Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/xRGXa_rFHLs9DDlfm-f8Qce0Ffs.roa
File: xRGXa_rFHLs9DDlfm-f8Qce0Ffs.roa (raw, json)
Hash identifier: 5HvsRdZu5Ybkzzocd5AdnAdVjk12kcxzKBbQ/2vcJuc=
Subject key identifier: C5:11:97:6B:FA:C5:1C:BB:3D:0C:39:5F:9B:E7:FC:41:C7:B4:15:FB
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0195908C51C3CD36FDD0DD0DCAB52D9896F5
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/xRGXa_rFHLs9DDlfm-f8Qce0Ffs.roa
Signing time: Thu 13 Mar 2025 17:27:49 +0000
ROA not before: Thu 13 Mar 2025 17:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a0d:b9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:8c:51:c3:cd:36:fd:d0:dd:0d:ca:b5:2d:98:96:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Mar 13 17:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c511976bfac51cbb3d0c395f9be7fc41c7b415fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:2f:a3:c3:43:80:b2:8b:ae:d8:d3:97:d8:
16:56:fd:99:47:29:3b:35:ef:42:86:1b:a4:8a:8d:
f2:6f:16:c3:b6:2b:f2:ae:78:69:db:59:83:e0:c0:
f7:20:e2:4c:dc:7d:01:8d:93:c8:1f:71:97:fb:88:
15:d3:81:1f:f9:9d:a5:ae:6f:11:3e:69:27:49:b7:
00:3f:5c:fe:3b:3b:be:d8:27:28:5f:ff:bf:cf:76:
62:57:7d:1e:4c:0e:af:41:92:45:7d:f2:17:f0:3b:
bc:e4:9d:d3:fd:a1:56:d1:95:f1:a2:a9:d8:ff:68:
91:2f:25:d2:38:df:f1:d5:61:ca:c8:85:a3:19:83:
65:57:92:81:91:71:db:29:27:1a:81:af:44:6b:ce:
23:35:63:93:d0:70:c7:8d:25:d3:3d:d7:ac:ae:da:
05:a2:f8:d4:f8:d9:18:1b:82:8d:3b:64:b7:56:a3:
f3:57:a4:7f:05:43:26:f6:25:46:aa:06:6e:3e:8a:
13:16:03:fe:0d:a3:b4:40:07:a8:ba:be:04:9b:5f:
b8:bc:74:55:b3:2f:7a:06:f9:5b:e8:76:6a:de:fe:
b0:27:fb:4a:33:e3:68:cf:9c:9b:9e:fe:21:1a:98:
2a:be:c7:07:5f:d6:b4:5e:7f:b3:62:df:d2:3d:a9:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:97:6B:FA:C5:1C:BB:3D:0C:39:5F:9B:E7:FC:41:C7:B4:15:FB
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/xRGXa_rFHLs9DDlfm-f8Qce0Ffs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b9c0::/32
Signature Algorithm: sha256WithRSAEncryption
43:46:ab:8e:93:9a:dd:86:a9:a1:35:a4:87:23:dd:58:33:15:
7e:b0:1b:b7:65:1a:fc:b1:7c:c7:5e:5d:16:3a:30:8d:23:b9:
79:c1:13:19:f4:ad:a6:cd:13:0b:f4:a6:5c:6c:11:e4:27:98:
e3:c2:e2:9a:43:09:b1:5d:d7:4a:8e:ef:4a:4b:ee:29:55:f3:
20:f6:b9:79:0b:74:5d:3d:0a:40:8a:c1:4c:ac:5a:8a:35:0c:
c7:42:7b:79:d4:e8:e5:c2:28:de:d6:65:ec:c5:c2:eb:3d:c1:
22:33:21:65:bd:8e:49:03:99:f5:f0:17:93:db:bd:fc:bc:9a:
b0:3f:d9:d7:a9:e2:66:6f:d2:d6:ee:16:39:9f:a3:fb:ad:d4:
40:fa:89:7a:b7:2a:24:2a:22:7d:2f:b4:e8:65:80:88:15:8d:
b0:fb:43:42:47:31:2f:0a:28:44:de:37:c9:23:c0:82:b7:e4:
0a:68:8b:20:c5:c2:37:07:ff:97:d9:02:5c:ea:da:e2:b6:53:
e7:56:e0:d2:8f:f4:8e:cb:7e:35:4a:49:c6:ba:22:d1:9c:43:
c2:1d:73:18:17:b8:08:51:c7:03:69:7b:4a:62:50:48:87:f0:
eb:84:64:bc:25:6a:77:f9:d0:95:23:0d:83:b9:ec:ca:2d:ce:
ca:6a:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:55:31 2025 by rpki-client