Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bIif3WM2r9Fp6Q7fCUGuAk-YB2o.roa
File: bIif3WM2r9Fp6Q7fCUGuAk-YB2o.roa (raw, json)
Hash identifier: zGw6D9i4iJZZxwf+Rme+fCmifU42Ux4sdDoPKxw/WSg=
Subject key identifier: 6C:88:9F:DD:63:36:AF:D1:69:E9:0E:DF:09:41:AE:02:4F:98:07:6A
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427462EF472889AAA13392EC45EF6DCFF
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bIif3WM2r9Fp6Q7fCUGuAk-YB2o.roa
Signing time: Thu 02 Jan 2025 13:48:18 +0000
ROA not before: Thu 02 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 148971
IP address blocks: 2a0d:2583::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:2e:f4:72:88:9a:aa:13:39:2e:c4:5e:f6:dc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c889fdd6336afd169e90edf0941ae024f98076a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:89:5b:46:e3:35:80:97:31:4e:7f:58:f9:
e7:b5:fd:ba:18:2b:23:37:2f:b5:97:dc:d2:39:eb:
02:38:4b:d5:9b:17:59:ce:40:3b:2e:ba:22:5c:b0:
14:88:df:2a:80:5d:0c:f4:c7:9a:a9:2a:bf:57:5e:
c3:9f:4e:4e:96:6d:ec:4f:40:38:06:77:19:ae:e9:
f1:c0:8c:f1:e1:93:7b:26:06:ee:f6:6b:db:2c:03:
f2:d1:46:2d:4a:71:66:a0:77:54:98:e5:07:c8:16:
1f:0b:0c:b4:09:c2:04:34:c5:c8:d9:81:94:04:4b:
a0:6e:94:5f:0f:6f:31:df:31:d2:03:ed:3b:11:bb:
f3:f5:c3:69:aa:1a:9b:da:ce:35:29:68:6d:de:e0:
21:63:0b:d7:05:22:90:e4:bb:6d:c7:35:5f:a8:51:
a4:a8:9a:f0:7f:8c:45:9c:da:6a:61:a9:16:c5:ef:
61:c8:d2:83:c5:48:c4:d0:0c:dd:3a:19:a2:19:20:
78:4f:ca:3e:29:04:18:80:32:06:ae:8d:11:e3:fb:
3d:93:67:48:fd:c1:77:59:69:9a:76:70:9f:4a:08:
4f:88:2d:da:f0:d7:f6:56:97:da:3e:fa:7b:b7:80:
c3:dc:f7:d9:7a:a4:05:75:59:21:44:ab:cb:10:00:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:88:9F:DD:63:36:AF:D1:69:E9:0E:DF:09:41:AE:02:4F:98:07:6A
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bIif3WM2r9Fp6Q7fCUGuAk-YB2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2583::/32
Signature Algorithm: sha256WithRSAEncryption
56:d8:42:d0:b2:26:bc:ad:f2:cc:21:1f:df:3f:e6:6b:99:95:
0d:9f:ab:77:c4:4d:3e:d1:6c:25:3d:90:d5:d2:ac:e1:c5:5d:
ce:13:9e:11:59:4c:ef:c2:9f:7b:f3:af:a0:fa:74:d4:70:6f:
a9:f7:02:ce:25:fd:6b:eb:76:57:68:ab:aa:55:6a:37:ee:87:
9e:ea:ee:ba:82:c0:06:32:8d:cc:b9:c5:25:37:6f:34:3d:58:
0b:e5:09:9c:79:75:2a:a8:b3:4c:e7:aa:f7:cf:e4:1d:1a:b1:
53:83:95:0e:82:eb:0a:56:30:10:40:df:ee:b3:40:2c:81:e9:
b6:5d:4b:fa:a7:f0:2d:a1:a7:01:35:e8:23:80:b5:5a:d4:1b:
31:23:3a:be:f4:8c:fc:5a:e0:94:d1:b9:54:be:3a:d1:53:c5:
27:b9:e3:55:ad:bc:f8:8f:5b:7d:dc:5c:2e:b3:93:63:80:7b:
24:33:60:a3:45:0e:04:ee:8a:db:59:21:8f:62:7d:e9:ae:05:
dd:f0:47:83:f3:a3:7a:e6:b1:24:17:2d:a4:bd:79:d3:02:a6:
9c:fe:f0:da:29:d2:81:d0:61:02:ab:6e:70:b6:18:21:a2:7e:
72:a7:c5:22:b3:5a:c8:5c:50:e3:fe:21:2e:39:37:93:38:33:
ef:d3:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:08 2025 by rpki-client