Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/gH-hksMyjADdSnLZQyC57cd6lrA.roa
File: gH-hksMyjADdSnLZQyC57cd6lrA.roa (raw, json)
Hash identifier: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=
Subject key identifier: 80:7F:A1:92:C3:32:8C:00:DD:4A:72:D9:43:20:B9:ED:C7:7A:96:B0
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 019542E78073120FAA25E86CFFEF2D2AF08E
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/gH-hksMyjADdSnLZQyC57cd6lrA.roa
Signing time: Wed 26 Feb 2025 15:37:02 +0000
ROA not before: Wed 26 Feb 2025 15:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a05:bd47:1234::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:e7:80:73:12:0f:aa:25:e8:6c:ff:ef:2d:2a:f0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Feb 26 15:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=807fa192c3328c00dd4a72d94320b9edc77a96b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:f2:1b:75:a4:95:4b:cb:75:d3:05:ae:af:
71:c7:a8:70:56:37:4f:08:8d:11:2c:d5:97:01:30:
f5:af:1f:0a:c0:ff:68:45:52:98:3b:99:29:f6:81:
d7:d7:fe:95:92:65:4d:69:67:f6:ff:09:4c:d5:75:
60:6f:3d:d0:bb:c3:e8:1e:f4:9b:e6:ad:b0:21:0c:
31:e2:84:f7:c3:90:cd:68:98:ed:02:d5:75:8f:67:
35:7d:dc:69:61:db:2e:9c:e5:16:9b:29:ca:aa:84:
3a:e9:06:b5:f4:ba:f6:18:d3:c4:a7:2f:68:6f:2c:
48:99:d3:b9:a0:75:a9:0e:c7:f8:65:b7:9c:ad:c7:
ae:07:69:ef:e1:2c:68:a0:6e:d2:b3:14:47:b4:2d:
7a:51:75:5b:ba:73:b9:87:5c:88:b4:0f:71:8e:65:
96:ba:13:75:0d:cf:f2:ae:00:df:61:bb:40:68:b8:
4b:ff:66:1a:a9:52:fa:a5:08:7d:cd:85:dd:28:26:
95:57:9f:2f:25:40:34:93:44:ab:24:a5:0a:d8:94:
0c:69:f4:f6:c3:4b:ab:e0:f4:c5:7d:a8:8d:11:36:
b4:d2:d5:4c:64:f5:8d:38:74:96:e6:b1:5c:26:ff:
bf:82:6c:27:64:de:24:1d:3e:9d:31:df:be:cd:c7:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:A1:92:C3:32:8C:00:DD:4A:72:D9:43:20:B9:ED:C7:7A:96:B0
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/gH-hksMyjADdSnLZQyC57cd6lrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bd47:1234::/48
Signature Algorithm: sha256WithRSAEncryption
9d:60:48:f9:9f:7e:14:e6:b1:dc:36:f3:d5:41:48:c2:03:c8:
84:b7:4b:4c:84:2b:da:b6:92:ff:7a:1d:cd:03:b4:95:3e:c2:
6c:be:81:b0:cd:13:e6:e4:40:48:d1:40:44:c3:1c:5b:36:27:
e3:a4:b4:50:07:6a:26:88:59:07:0c:42:f9:a9:91:3c:e8:db:
31:1e:20:ac:76:d6:7b:ca:5b:72:70:7b:2f:ff:85:ea:99:ad:
25:e4:ca:e5:12:b4:3b:22:56:af:75:48:db:a8:34:37:12:1c:
15:4e:90:af:26:37:86:dc:60:55:4c:88:a9:ea:ef:85:51:94:
b7:0d:bd:70:3d:c8:cc:f9:31:d3:8d:92:22:9f:48:f1:9c:5d:
ce:1f:31:d9:57:c1:22:13:f3:db:ac:56:6b:9e:65:20:e0:0f:
5e:7d:be:9e:d5:89:87:2d:f9:34:77:3f:30:3f:ae:46:5f:3e:
72:bf:62:e5:43:72:2e:31:3d:dd:a1:c1:f2:6c:ee:4a:fc:10:
55:2c:09:86:7b:a3:1b:bd:64:7a:64:78:32:10:1e:8c:a7:2d:
68:01:8c:66:03:fe:ef:9d:9e:d7:6c:8a:34:d0:ea:67:ff:44:
dd:d6:a2:cd:85:88:7c:e4:8d:32:0e:db:8f:47:45:52:e8:7a:
c8:e7:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:20 2025 by rpki-client