Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/RuH2k0iAjasiUyAH22AdPFV5Ae0.roa
File: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (raw, json)
Hash identifier: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=
Subject key identifier: 46:E1:F6:93:48:80:8D:AB:22:53:20:07:DB:60:1D:3C:55:79:01:ED
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 019424B403BA34E9282220C3B257ECC83307
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/RuH2k0iAjasiUyAH22AdPFV5Ae0.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a04:1f41::/32 maxlen: 48
2a04:1f42::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:03:ba:34:e9:28:22:20:c3:b2:57:ec:c8:33:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46e1f69348808dab22532007db601d3c557901ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:5b:cc:7b:39:2b:57:17:5a:1d:26:3c:93:
9f:27:23:d5:bf:98:87:7c:d2:c9:e3:be:88:ba:61:
d1:7c:02:76:b9:da:b8:04:0b:75:22:1a:86:d4:c7:
be:54:9f:1d:84:91:8d:a0:73:30:e0:ff:20:1b:bd:
04:9c:07:36:a6:b3:32:56:60:b4:67:63:c3:0f:e4:
48:6a:08:c2:1c:14:70:a0:4f:e6:3c:a1:1a:e8:68:
e8:eb:92:6d:47:11:42:9d:fc:ca:0b:ed:dd:1f:09:
02:56:9a:01:81:fe:05:48:d6:d3:29:cc:6c:4e:df:
80:38:eb:9a:19:eb:ac:c4:9e:df:41:e9:a1:17:07:
4f:cb:bf:e6:4d:12:ce:91:47:4a:7c:b6:2e:d9:7b:
a1:a1:f2:71:08:5e:52:39:8b:b3:cc:a8:2c:92:39:
50:0c:d4:2d:aa:53:a3:90:6a:97:77:20:84:18:4b:
21:e5:73:fc:4e:8e:e6:c6:96:d3:6a:3b:78:21:ad:
4d:53:8a:ed:7f:10:f2:4b:0e:c7:19:45:05:df:a1:
9c:96:ce:b3:00:ba:c7:dc:46:df:2a:a7:1e:1b:a6:
6a:31:a3:51:48:28:3a:f9:f7:88:b7:c2:c2:0b:fe:
cd:61:e2:bb:5e:f5:5b:f6:da:f7:d9:b1:9c:e9:6e:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:F6:93:48:80:8D:AB:22:53:20:07:DB:60:1D:3C:55:79:01:ED
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/RuH2k0iAjasiUyAH22AdPFV5Ae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:1f41::-2a04:1f42:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:88:94:6b:8f:d3:67:c4:78:48:b7:30:e8:2d:67:5f:f5:60:
90:59:5d:98:21:6c:97:54:e7:9b:cd:c7:2b:5c:aa:2e:54:af:
38:74:84:8f:d7:b9:ec:2e:11:91:fc:3d:eb:7d:4e:79:64:63:
3c:aa:85:ac:09:05:2f:9e:5f:f5:b3:2d:ec:c7:74:23:00:45:
16:cc:6b:38:3d:37:40:09:1d:d5:e3:af:9c:2d:92:c8:fc:d4:
64:63:4f:a6:c7:53:a9:49:4e:48:47:fa:63:d1:9f:ca:6b:eb:
06:dc:4a:ea:f4:eb:3f:1e:51:e1:96:c0:04:32:81:6f:c1:b8:
9d:2c:b0:63:9f:ea:27:30:3b:bb:89:ea:c3:72:54:09:b2:5a:
9b:e4:79:f0:9f:b3:4e:79:03:4c:be:14:ff:81:0a:f3:3f:1a:
9d:2b:c6:9c:fe:07:83:9b:a7:8f:c9:22:05:b5:77:be:4f:63:
54:33:6a:c0:0e:b8:03:83:18:df:ef:84:82:6a:be:03:5e:5b:
92:a0:65:b1:16:de:51:cd:3e:07:e1:50:90:a8:68:bb:3c:59:
de:87:f5:49:1b:cd:2a:1a:f0:7d:0d:79:70:9f:6a:3f:96:79:
08:f6:eb:03:01:d6:af:78:61:73:54:cf:b5:76:c3:a1:5b:3a:
05:93:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:36:02 2025 by rpki-client