Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa
File: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (raw, json)
Hash identifier: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=
Subject key identifier: F4:79:BC:10:05:6E:7F:8B:6A:39:C1:DA:1F:4C:BB:CB:ED:58:9B:D9
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 019427475E141986D22517FD02F27FE21D71
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa
Signing time: Thu 02 Jan 2025 13:49:36 +0000
ROA not before: Thu 02 Jan 2025 13:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206446
IP address blocks: 2a10:1fc0:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:5e:14:19:86:d2:25:17:fd:02:f2:7f:e2:1d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jan 2 13:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f479bc10056e7f8b6a39c1da1f4cbbcbed589bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:97:d9:68:f9:33:df:ba:80:77:85:68:03:
a4:b6:f9:8c:a4:df:e1:8d:66:f4:ed:4f:08:00:c5:
b5:19:c5:95:43:0c:31:50:8a:63:c1:2a:61:85:a1:
4b:b3:c0:60:20:48:ec:3e:35:f8:29:b0:dd:cf:10:
37:ef:02:b4:8e:45:06:13:1f:24:8f:3f:0b:34:93:
33:68:1b:81:be:33:fd:c5:db:cd:05:0b:fc:cf:55:
68:3f:cf:1b:e1:27:85:a5:aa:d2:7b:51:5d:2d:a6:
a2:7e:63:55:e5:fb:f2:bf:eb:37:b2:b1:3a:fd:ac:
1c:cc:78:13:c1:94:5a:e4:19:6e:f6:bf:c0:81:48:
08:70:ce:4d:d2:96:9a:a3:97:c3:df:fa:fb:f8:a6:
d0:03:c6:3c:2e:0d:87:ac:64:2e:a9:cf:03:43:1c:
90:bb:96:a8:f6:7e:ee:fc:71:cb:49:81:28:77:55:
a4:1b:0b:20:49:6d:87:af:fd:91:d7:78:40:eb:f3:
aa:ff:7d:8a:36:87:2f:1c:aa:01:4c:60:07:fd:1b:
df:da:31:e9:e2:8f:86:ed:c6:42:e1:79:79:56:bb:
85:7b:05:1c:9c:86:29:14:52:59:7a:51:99:5d:52:
88:82:05:e3:78:3c:3e:0b:25:92:22:e4:20:58:22:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:79:BC:10:05:6E:7F:8B:6A:39:C1:DA:1F:4C:BB:CB:ED:58:9B:D9
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:1fc0:d::/48
Signature Algorithm: sha256WithRSAEncryption
81:a2:86:a4:48:2a:4c:ae:e2:da:7e:3e:dc:ef:d9:68:c5:7c:
f0:86:99:0d:71:80:a4:19:f9:f7:22:e8:9e:f7:83:51:77:1d:
80:8c:bb:06:25:a7:82:b9:83:93:2d:12:2b:7f:90:81:2d:79:
6e:47:cf:3f:a4:69:a0:16:ae:61:8d:f2:30:52:7e:ff:9f:66:
75:71:e6:ab:91:c9:a2:4b:47:c2:3a:f5:67:36:8a:f9:cf:76:
e4:6a:3b:78:10:24:28:52:41:d1:99:e8:9d:09:2e:9b:7b:36:
43:57:68:bf:e8:63:64:1d:55:1b:94:28:c8:7a:30:f5:61:8a:
85:9e:c8:45:ce:4c:a7:17:53:31:d9:2e:80:4e:cd:96:e5:38:
20:b0:36:10:d0:fb:5a:61:61:b6:86:fa:2f:ff:6a:36:9e:e4:
3b:cb:17:dd:2f:ee:9d:9a:af:b4:49:41:e4:32:32:e4:16:bd:
e7:8b:8b:48:1c:f0:14:98:34:95:a6:7c:94:45:32:0f:5f:49:
b3:ca:e1:0f:b7:28:bb:33:31:47:03:e3:09:7a:c7:a0:87:96:
ae:ca:73:9a:ba:25:da:85:e3:86:35:d8:bd:59:0c:11:1b:18:
a3:b9:1d:00:93:91:59:59:4e:9a:ac:90:38:0c:1e:8a:ad:c2:
a4:66:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:09 2025 by rpki-client