Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/keRc_cuZtJ4i5Jvsc90Pj2Jghdg.roa
File: keRc_cuZtJ4i5Jvsc90Pj2Jghdg.roa (raw, json)
Hash identifier: gciROLJg7+/w52qQUKA87ZvQS+qeyeOp3E1ngvwPEK4=
Subject key identifier: 91:E4:5C:FD:CB:99:B4:9E:22:E4:9B:EC:73:DD:0F:8F:62:60:85:D8
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 0194258EDB4BA551A737EE9BAC8B09EC838F
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/keRc_cuZtJ4i5Jvsc90Pj2Jghdg.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208850
IP address blocks: 2a12:7a40:990a::/48 maxlen: 48
2a12:7a40:991a::/48 maxlen: 48
2a12:7a40:992a::/48 maxlen: 48
2a12:7a40:993a::/48 maxlen: 48
2a12:7a40:994a::/48 maxlen: 48
2a12:7a40:995a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:db:4b:a5:51:a7:37:ee:9b:ac:8b:09:ec:83:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e45cfdcb99b49e22e49bec73dd0f8f626085d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:2e:ed:ac:58:73:ce:c8:72:63:ab:13:d1:
5c:6b:b3:5e:43:d4:f0:4c:f5:82:5f:24:bd:22:cf:
58:50:74:a3:ef:ad:96:d4:d2:91:1e:94:41:40:09:
de:34:0b:ef:fe:41:50:e3:27:28:ab:9c:bb:90:01:
b0:1a:c6:d0:78:c2:23:f2:b7:06:40:c1:58:71:87:
b8:d2:8a:78:19:79:6a:a1:3a:64:fd:6c:2c:e7:ed:
86:05:2d:12:95:95:29:2a:04:bf:7d:1f:54:e7:ee:
b2:b0:0b:eb:19:34:b5:46:a4:3b:ec:42:ff:46:70:
10:43:bc:0e:18:78:2c:2b:2d:89:f8:d6:43:5e:ff:
42:b1:3b:a6:b8:4d:ed:3f:b5:c0:c1:bb:6e:59:3a:
24:93:5b:c9:b8:84:bc:6d:9a:87:de:34:15:38:6c:
ef:02:01:bf:01:ef:04:c1:c4:ba:1a:bc:53:ed:29:
a1:53:2d:89:eb:f1:e8:fe:11:0a:a4:e0:25:2c:94:
0b:c1:39:f9:41:61:2f:fd:d4:16:8c:05:c4:77:1d:
c1:90:c4:1e:6f:d2:2d:47:5e:68:cf:2f:ec:5a:3b:
d1:11:76:15:c8:88:53:59:89:8d:5b:c3:ce:a2:fb:
0b:a9:d8:18:8c:9d:66:a9:52:d4:4a:45:6f:1d:d2:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E4:5C:FD:CB:99:B4:9E:22:E4:9B:EC:73:DD:0F:8F:62:60:85:D8
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/keRc_cuZtJ4i5Jvsc90Pj2Jghdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:990a::/48
2a12:7a40:991a::/48
2a12:7a40:992a::/48
2a12:7a40:993a::/48
2a12:7a40:994a::/48
2a12:7a40:995a::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ff:0d:2c:be:c0:1d:6e:17:c5:ff:ae:fb:0a:7a:c7:60:9a:
7d:a2:4b:28:11:8f:a4:a1:ec:76:4d:27:fb:f4:49:25:35:99:
75:ff:87:de:40:05:c5:03:7a:29:42:ee:ff:96:94:2e:e7:13:
5a:c6:81:b2:a2:cf:10:03:8b:ac:db:97:9d:e4:e7:01:23:37:
20:72:a4:7f:26:00:02:c4:7e:ed:83:63:cd:7d:61:a3:e5:5a:
07:0e:1f:be:1f:be:b4:9f:3e:26:83:49:79:ea:4a:73:30:4a:
ea:74:c8:b1:f2:74:5a:37:60:43:d2:54:8c:5f:5b:71:be:fa:
99:70:30:3b:a6:1f:45:5b:10:85:68:76:d2:51:5f:02:21:ee:
74:af:6d:3f:1a:f3:09:2a:c4:5e:24:0d:12:55:6b:d3:87:f4:
03:78:a3:ef:91:f8:6c:ac:d8:5e:67:3a:2e:22:8a:0f:5e:6f:
4d:a5:9d:e2:92:60:f1:1c:3e:99:d1:4f:e3:42:97:cd:6a:ca:
68:22:8d:10:be:7c:a9:1c:f1:f2:dd:97:5d:b4:4e:ec:74:4b:
93:ca:2d:a3:90:d1:b2:0f:84:ef:18:55:7b:34:3a:27:dd:79:
ae:37:77:06:95:96:78:23:e0:4a:bd:20:9c:4b:12:04:89:ae:
9a:31:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:22:53 2025 by rpki-client