Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/9irhpoo7t3RuQsofnh453Wz9yzc.roa
File: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (raw, json)
Hash identifier: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=
Subject key identifier: F6:2A:E1:A6:8A:3B:B7:74:6E:42:CA:1F:9E:1E:39:DD:6C:FD:CB:37
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01941F8C7A4DCB8C9779E9A2995E4F918FF1
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/9irhpoo7t3RuQsofnh453Wz9yzc.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201319
IP address blocks: 2a07:2902:6f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:4d:cb:8c:97:79:e9:a2:99:5e:4f:91:8f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f62ae1a68a3bb7746e42ca1f9e1e39dd6cfdcb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:18:9f:50:63:fb:19:0a:6f:eb:b2:0b:60:
f7:c7:aa:70:9f:60:a2:73:5e:91:b4:a4:86:5d:01:
27:de:5d:a7:76:d3:69:a6:74:4c:d1:25:09:db:07:
0e:bd:5c:40:88:db:14:12:1e:d7:c3:e2:2a:9a:60:
f7:10:13:f6:97:8e:99:99:9b:84:e7:e9:fd:c9:61:
fc:08:51:25:3e:33:80:15:2b:6c:d4:8e:90:24:1b:
f8:07:80:01:f8:f5:45:32:58:c4:92:82:8f:8c:46:
fb:16:11:1d:fb:64:3f:5e:30:03:de:87:d3:e1:48:
ad:7a:8e:a2:c1:01:64:48:39:82:f5:ef:1f:a6:fe:
c9:90:49:27:c5:74:ce:e9:da:d6:1f:ed:44:d1:0f:
78:4d:3e:d1:b1:2f:f0:f0:1e:1e:4f:ea:00:fc:6c:
fc:3a:ea:c2:9b:e1:bb:9c:97:d6:1f:4e:c7:0d:fb:
91:e1:37:a4:ae:cd:54:8c:ae:db:10:d3:be:2b:51:
0b:93:d9:43:56:95:fc:3e:dc:26:13:88:09:f5:0d:
35:af:eb:14:0a:5f:95:df:b4:1b:02:37:0a:e9:cb:
e0:ba:1d:8c:a3:9d:c8:1b:db:9f:c1:c3:4a:c3:e9:
58:70:c7:e8:46:a9:03:0e:ae:13:5a:90:e1:2e:73:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:E1:A6:8A:3B:B7:74:6E:42:CA:1F:9E:1E:39:DD:6C:FD:CB:37
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/9irhpoo7t3RuQsofnh453Wz9yzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2902:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
20:bf:53:e9:85:a0:42:a2:80:31:7b:06:8c:3f:4d:25:09:d8:
57:08:0b:b4:c2:12:21:76:cf:b0:93:18:e1:45:c4:d3:5f:a1:
9d:49:e1:6c:8f:f3:e5:94:c7:af:49:a5:71:b4:64:5e:8c:d7:
42:cc:ee:10:ff:23:12:42:a4:1a:81:f6:da:8b:1a:9f:ac:91:
84:ac:07:30:db:86:21:3d:5d:46:cd:b9:48:04:ae:43:73:74:
40:60:83:6a:89:fd:2b:99:df:5f:68:21:05:9e:9a:db:64:67:
e1:40:f2:a5:58:a2:84:23:a0:d7:8d:b9:c5:55:a4:d6:95:08:
b1:f0:c4:be:eb:4e:36:66:69:78:ea:3f:ba:a5:a8:fb:de:7c:
82:9c:4b:b9:ca:be:d0:43:9b:cc:d2:d9:42:29:41:18:03:dd:
0c:bc:89:5c:00:9b:ea:ce:28:62:03:1a:eb:a2:c7:88:1b:bb:
18:50:74:25:ba:bc:03:35:4e:e5:ff:00:75:a6:bd:88:31:4c:
eb:e0:dc:e6:26:6b:16:2f:3a:f1:82:28:1b:02:49:ee:97:b4:
97:c6:cd:ed:d6:51:9a:aa:8d:a9:dd:fc:86:82:80:e6:40:c0:
e1:07:45:30:3f:3d:4a:d6:38:df:38:eb:84:b8:56:74:f6:ff:
0e:c3:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:47:37 2025 by rpki-client