Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ubTG6wM5WMjPJjVlRxDKUEK_Sr4.roa
File: ubTG6wM5WMjPJjVlRxDKUEK_Sr4.roa (raw, json)
Hash identifier: hK1TX6u9txAOjU3mw0jZQz1mYIY2Z4Fk7zlDvmJpl3A=
Subject key identifier: B9:B4:C6:EB:03:39:58:C8:CF:26:35:65:47:10:CA:50:42:BF:4A:BE
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D8F2A112120D50811BD8C61C7461
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ubTG6wM5WMjPJjVlRxDKUEK_Sr4.roa
Signing time: Thu 02 Jan 2025 17:50:25 +0000
ROA not before: Thu 02 Jan 2025 17:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212775
IP address blocks: 2a00:7180:8010::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d8:f2:a1:12:12:0d:50:81:1b:d8:c6:1c:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b4c6eb033958c8cf2635654710ca5042bf4abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:33:a3:13:15:92:72:70:54:58:87:4e:2d:
87:93:2b:cb:30:ea:04:6d:8f:5d:3a:91:c5:0c:af:
a3:91:ef:81:ca:f4:a1:98:a4:5e:63:d4:95:57:88:
40:c5:a3:cc:e2:33:82:37:f4:f4:5b:aa:e1:6e:a9:
cb:2b:49:31:da:e5:cb:6a:75:a8:c5:5c:37:7f:22:
e4:27:20:58:aa:93:ab:92:7e:7f:11:1e:44:13:1f:
4b:52:ed:c2:8c:86:b1:6d:2a:07:67:f8:fe:c2:26:
33:1f:b5:e4:7c:ee:83:11:7f:ce:89:b3:e0:8b:85:
27:97:6f:2e:bd:1c:a4:1a:67:53:fb:05:bf:dc:97:
20:f9:db:77:e8:7c:0d:4b:60:f4:aa:1d:59:1f:6b:
48:a1:5a:22:d4:13:d7:66:bd:6d:c9:f5:1f:91:f5:
8b:11:f6:d5:ee:08:60:80:85:52:46:83:07:15:90:
45:62:a9:11:cc:6d:51:b4:14:d5:de:d7:a5:77:fe:
2e:a7:c1:3a:79:92:5a:21:4f:58:5a:79:76:79:7e:
43:eb:5d:0a:64:45:43:43:ac:c1:bf:29:23:9e:bc:
6a:8f:0e:d0:98:de:11:f2:0c:b1:5b:f0:0a:35:19:
a1:f0:05:56:28:fa:8f:32:e5:3f:ff:b6:02:ba:ab:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:C6:EB:03:39:58:C8:CF:26:35:65:47:10:CA:50:42:BF:4A:BE
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ubTG6wM5WMjPJjVlRxDKUEK_Sr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8010::/46
Signature Algorithm: sha256WithRSAEncryption
4d:10:03:b1:e6:df:fa:7a:b2:d6:93:8f:3c:74:a1:e7:b0:5f:
43:c1:ff:f5:a1:77:56:69:5c:d1:ea:3f:ec:23:fe:ae:52:fa:
e4:b9:6d:70:6f:5e:d1:94:2f:d5:bd:d6:99:8f:a4:8b:cf:eb:
1e:ca:d1:bf:e4:a7:5f:dd:08:d7:f3:c5:4d:48:ea:6e:cd:60:
d2:c8:aa:92:1e:80:ab:e2:8c:22:06:d3:2e:4a:d2:cc:10:62:
5e:94:fa:9c:63:da:c3:b2:96:6d:dd:c7:46:6b:22:8f:7d:6c:
54:6b:de:e1:f1:1f:e3:44:d2:ce:7c:46:1e:2a:69:b7:19:e5:
9a:25:6d:d3:cb:2b:40:3e:8c:d1:8c:66:ff:e0:16:eb:02:2f:
d6:38:eb:70:c9:bb:ce:9f:ca:79:ad:d5:ed:99:5a:6e:77:89:
b8:15:8f:ea:60:e4:31:e3:9b:0d:3d:4e:8d:51:84:4d:45:d4:
96:99:a5:24:0d:f7:75:e8:b6:73:2f:6c:ea:6d:39:8f:34:d7:
f7:73:16:a6:2e:82:c4:61:79:95:6c:53:69:f7:46:c7:1d:92:
f2:be:d1:61:c9:1b:32:9c:41:e6:f1:44:1b:d7:45:c4:47:41:
bc:66:df:18:42:59:ca:94:df:d5:0d:da:98:3e:8e:91:c7:d3:
7f:52:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:49 2025 by rpki-client