Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/odhCBvokoh0WXwcofdlY-9c6Mjc.roa
File: odhCBvokoh0WXwcofdlY-9c6Mjc.roa (raw, json)
Hash identifier: 6FUauXvZ5DA+U95gldy5cTQLRLVBO8DuwG+KLSPveUQ=
Subject key identifier: A1:D8:42:06:FA:24:A2:1D:16:5F:07:28:7D:D9:58:FB:D7:3A:32:37
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01956832E1C9FBF756E47F3D69D55CABDF4C
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/odhCBvokoh0WXwcofdlY-9c6Mjc.roa
Signing time: Wed 05 Mar 2025 21:25:19 +0000
ROA not before: Wed 05 Mar 2025 21:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201341
IP address blocks: 2a13:8000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:68:32:e1:c9:fb:f7:56:e4:7f:3d:69:d5:5c:ab:df:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Mar 5 21:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1d84206fa24a21d165f07287dd958fbd73a3237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:ff:12:9b:63:36:fb:06:75:74:8a:81:0d:
80:8f:af:05:d7:68:76:d9:de:d0:c1:c8:66:31:bb:
b5:f2:03:24:f8:c2:92:ce:cb:8d:be:47:fa:67:5d:
e9:7d:2d:53:63:07:28:74:18:f0:75:78:bc:00:65:
4f:19:bc:06:c4:5b:11:5d:8e:2a:81:59:76:94:a7:
32:79:62:d2:66:9b:ac:25:39:14:89:57:19:a5:e3:
18:95:b6:7a:d0:cf:28:4b:c6:5d:54:6a:46:7f:5b:
c7:57:e9:cf:e5:ce:88:de:29:e1:1d:3e:1c:93:9f:
c6:3c:a3:f4:e2:12:fc:b6:d1:b1:07:dc:7f:8d:c3:
03:23:c7:cf:ff:2d:65:d5:ca:18:94:d4:65:43:89:
04:c7:5c:0a:f5:c6:ef:67:7c:2f:82:25:4b:0e:40:
f9:0d:83:4d:04:42:0e:8f:67:5c:3e:06:92:02:b4:
85:07:96:94:05:01:cb:d8:46:eb:c5:27:ae:2d:62:
f1:fb:6a:42:e2:36:19:2a:da:23:1d:0a:99:bd:d1:
f4:8d:78:58:4c:0b:11:f9:fa:4a:4a:e3:58:ea:25:
ae:bb:92:9b:06:e6:f9:38:f4:a4:e6:90:c8:41:87:
fd:23:71:da:52:99:7e:2a:3e:be:a1:cb:e6:2e:67:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D8:42:06:FA:24:A2:1D:16:5F:07:28:7D:D9:58:FB:D7:3A:32:37
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/odhCBvokoh0WXwcofdlY-9c6Mjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8000::/29
Signature Algorithm: sha256WithRSAEncryption
3a:b0:f5:99:8e:6a:fc:6b:29:b6:d0:d3:44:bd:12:3b:5e:83:
6a:62:fc:c0:e1:ee:5f:d4:d5:44:c7:5a:d2:99:83:59:db:55:
42:eb:16:be:5e:2e:52:d4:f1:bd:f0:99:90:43:1a:ad:8e:f8:
fb:49:ef:8a:fd:b6:90:7a:83:39:70:8e:15:8d:4f:16:d0:08:
91:11:8d:be:36:76:36:fc:6e:66:34:e6:49:d1:23:0f:fe:49:
5c:02:66:ea:73:d2:67:f8:5c:e4:ec:3b:45:ef:42:8e:a1:f9:
08:ae:8d:06:96:b8:ae:9e:5b:67:e5:5f:22:12:5b:16:d0:96:
17:7a:be:c2:9b:af:35:9c:e3:70:ba:f0:82:4c:81:47:b7:9d:
6f:52:b7:f7:cb:e9:dd:a1:e8:b0:75:a5:8b:60:13:85:2a:d3:
e0:4b:07:d8:f8:49:22:34:1c:ec:3a:f0:74:bc:b2:17:35:ef:
77:cf:e3:67:9d:1d:d7:7a:98:71:89:f8:0b:cf:61:60:cc:fc:
1c:d0:bc:7c:aa:2e:ef:34:42:f1:06:98:63:02:27:c8:82:41:
be:1b:c9:64:1b:dd:87:da:25:c9:64:44:78:43:e5:45:3a:6b:
1e:71:00:1d:69:22:f9:28:d1:cb:5b:ef:67:4c:18:99:df:bb:
9e:ad:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:14:55 2025 by rpki-client