:56:23:76:21:
96:b8:dc:dd:9e:76:01:74:4f:27:8f:ba:62:f8:67:
72:d6:13:e4:2d:03:bd:d7:ac:c0:39:06:ff:b8:b8:
a3:18:bf:c3:c6:e8:99:8e:2c:8b:53:c5:54:1c:89:
9a:d1:fd:a2:af:39:71:d2:d1:2e:20:eb:4d:cd:83:
6d:84:ec:61:cb:96:6d:f2:b3:82:6f:c4:1a:95:e1:
54:85:8f:fc:de:8e:6c:1a:dd:84:ae:72:68:ab:be:
f1:39:20:ab:d6:b3:0a:23:d5:11:25:6a:07:3d:3b:
e8:b0:aa:3a:ac:f2:49:46:28:a0:79:ef:5f:12:0d:
15:82:ff:c9:f4:d0:b4:e7:44:69:b9:e4:85:b3:92:
78:f9:d3:6f:86:ec:85:26:21:c8:3b:a7:6f:8c:03:
94:5d:76:08:1a:60:32:e5:03:f2:b8:f6:79:0b:0b:
f5:c7:76:07:40:59:a7:cf:cd:13:ed:9f:fb:cd:3c:
04:32:53:d2:2e:eb:0e:c5:98:73:26:c7:ff:0e:0b:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:6E:F7:34:35:E5:22:DC:34:AA:CC:25:FE:87:F3:39:84:BC:43
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f01::/32
Signature Algorithm: sha256WithRSAEncryption
56:14:d5:8d:c7:ee:54:81:86:09:45:d1:f0:46:4f:78:9e:b2:
85:53:be:cd:d3:30:10:2b:a9:88:a4:f2:3d:c5:04:55:f0:31:
61:9c:ca:f8:e3:9c:a2:ec:4e:56:53:0a:7d:b8:cb:c5:d8:0d:
4e:d6:7e:f4:92:b1:01:9e:c9:72:93:55:20:06:b7:11:94:80:
e4:27:56:4d:a8:31:f6:0f:2c:74:90:0a:61:69:ab:bd:6a:33:
4d:b8:ca:7f:ae:68:96:00:0a:5e:61:d6:16:6e:7c:b9:6a:b6:
d0:53:4e:b4:de:75:ec:39:df:3f:ff:e6:e2:da:12:37:61:56:
bd:15:7e:7f:0d:4c:15:68:c0:3a:19:22:0b:31:0d:65:14:4a:
ad:d0:bf:b5:c4:3f:1b:98:17:ea:3f:a5:74:1e:72:bd:5a:88:
6e:46:75:71:a1:44:22:d3:27:a9:9b:ae:6f:56:0c:b1:34:6c:
38:ba:a7:ac:b3:e9:22:5e:16:36:3b:77:74:e9:4c:9a:1b:9b:
7f:b4:8b:19:da:8c:88:95:dd:aa:80:eb:87:a3:41:51:5d:f9:
27:ff:bf:d2:4c:cf:9c:fe:cc:c0:43:23:2b:b0:f3:15:95:79:
6f:f9:9c:a3:36:41:01:43:e3:4a:84:c0:8d:11:94:2a:a7:b8:
e7:cd:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:08:39 2025 by rpki-client