Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rkufoHj1sBQ6QkN_glbHfjlIUYU.roa
File: rkufoHj1sBQ6QkN_glbHfjlIUYU.roa (raw, json)
Hash identifier: XBAAhgYFrtiOkEQFPV67KuG+GLv9BoCZU5LpMqRsUGI=
Subject key identifier: AE:4B:9F:A0:78:F5:B0:14:3A:42:43:7F:82:56:C7:7E:39:48:51:85
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427462DAA448D37617F80140E1DB4B033
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rkufoHj1sBQ6QkN_glbHfjlIUYU.roa
Signing time: Thu 02 Jan 2025 13:48:18 +0000
ROA not before: Thu 02 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136918
IP address blocks: 2a05:1082:1::/48 maxlen: 48
2a05:1082:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:2d:aa:44:8d:37:61:7f:80:14:0e:1d:b4:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae4b9fa078f5b0143a42437f8256c77e39485185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:56:d7:40:a9:46:cb:cf:e1:92:8a:c6:ea:
2e:11:47:fc:16:02:e4:f8:13:b9:7d:4d:c2:a5:93:
f4:cc:f9:7c:18:18:c8:cf:31:32:22:cd:d2:8d:96:
d5:aa:25:35:91:75:94:42:7c:af:36:36:d2:3c:5c:
e0:86:5a:ac:c0:41:3b:ee:8e:9c:e8:cb:2a:d3:f3:
19:f5:d7:63:f3:32:2a:94:8d:ca:07:88:0d:af:00:
5b:ed:ff:36:8e:07:c0:0c:4f:b2:59:7f:28:0d:56:
07:60:e7:c1:72:e8:35:4f:e2:f0:b7:c3:38:1e:b5:
59:8e:da:70:83:25:03:25:54:29:8a:fb:2c:ab:b9:
8a:83:60:d9:c4:15:3b:c5:d4:4c:4b:41:ba:e4:61:
45:7d:d7:40:20:0a:b5:d6:37:3d:9b:3e:a9:01:e1:
ca:3f:13:69:c0:fc:d6:fe:0d:6d:47:db:80:29:59:
1b:6d:30:a3:84:1c:b6:0c:1a:70:75:6c:13:83:16:
fe:b0:fb:cc:44:c1:a4:7f:1c:77:0b:3b:0e:ea:38:
8f:e8:a4:f7:90:54:f6:e2:0d:7e:6b:75:dd:3f:6d:
06:f5:a2:76:7c:b5:22:a9:6e:89:b7:13:29:0c:c0:
b3:68:b3:38:dc:bf:17:5c:ba:fd:22:cc:3a:e4:7c:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4B:9F:A0:78:F5:B0:14:3A:42:43:7F:82:56:C7:7E:39:48:51:85
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rkufoHj1sBQ6QkN_glbHfjlIUYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1082:1::/48
2a05:1082:5::/48
Signature Algorithm: sha256WithRSAEncryption
12:ed:97:3e:fb:ea:21:fa:ad:60:a5:cc:c6:f8:cb:c0:9d:20:
40:af:5a:b2:21:b8:78:17:bd:b9:90:c7:50:1b:03:bc:16:84:
34:12:41:b0:4e:d0:97:61:7e:dc:76:81:5e:64:04:f0:60:5b:
a5:16:39:4c:b0:4d:15:18:e1:31:bd:1d:66:b6:71:c5:5e:5f:
d8:ab:60:17:99:f8:21:92:9f:1a:85:5c:2b:44:14:74:fb:cc:
ba:45:66:62:92:cc:42:c3:c2:be:31:d5:60:c0:84:d4:e3:ab:
25:e1:31:f8:12:b2:70:4e:b9:be:2c:a4:5b:c5:d9:0c:1f:ce:
6f:7e:5e:d4:0f:5f:bb:1e:6e:44:12:05:a2:7d:4b:df:0d:d8:
69:7b:79:97:09:38:fb:e6:22:92:05:a1:c7:15:f9:e5:da:48:
51:8d:5a:12:7e:e8:79:87:17:55:93:6f:1a:59:f7:20:f4:d7:
86:bd:a1:10:f3:da:2f:bc:bb:b7:e2:32:70:7b:4d:42:43:db:
85:9e:c7:ca:8a:c6:11:93:54:b7:b5:99:bf:c0:9c:91:b9:84:
90:f9:cc:8d:d3:3e:50:8a:bf:df:9e:53:24:5d:f4:37:ef:e7:
0c:ca:2e:f0:36:8c:71:cd:91:4d:1b:d7:40:8b:06:1f:70:68:
c3:4e:b7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:14 2025 by rpki-client