Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa
File: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (raw, json)
Hash identifier: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=
Subject key identifier: 41:AD:C8:C1:2B:5C:CF:FB:16:47:3D:0B:EA:8B:9D:E1:93:89:39:1F
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 019427B610FF1E83D4BF2CFFBA7C46468467
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28847
IP address blocks: 2001:67c:41c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:10:ff:1e:83:d4:bf:2c:ff:ba:7c:46:46:84:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41adc8c12b5ccffb16473d0bea8b9de19389391f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:18:22:01:96:00:48:14:26:b8:84:06:c8:
7a:9c:2d:f1:2a:8f:9e:46:1e:1b:19:19:4d:3e:1a:
4f:66:22:ba:bf:0a:ef:c6:03:fb:77:16:a1:14:01:
c9:a9:89:25:d8:02:d3:b3:62:73:1e:5e:4f:06:bb:
ef:ca:db:d7:a5:ea:be:d9:66:77:42:0b:d6:9d:bb:
e2:ea:75:0d:c7:b0:54:89:bb:3b:8a:b0:d3:46:17:
ce:e2:6c:b0:99:09:34:30:2c:e1:ae:a7:6d:57:e9:
3c:01:8f:20:3f:89:d7:24:3b:1f:e8:65:04:24:e0:
0d:3f:ce:61:a2:92:9c:9b:81:3c:38:0c:3e:e0:fe:
e0:8a:72:f5:20:97:68:67:e2:36:df:0e:00:91:b2:
6d:23:cc:1d:f4:a7:47:68:5f:ab:7e:1d:23:7d:a6:
3a:0b:05:90:8a:c4:fb:a2:cd:b8:2a:7f:aa:63:eb:
ce:2c:93:c4:2f:1c:d8:48:c7:74:af:25:fc:30:dd:
ac:30:15:71:96:55:7c:8e:74:d4:24:52:aa:6d:2a:
39:14:37:4b:4f:33:7d:3a:fb:d3:e2:2d:67:58:d8:
46:e9:32:78:95:09:06:3c:a4:31:53:ea:c0:7b:89:
b1:cc:56:43:5d:37:3b:dc:f6:1a:bf:94:98:b9:1c:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AD:C8:C1:2B:5C:CF:FB:16:47:3D:0B:EA:8B:9D:E1:93:89:39:1F
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:41c::/48
Signature Algorithm: sha256WithRSAEncryption
a4:20:a5:74:fc:86:20:b3:e8:94:2e:91:bf:d2:fb:4c:fa:63:
cb:a6:b0:ed:1f:05:5b:16:f5:86:1c:7e:c7:e2:d6:76:63:b4:
e0:61:17:eb:93:90:e9:4e:4a:a6:9e:3a:7d:b7:65:de:dd:ef:
2b:79:69:cb:9f:5a:e6:2a:c9:91:17:c6:cc:dd:f5:79:fa:33:
a3:69:f7:e0:5f:cc:43:d3:d7:f7:d7:da:1d:2c:a3:9d:d0:32:
6e:33:f6:11:1c:d9:b7:90:5a:76:fc:d9:db:42:76:c0:d7:20:
5c:64:19:6d:60:73:ec:9d:cd:11:94:8a:eb:b0:0c:99:b5:60:
c1:5e:b8:71:fb:88:f0:c8:fb:57:c3:e5:06:92:b3:79:c9:a9:
06:cf:85:9c:9e:7b:c2:77:e2:02:0e:00:a9:23:d6:24:93:31:
cb:cc:04:0f:51:29:fb:a7:d2:37:d3:d0:c8:d1:d0:63:6f:75:
3b:be:d2:b2:54:6f:35:e4:08:95:67:6b:d4:62:78:87:4e:49:
c7:6b:86:7a:c9:ba:55:d9:81:1d:01:24:98:6f:93:2c:af:57:
04:0d:3c:d9:47:01:6e:32:bf:bc:12:79:3c:fc:ea:0e:75:4e:
c7:e2:8a:3c:c7:61:fd:82:a3:ff:56:19:3c:69:a4:6a:cd:68:
8b:19:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:19 2025 by rpki-client