Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/w9h083wG9ItaPjH-_63uYE6KznA.roa
File: w9h083wG9ItaPjH-_63uYE6KznA.roa (raw, json)
Hash identifier: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=
Subject key identifier: C3:D8:74:F3:7C:06:F4:8B:5A:3E:31:FE:FF:AD:EE:60:4E:8A:CE:70
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 019542E780B19481E7FA72FD480925AA69AF
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/w9h083wG9ItaPjH-_63uYE6KznA.roa
Signing time: Wed 26 Feb 2025 15:37:02 +0000
ROA not before: Wed 26 Feb 2025 15:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a05:bd47:1234::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:e7:80:b1:94:81:e7:fa:72:fd:48:09:25:aa:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Feb 26 15:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3d874f37c06f48b5a3e31feffadee604e8ace70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:95:43:92:22:40:e9:b0:80:ad:d3:40:2f:
b1:5d:f3:98:7e:4a:77:9f:e2:2e:3c:a7:3d:1c:34:
e6:6a:43:59:34:29:ce:e4:07:41:cd:e1:0c:1a:d9:
78:54:34:a0:bf:3e:49:c8:36:06:fe:ef:e3:80:e8:
84:59:d1:fd:a1:3e:8e:05:13:e2:05:c9:fd:fe:6f:
99:4a:0b:7f:01:18:2b:6c:9d:b2:ad:0c:c5:e0:d0:
d3:8b:7b:f8:b9:77:a2:f8:7a:aa:e7:b8:de:0f:cd:
3b:a3:93:68:07:61:c2:c2:fa:74:93:ce:42:8e:a8:
26:99:96:38:b9:4d:f4:eb:f2:92:14:fc:ce:7e:e0:
58:be:e0:80:0c:6c:8f:de:41:67:15:a8:28:44:3f:
a0:3b:9b:ee:c5:80:31:b4:4d:30:3a:18:1f:63:ba:
c3:8e:b3:23:6e:a5:5e:0b:c6:61:bf:24:e0:8f:1d:
ee:96:cb:5a:4e:73:92:60:e5:e9:43:e4:09:41:8f:
a5:3e:59:10:1b:41:f3:c0:f9:f8:3b:39:1f:94:47:
48:12:18:7f:46:03:08:3b:4c:4a:35:0a:6e:6a:20:
53:9a:e1:8e:ac:89:e1:26:de:e0:8d:e1:1d:a7:1e:
83:85:a1:d1:3f:17:92:d6:41:9c:22:44:0a:63:f7:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:74:F3:7C:06:F4:8B:5A:3E:31:FE:FF:AD:EE:60:4E:8A:CE:70
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/w9h083wG9ItaPjH-_63uYE6KznA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bd47:1234::/48
Signature Algorithm: sha256WithRSAEncryption
40:50:63:da:ea:86:91:4e:40:8a:52:11:f2:83:d5:15:81:81:
ed:4a:62:4f:cf:4e:4e:63:8f:54:74:60:d5:aa:19:53:49:8e:
c7:10:9d:fe:41:6a:a1:f5:f3:d3:2d:d0:29:cb:39:f2:d6:c0:
35:33:ee:18:3f:bc:f6:e8:ee:2e:8d:92:f0:43:db:5d:82:8e:
b1:02:1d:b2:31:fa:d7:9e:dc:f4:ee:41:a0:50:ed:2e:6c:bd:
96:07:19:65:c8:d5:17:b5:71:15:79:51:68:d7:01:8d:e0:79:
08:9e:97:81:fc:7b:59:7e:00:71:94:81:6c:5a:2f:d4:2d:be:
d0:2f:e0:45:05:d0:f6:e5:21:6e:e9:07:e4:37:da:b2:31:35:
6d:2a:ba:84:d0:aa:22:6f:12:a1:f7:f4:da:b8:7c:b7:c3:0d:
f8:68:32:43:14:f3:ee:37:3e:9c:d2:21:54:fa:c8:14:58:80:
ca:11:30:42:2a:66:ad:5c:e7:fe:50:db:1e:c6:84:a8:da:29:
e4:94:18:cc:51:15:07:ff:b8:8a:1c:b4:c1:e0:04:2e:ea:19:
67:4a:c6:07:73:2e:e7:bc:b4:87:c3:75:0d:5f:2c:3a:0e:09:
38:63:9c:3e:dd:34:c2:8b:a2:1e:3f:f0:cf:e0:86:0e:ac:95:
79:af:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:11 2025 by rpki-client