Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa
File: dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa (raw, json)
Hash identifier: onCp8InwxVqnOmHcxw1M4XVSgwg1eg4cDcncJgrt2EU=
Subject key identifier: 76:00:14:3A:FC:F1:3C:54:99:CD:01:42:66:C5:EA:E7:04:A6:B9:0E
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D46AED50518496273FFA0937406E8
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204443
IP address blocks: 2a0d:2146:8440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:46:ae:d5:05:18:49:62:73:ff:a0:93:74:06:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7600143afcf13c5499cd014266c5eae704a6b90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:87:29:19:4f:b9:41:87:c9:61:df:c3:36:
a0:6e:c4:91:c5:2a:77:3d:83:35:e9:44:f0:4d:91:
37:28:07:20:3e:10:28:71:ac:25:8c:77:a1:23:1a:
4b:04:80:63:52:cf:cd:9f:70:ff:8d:08:03:77:f0:
a8:7f:cf:e9:88:77:cb:07:60:cd:c0:97:96:ea:b0:
a4:c6:0f:b4:b9:6d:92:51:08:52:49:7a:8e:2b:55:
56:19:7b:e1:10:ad:33:6f:c9:ff:74:aa:59:61:e5:
b0:64:b8:1d:24:f9:42:f6:95:fd:8b:cf:c6:c6:55:
e8:1c:27:a6:51:cd:9a:52:37:8c:f5:f4:38:0a:98:
cf:19:05:8c:d3:da:41:71:f0:ca:29:68:32:74:0d:
51:3a:e1:f3:85:fe:ec:f2:0d:00:ec:23:ec:cd:59:
86:5a:7d:62:2e:35:63:c8:50:47:76:bc:a7:97:44:
48:f7:e8:2c:9c:c8:7e:a6:b1:57:83:89:48:33:9f:
10:98:ee:6a:3c:70:d2:d2:f1:20:7c:67:4a:24:02:
d8:46:a3:81:80:a0:24:6f:37:f5:69:43:5f:bb:31:
64:56:c7:56:55:06:39:0f:45:6b:9c:b8:97:00:3a:
d3:c6:3a:a1:11:8c:b2:44:f2:7b:16:85:91:b2:51:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:00:14:3A:FC:F1:3C:54:99:CD:01:42:66:C5:EA:E7:04:A6:B9:0E
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8440::/44
Signature Algorithm: sha256WithRSAEncryption
c1:50:1e:0a:3c:91:4a:be:8b:70:df:fb:5d:dc:df:b8:8e:db:
8f:08:a1:50:57:1a:0f:1c:a0:e4:67:e2:f0:b6:5c:f8:5c:88:
01:65:1e:7e:9e:31:f2:8c:f5:ee:09:fa:db:0a:b3:50:28:d9:
4b:2d:ad:56:3f:73:77:6a:bb:72:4e:69:2e:d9:75:ab:9d:af:
18:a6:68:5c:ec:90:41:13:16:76:82:a4:3b:1e:30:8d:ab:46:
1f:40:80:a5:6a:e1:c6:e0:4f:69:16:2f:6b:06:62:22:79:a5:
3e:ff:fa:e8:37:4b:78:1a:47:83:ed:e4:34:15:69:16:cc:50:
ad:48:1b:1e:91:1f:27:e1:29:1a:82:59:40:ac:21:8a:25:f3:
6a:c5:ea:c1:7d:09:31:a9:c1:31:40:ab:b9:82:c0:6f:f0:66:
43:a0:41:4b:af:f5:e6:58:0f:e3:55:16:5e:54:39:8b:0f:41:
af:6d:87:73:51:09:1e:ea:30:3c:d1:8b:7f:81:bf:83:28:3c:
e5:38:78:72:8a:a1:25:47:73:a0:4d:c2:bb:b0:2c:e5:bd:9f:
4c:19:e1:4a:70:43:3e:38:63:4b:1c:77:6a:dc:bf:b7:6e:5e:
cb:77:d2:31:76:4b:92:48:36:6e:93:f3:7b:5f:78:e6:68:e7:
b5:74:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:29 2025 by rpki-client