Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/G9hVT8TUDxyaLmI7RIaLx58Xvd4.roa
File: G9hVT8TUDxyaLmI7RIaLx58Xvd4.roa (raw, json)
Hash identifier: 0u8iZi2PMHrIArjXDopQR1VOJlV6sA6pPqxl9kZ8Hhs=
Subject key identifier: 1B:D8:55:4F:C4:D4:0F:1C:9A:2E:62:3B:44:86:8B:C7:9F:17:BD:DE
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424449A15724A86F754439F1961644920
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/G9hVT8TUDxyaLmI7RIaLx58Xvd4.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205610
IP address blocks: 2a0d:c7c7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9a:15:72:4a:86:f7:54:43:9f:19:61:64:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bd8554fc4d40f1c9a2e623b44868bc79f17bdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:30:da:95:d5:6b:47:a3:d8:17:cb:7f:6c:
fb:c0:0f:bb:ae:b0:12:6b:b5:12:ea:41:3b:ff:6b:
3d:cd:47:d1:e5:38:50:91:b5:e6:77:9f:b5:f9:3f:
6b:88:42:91:86:d8:59:50:67:a8:7c:69:bc:a5:f8:
1f:74:93:e1:f6:83:d8:4c:5d:8f:78:1b:ce:32:94:
2a:16:df:6b:89:59:2c:28:f6:78:9a:06:25:de:4e:
5e:98:10:b9:ce:98:d8:c0:b4:60:9b:e9:4e:61:3c:
61:a1:8d:74:dd:af:a0:69:37:b1:fc:44:ce:5e:a3:
fe:58:21:01:f9:be:48:82:c7:43:7c:21:05:0a:d2:
a4:a3:2f:73:c1:96:3b:82:46:f3:30:36:a3:5a:f1:
b8:06:b0:02:81:e9:c5:bf:58:85:52:f4:fd:0b:73:
a2:71:4b:e1:5d:b9:52:bf:2e:25:3d:34:f3:be:4c:
ed:99:b7:e3:ba:4b:12:b2:fd:87:ff:f8:f7:0f:30:
21:b5:de:2c:82:a8:a7:07:2e:c2:bb:11:ae:37:01:
06:2d:f0:2c:8b:a3:76:57:7e:44:18:3c:6d:2f:5e:
c5:b0:dd:f9:cb:98:42:4d:82:75:49:17:77:3d:bf:
ef:ea:5c:79:9e:c9:8b:90:28:8c:60:39:47:ac:8f:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:55:4F:C4:D4:0F:1C:9A:2E:62:3B:44:86:8B:C7:9F:17:BD:DE
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/G9hVT8TUDxyaLmI7RIaLx58Xvd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c7c7::/32
Signature Algorithm: sha256WithRSAEncryption
3d:f1:91:9d:7d:8b:6c:72:02:d6:8d:37:a8:f1:b2:09:ae:71:
cc:f5:c5:ab:3f:33:e1:c9:3a:2b:5d:b7:80:0a:13:1c:59:ae:
27:ca:39:f7:a9:b2:ae:74:36:8b:05:a8:30:f0:a0:e3:51:49:
1a:88:20:29:79:a4:38:dc:84:58:d8:3b:45:be:db:3a:25:ab:
83:f6:17:31:91:01:f1:2e:f6:3b:14:97:ce:50:01:b6:ae:86:
f3:8f:03:4f:ca:6d:ca:50:c7:8e:f8:b0:bb:a7:8e:47:d8:34:
80:d0:26:bf:6e:0d:3f:45:b0:75:a3:74:30:34:b3:7a:3b:8b:
11:4b:e8:fd:f5:80:c1:15:0a:d5:52:0c:54:a4:03:56:2c:39:
dc:8a:de:87:a1:41:b2:c7:16:ef:f7:4e:92:1c:30:09:de:bd:
f7:d0:db:17:7c:8b:46:ec:10:d3:ac:a0:33:68:0f:c6:5c:4d:
88:54:fa:3a:76:d2:df:b8:7d:00:90:0f:b9:38:b6:63:d1:88:
2e:18:da:f9:01:6c:7f:54:17:12:f5:b1:64:e3:94:be:4e:c8:
6e:ff:20:29:07:ab:e0:de:33:11:1a:a9:8c:69:3c:b2:fe:f1:
6f:c7:94:46:a5:5c:3e:de:1f:eb:20:93:a3:db:0c:42:88:2a:
ce:2c:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:44 2025 by rpki-client