Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/4YeEf5C0RhSEriFXR13byavmptY.roa
File: 4YeEf5C0RhSEriFXR13byavmptY.roa (raw, json)
Hash identifier: wr16yDDuqq3ojDehKmzRLlvSrxZMwbQuDrJ0Q4uo980=
Subject key identifier: E1:87:84:7F:90:B4:46:14:84:AE:21:57:47:5D:DB:C9:AB:E6:A6:D6
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D986C0CAADEFED597349C92A316E4B
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/4YeEf5C0RhSEriFXR13byavmptY.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205414
IP address blocks: 2a03:5840:260::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:86:c0:ca:ad:ef:ed:59:73:49:c9:2a:31:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e187847f90b4461484ae2157475ddbc9abe6a6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:ee:85:79:5d:eb:1d:8d:27:f3:15:a0:98:
ac:93:48:66:f3:1b:7d:cc:65:b7:7d:de:e0:80:92:
78:7e:e7:90:5c:16:72:12:16:4d:9a:20:e3:94:23:
5c:f3:37:5c:26:37:95:ba:b2:17:0d:49:30:e7:4f:
5a:ea:2d:24:5b:2f:d7:f5:8c:b4:63:4c:fa:fc:18:
9f:99:69:fe:fd:67:f1:ee:9a:31:dc:69:06:9b:aa:
27:ae:a7:3e:d0:30:6d:ec:de:02:89:fe:3e:22:44:
26:8b:20:f8:16:53:08:25:67:8f:c6:90:37:2f:b2:
57:87:52:40:e4:fa:5a:31:a3:98:d7:70:ba:4c:11:
d0:d9:1f:2b:d1:e8:86:9a:c1:b0:92:d3:f5:9d:b2:
01:3c:cc:40:47:ea:73:ed:16:97:ed:56:0f:46:32:
91:83:3c:f2:5f:6c:a7:48:03:82:21:16:96:e3:2a:
08:b9:4a:88:90:02:72:a5:a2:ae:01:06:52:0a:d5:
b2:b3:84:11:3c:1e:4c:79:de:48:62:b3:79:e3:af:
f4:fc:03:82:ff:70:e0:05:d4:be:d4:d2:30:ac:5c:
4b:8c:42:fb:7e:5c:82:5c:c9:4f:67:77:f2:cc:bf:
ce:fe:d5:96:b9:75:0f:0a:6b:c7:36:c0:d9:86:1e:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:87:84:7F:90:B4:46:14:84:AE:21:57:47:5D:DB:C9:AB:E6:A6:D6
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/4YeEf5C0RhSEriFXR13byavmptY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:260::/44
Signature Algorithm: sha256WithRSAEncryption
15:de:36:c7:d7:5a:d4:8f:c9:e4:8e:1e:0f:28:9b:61:45:fd:
9c:47:f0:2a:d4:4a:7e:7b:af:ee:28:3a:7a:df:75:26:0c:32:
34:65:4b:f9:19:ea:0d:e2:ce:a0:ed:3a:e2:6b:a2:1b:31:b9:
e1:8b:42:9c:5c:0a:08:47:46:2b:b6:05:bf:b9:eb:a6:88:31:
7c:3b:25:74:f7:71:e5:d2:ab:4f:35:92:11:9c:61:23:c5:92:
20:e1:8a:45:1d:8b:53:30:ec:a3:0d:be:2c:66:d7:f9:1c:47:
57:36:4c:9d:d3:32:ea:c6:ca:8e:5f:89:dc:73:bd:12:b5:04:
43:bc:ae:92:ee:5f:0e:e6:ef:f7:1e:73:5b:bc:95:19:3e:ba:
48:45:b9:a8:58:10:cb:2c:d6:16:54:3c:6e:78:39:f2:4c:72:
4d:19:44:37:c3:6d:77:09:d3:c2:25:ef:cc:bf:b8:ff:a7:21:
f1:e8:ec:4d:99:33:81:20:19:70:d9:ce:a3:51:f9:b1:c2:1e:
47:51:58:f7:52:51:2c:84:f9:33:f8:0d:2d:2b:b7:28:3b:51:
12:f6:36:e4:af:77:ad:a8:9d:26:77:d0:ce:21:c4:e0:78:9a:
9e:14:11:c3:48:e3:22:dc:ac:2f:0c:4f:17:81:de:3e:01:37:
20:21:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:21:35 2025 by rpki-client