Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EgJWkP_ATvd-WaK0hqp6IaIW95g.roa
File: EgJWkP_ATvd-WaK0hqp6IaIW95g.roa (raw, json)
Hash identifier: Qp/vVw2n2OIqo8aQ+vDa79aTq8YN8BxSb8x/nDkT+pg=
Subject key identifier: 12:02:56:90:FF:C0:4E:F7:7E:59:A2:B4:86:AA:7A:21:A2:16:F7:98
Certificate issuer: /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial: 01942828346B73C6F334B31D5C9FB0628806
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EgJWkP_ATvd-WaK0hqp6IaIW95g.roa
Signing time: Thu 02 Jan 2025 17:55:11 +0000
ROA not before: Thu 02 Jan 2025 17:55:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34601
IP address blocks: 2001:678:b94::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:34:6b:73:c6:f3:34:b3:1d:5c:9f:b0:62:88:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Validity
Not Before: Jan 2 17:55:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12025690ffc04ef77e59a2b486aa7a21a216f798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:06:b4:e5:7c:7e:24:64:cd:9a:ef:c4:9c:20:
33:7e:fd:5f:ac:84:49:99:fb:4d:e8:53:bb:8b:a6:
10:54:41:71:89:72:c5:b1:40:be:eb:5a:fd:1a:c9:
0e:95:04:9b:33:32:85:09:78:6e:b2:10:a8:a8:4e:
06:5a:93:7a:ae:40:74:53:79:aa:c3:c1:f5:fe:e4:
bc:2a:93:f8:58:50:dc:11:f0:00:9f:21:80:f4:dd:
45:2a:94:26:85:5d:0b:b5:05:aa:15:22:df:97:e9:
1a:c2:07:9e:33:ac:64:99:00:f6:62:ff:d0:9c:92:
e6:94:6d:0b:52:a6:db:d7:a8:33:3c:9e:07:5b:6f:
e3:57:d0:05:b2:b9:0e:cc:3d:41:95:4a:b2:7c:0f:
f3:32:46:6c:ec:9f:b5:39:c7:aa:0a:1d:bd:04:62:
46:26:29:23:ac:f3:01:3c:20:23:0e:46:82:ba:5d:
57:81:fb:d0:cb:42:39:3f:95:15:46:3c:9c:88:89:
f5:9e:f6:84:e4:06:57:ef:05:dc:c3:92:13:33:bc:
75:58:43:2b:a4:cc:33:66:59:ef:23:6a:a6:3c:db:
51:83:49:00:41:93:0b:e5:a1:17:ef:fb:5b:ac:8b:
80:7c:d4:c5:16:e5:88:77:7f:86:fd:d6:e6:ea:1b:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:56:90:FF:C0:4E:F7:7E:59:A2:B4:86:AA:7A:21:A2:16:F7:98
X509v3 Authority Key Identifier:
keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EgJWkP_ATvd-WaK0hqp6IaIW95g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b94::/48
Signature Algorithm: sha256WithRSAEncryption
7e:b0:b3:6e:80:8a:e7:31:06:79:5b:fb:39:01:b8:94:f1:8f:
81:ec:18:7e:57:3d:26:b0:f4:8b:77:15:a4:a2:9c:8d:91:ef:
fa:1f:c8:d6:25:ec:a7:2c:5d:d4:9a:8f:b3:fa:88:be:08:7d:
aa:ad:5d:de:57:27:07:c8:fe:f1:b9:6f:8d:1b:38:ef:1e:1b:
a2:db:3b:03:38:c0:ae:0a:12:32:c9:1a:88:4b:c9:82:02:83:
a0:89:8e:11:45:3a:d7:ae:39:36:59:7a:8d:13:2b:eb:54:a7:
6e:55:7f:51:85:2d:6b:a1:32:de:1a:c7:11:54:1c:36:6b:20:
73:f5:df:4d:e6:70:49:6d:0c:d9:73:0f:ac:8e:83:54:63:24:
c6:df:6c:c4:36:a2:0c:83:59:d8:57:0a:18:4b:70:dd:78:89:
58:c7:23:68:ef:45:9f:df:cb:85:ce:f0:65:ec:39:b7:d6:ea:
65:97:41:c1:a6:88:2f:22:f5:c8:a7:83:a3:37:3c:7a:06:21:
aa:5f:1d:e9:53:58:c0:2d:59:6c:c0:0f:d0:88:22:72:81:d4:
0f:5a:49:09:2a:ab:13:5a:7c:95:35:03:47:3e:9a:6b:ad:01:
68:0b:c8:7b:f4:f6:a2:80:82:8c:e3:2e:f2:c9:b9:0f:11:fc:
73:cb:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:23:18 2025 by rpki-client