Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa
File: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (raw, json)
Hash identifier: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=
Subject key identifier: 8E:6A:8F:B6:DE:4D:B3:F5:BE:88:11:4B:A6:19:BD:4C:E3:EA:70:19
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E134AC6CCFB56F29C7E93185091F
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa
Signing time: Wed 01 Jan 2025 21:48:57 +0000
ROA not before: Wed 01 Jan 2025 21:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 2a06:c3c0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e1:34:ac:6c:cf:b5:6f:29:c7:e9:31:85:09:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e6a8fb6de4db3f5be88114ba619bd4ce3ea7019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:7e:40:d2:0f:1b:0b:88:14:24:4e:e4:fe:
38:84:e9:04:bb:20:01:3d:d7:b8:cb:9c:7b:b7:55:
38:99:7d:c0:eb:ec:8c:3c:80:44:f0:4c:28:27:80:
96:0f:87:ad:63:81:30:6e:9c:0c:c7:ce:c8:53:fa:
b0:07:8d:e1:be:46:5e:86:ca:41:05:9b:d7:91:0b:
b8:74:07:78:2e:4f:25:a3:93:77:d5:2f:3f:d8:02:
c3:a9:35:ab:8b:9d:6e:72:69:6a:99:6a:f1:51:82:
14:24:b2:1a:c2:cd:d5:6d:90:9f:4c:63:6e:aa:91:
1f:a6:e1:4f:cf:3d:a6:56:1c:3b:6b:48:ce:e0:53:
18:21:8b:96:b8:ea:40:4c:cb:4d:07:5c:3b:3b:dd:
02:92:03:08:f2:a9:2d:07:04:c5:9e:ba:17:e5:96:
ec:c6:1a:5c:db:d9:e4:49:86:2d:34:25:42:9e:57:
83:97:bb:0b:45:6b:b7:0f:05:07:a4:ea:c6:0f:65:
ce:dd:a6:a7:25:85:29:31:33:22:7e:b1:ab:60:6d:
e7:b2:d3:4c:89:53:b9:4a:2c:35:98:12:dd:7f:6f:
55:fc:91:bf:93:1f:1e:9f:0e:ec:a5:35:2b:ad:cc:
9a:2d:ae:f4:25:28:fe:69:90:1c:0f:e0:70:74:e4:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6A:8F:B6:DE:4D:B3:F5:BE:88:11:4B:A6:19:BD:4C:E3:EA:70:19
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:5::/48
Signature Algorithm: sha256WithRSAEncryption
1e:6d:20:9c:74:f5:0c:93:80:8d:4b:a3:3a:80:07:f9:27:78:
80:a5:00:88:ad:79:8a:4e:ab:f0:b1:8f:32:e8:e4:c4:a1:cb:
66:52:48:11:29:44:2b:fa:8f:41:c9:15:94:19:86:d9:03:7a:
8c:e6:bb:02:0e:6d:5f:ab:04:09:15:85:45:e3:11:a9:c9:5d:
23:a0:18:76:26:03:5e:90:16:47:9c:0c:83:a8:c4:28:f3:ca:
8b:3b:51:81:25:09:f8:3a:0c:40:b8:47:b0:51:9b:27:cd:27:
eb:be:7d:a5:57:a6:3d:67:65:53:66:20:06:d9:a8:93:af:43:
30:01:2b:e1:a9:28:1c:49:7f:3d:99:11:28:e9:5d:fc:4e:83:
e5:25:b5:37:41:01:ed:8a:03:43:cf:f9:ff:b8:f4:b2:79:88:
2e:1b:87:d1:8a:6f:f5:6f:3f:36:a5:4b:df:7b:bd:c0:c3:e8:
9e:22:90:3d:81:43:cf:72:d1:b5:cd:e1:ea:b1:01:62:5d:79:
28:1b:d6:95:80:ce:f9:f5:e0:7c:3c:8c:66:ca:63:f1:40:68:
06:41:c8:a2:86:c2:45:0f:77:49:c1:d3:d7:a7:c6:1d:73:dc:
a8:a9:e1:6b:90:4a:73:3d:47:9b:46:25:60:b2:41:b7:26:4d:
a8:34:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:58 2025 by rpki-client