Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/q9FXpjO7WYpYF_PuEvxdIBNk31U.roa
File: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (raw, json)
Hash identifier: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=
Subject key identifier: AB:D1:57:A6:33:BB:59:8A:58:17:F3:EE:12:FC:5D:20:13:64:DF:55
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 01942825E618319C91C8ECA9495EA88AE1A3
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/q9FXpjO7WYpYF_PuEvxdIBNk31U.roa
Signing time: Thu 02 Jan 2025 17:52:39 +0000
ROA not before: Thu 02 Jan 2025 17:52:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212704
IP address blocks: 2001:678:4d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:e6:18:31:9c:91:c8:ec:a9:49:5e:a8:8a:e1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: Jan 2 17:52:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd157a633bb598a5817f3ee12fc5d201364df55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:9a:e7:aa:df:01:3d:ab:9c:c2:ab:73:4a:
20:45:74:82:72:37:d2:cb:01:82:1b:8d:8e:87:9b:
af:bb:6f:db:85:9b:24:e7:ab:40:a1:06:23:61:f4:
3d:1a:ed:36:d7:c7:aa:e0:24:6a:ac:fb:bc:b2:7d:
29:1c:50:85:55:f8:09:30:5a:1d:cf:8b:38:7b:ca:
df:80:8a:6f:84:db:b4:2a:08:c6:64:9e:1c:b1:47:
61:e8:cb:71:09:35:eb:c0:ec:65:82:97:07:af:01:
7d:91:ae:84:d9:fd:0d:ee:2a:32:f8:5a:69:e2:e5:
80:d4:3a:4b:d7:7f:83:4a:87:76:bb:ef:39:d8:48:
56:db:f9:cd:c2:9a:76:5f:63:ce:df:52:67:e3:a7:
ea:09:b3:d3:76:f6:d1:39:8b:4e:7a:c9:d9:df:50:
de:f5:0d:c0:86:5f:2e:61:cb:d0:e0:18:46:80:6d:
55:72:d9:7e:26:9d:60:67:78:06:02:50:55:1f:bd:
49:b1:04:d9:10:8d:21:c2:0e:22:45:e1:51:61:05:
68:fe:15:4f:81:17:f0:35:1b:a1:e2:a3:3c:42:fa:
07:4a:a1:7a:10:27:b6:99:47:00:4a:00:7b:dc:ff:
99:6e:a8:d9:94:4a:f4:01:d1:95:19:18:15:6b:5b:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:57:A6:33:BB:59:8A:58:17:F3:EE:12:FC:5D:20:13:64:DF:55
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/q9FXpjO7WYpYF_PuEvxdIBNk31U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:4d8::/48
Signature Algorithm: sha256WithRSAEncryption
b8:7b:1c:8d:97:b9:b3:d0:44:87:6b:d0:a0:2d:39:bf:f7:e2:
c6:aa:c1:cd:85:56:30:2c:d4:21:2e:67:cd:c7:96:a1:16:a5:
3d:19:4c:ac:b8:a0:e8:e5:40:46:bf:cf:91:19:71:02:e2:d1:
33:f6:f1:89:05:91:ad:9d:5f:74:15:67:b0:5e:21:8e:37:6b:
79:91:50:46:5a:df:eb:37:fa:66:a0:43:3a:92:1b:ed:ab:24:
ec:d9:ff:93:d3:35:3c:bc:b9:ed:1a:e5:37:4c:5c:90:2c:b8:
d6:9a:90:3e:09:4c:e2:80:a8:c2:40:67:6e:28:b0:6d:00:06:
cb:de:7b:5a:ac:2e:bc:b7:7e:1f:e0:ce:32:3c:e3:13:a2:65:
12:d1:2e:e5:83:44:eb:a9:5c:48:5c:8b:63:00:0d:91:18:33:
87:1f:b1:75:87:73:e4:a6:9d:57:20:7e:c5:62:b4:ff:5f:3c:
6c:1f:b0:18:a3:22:f4:f5:84:21:81:29:29:21:e4:e2:49:76:
36:21:39:bc:86:07:13:dd:4f:be:5b:b1:0a:2c:71:c0:82:7e:
4e:8a:fd:38:ad:f5:b6:8b:d0:ab:ce:2e:2c:96:88:84:9b:a5:
49:5d:74:19:b5:00:57:e4:d1:4f:23:15:b0:be:2a:68:66:32:
d4:9a:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:32 2025 by rpki-client