Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/eSAdGAcJU2Lp7GWxqjyJg860UFo.roa
File: eSAdGAcJU2Lp7GWxqjyJg860UFo.roa (raw, json)
Hash identifier: POacM2N+GD3qu/kucfSHd3RuPLLeqK4i1SrQYiocu8A=
Subject key identifier: 79:20:1D:18:07:09:53:62:E9:EC:65:B1:AA:3C:89:83:CE:B4:50:5A
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427462A9E7ACD30C8561C5E346639C04E
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/eSAdGAcJU2Lp7GWxqjyJg860UFo.roa
Signing time: Thu 02 Jan 2025 13:48:17 +0000
ROA not before: Thu 02 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44437
IP address blocks: 2a05:1080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:2a:9e:7a:cd:30:c8:56:1c:5e:34:66:39:c0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79201d1807095362e9ec65b1aa3c8983ceb4505a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:cc:8f:c5:2a:a6:4b:b6:b2:08:1b:84:b9:
fa:b4:8d:cb:ee:0a:5b:e2:2f:ed:cb:b1:88:72:8b:
46:65:75:e9:aa:f6:5d:d6:44:dd:cf:98:54:31:6f:
23:9a:8e:ac:8e:d1:75:4d:60:0c:9c:b8:57:80:fb:
4e:8b:e6:86:bc:75:05:70:58:d4:11:a8:6a:85:a0:
31:fd:e9:d2:02:ce:51:56:a2:d5:d1:cb:ed:8b:db:
d4:b3:d7:8e:29:37:4f:28:48:0b:a1:3c:07:a4:06:
07:46:5b:64:f3:ba:27:70:10:ce:59:b0:d6:8c:f1:
ae:14:ae:01:61:04:89:58:e6:73:05:53:72:2f:bf:
42:72:f7:0c:10:0a:00:71:a8:c1:1b:2a:9c:ae:55:
ec:a6:17:00:7c:75:63:a6:09:7d:36:f8:81:2d:43:
55:5a:31:10:07:36:c3:eb:04:f4:ec:1f:67:94:73:
7f:49:9c:e0:b1:66:1d:4d:c9:69:bd:68:6a:33:8a:
97:d3:49:5e:2c:a5:fe:99:5d:cc:c6:44:19:2c:0f:
aa:d0:6c:75:83:7f:e2:7c:96:0f:b6:3f:65:3d:4b:
a6:35:ce:82:1f:ca:d8:59:9b:95:8a:1a:8f:07:39:
4f:9e:7a:48:c4:98:94:41:1a:b4:35:46:48:82:d1:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:20:1D:18:07:09:53:62:E9:EC:65:B1:AA:3C:89:83:CE:B4:50:5A
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/eSAdGAcJU2Lp7GWxqjyJg860UFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1080::/32
Signature Algorithm: sha256WithRSAEncryption
92:58:0c:9f:62:25:96:13:06:e2:b6:8d:ab:cb:df:bf:cd:bb:
fe:20:40:14:e8:d1:e5:ce:52:0e:a8:60:ec:62:18:f9:15:d8:
14:b5:44:df:ab:7a:07:4c:be:a9:f3:ad:b7:d2:b7:09:91:7e:
49:b2:ad:78:80:60:1f:e8:38:cf:8c:bc:60:5f:db:e1:97:15:
a3:60:c3:0d:27:e2:f1:f5:57:79:d6:ea:c5:c1:41:22:8c:20:
ff:8a:65:6b:fd:90:00:11:e0:de:9e:a4:38:96:dc:5a:a4:c0:
0f:de:e4:f7:a6:95:19:67:95:69:50:d6:3c:9c:91:42:db:89:
17:40:ab:c8:7d:ab:8e:fe:06:ee:7b:1e:ff:8e:19:7c:3b:4d:
44:40:5b:24:7c:74:c0:b0:90:3e:73:ed:31:4e:8f:1c:8a:d0:
94:60:55:d2:41:05:f3:46:c9:89:aa:86:59:1b:82:1e:e7:5a:
7e:d1:cc:bd:f0:9b:52:19:33:1b:5b:08:57:25:91:a6:c7:5c:
e7:60:29:f0:06:c5:32:05:1d:06:34:6d:00:0e:46:5f:17:2e:
ad:0c:6e:a6:d3:d9:4e:99:4e:b3:c6:51:01:09:95:b2:38:ac:
c7:d4:ae:ec:25:58:00:ac:f7:fd:c6:16:56:fe:de:4d:9c:a5:
6b:0c:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:19:46 2025 by rpki-client