Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L5nBhmOC27Ey7fma1URPrRhhwKE.roa
File: L5nBhmOC27Ey7fma1URPrRhhwKE.roa (raw, json)
Hash identifier: uxxk/9q1Y3aLayyC0ZaR/7ghioG/pH3NZvOWpuHnAyA=
Subject key identifier: 2F:99:C1:86:63:82:DB:B1:32:ED:F9:9A:D5:44:4F:AD:18:61:C0:A1
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448294167B49F1EC6CDF203212D6F0
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L5nBhmOC27Ey7fma1URPrRhhwKE.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3204
IP address blocks: 2a09:7:200a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:82:94:16:7b:49:f1:ec:6c:df:20:32:12:d6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f99c1866382dbb132edf99ad5444fad1861c0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:e6:83:67:13:43:17:25:dd:35:f1:cc:08:
2f:10:78:ed:18:b6:98:20:98:f4:b0:14:69:f4:0b:
2d:9d:7b:82:59:23:43:50:5e:17:d3:d5:32:dc:9a:
57:6b:40:2d:84:ab:3a:46:f3:3b:0a:5e:1a:ca:ac:
c2:bd:bd:cd:69:bd:5b:61:1d:e1:7e:74:c2:cf:28:
23:84:01:84:0f:e2:41:4d:59:50:ad:c7:28:12:69:
57:4a:46:d3:88:dd:d9:fc:b4:a2:a1:dd:6b:f4:96:
41:46:d9:75:c3:ad:59:97:50:0a:b0:40:7b:08:d6:
82:93:ab:e6:f5:4b:7b:de:b6:fb:4f:c9:2e:3e:bc:
92:eb:43:25:7b:db:b7:72:9b:fb:ff:6b:ee:39:45:
3d:43:10:89:16:5a:95:ea:6a:1f:63:92:06:7d:ca:
4b:2f:ac:a7:e4:a0:b0:bc:fa:04:0c:ff:cf:35:bf:
54:47:8b:04:ce:6c:52:9e:af:18:0a:f8:a3:77:f0:
a6:4e:5d:52:26:91:42:fe:98:50:be:ed:fd:63:96:
8c:6b:49:ba:8f:2d:0e:f4:c6:9a:b8:46:27:fb:17:
59:43:52:be:72:76:02:39:a5:84:08:b6:fe:fc:5c:
2d:7e:4a:a1:0d:db:17:c4:28:2f:28:ab:e4:41:10:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:C1:86:63:82:DB:B1:32:ED:F9:9A:D5:44:4F:AD:18:61:C0:A1
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L5nBhmOC27Ey7fma1URPrRhhwKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:200a::/48
Signature Algorithm: sha256WithRSAEncryption
9f:ca:9d:ec:25:af:86:da:86:37:7e:d2:3e:07:83:53:a9:cd:
aa:79:b9:06:1a:69:8a:4f:10:05:6f:31:60:50:02:45:ba:48:
3f:29:df:b4:b9:01:bd:cf:43:72:6d:83:f4:57:9a:96:c2:aa:
e6:16:eb:c9:4b:b8:59:75:bb:5e:53:bb:d4:da:23:59:15:11:
f9:c8:21:7e:e6:cc:97:06:b7:d3:5c:5e:06:65:11:68:17:96:
f1:ad:cf:9a:0b:11:95:75:c3:05:cc:b4:2d:66:48:e3:f4:2e:
65:8c:aa:23:16:12:84:6b:df:ef:7c:36:aa:11:46:e7:8a:e8:
b4:12:3b:1d:94:c1:f6:33:a2:01:5a:28:aa:50:2f:43:70:9d:
17:5a:af:a2:e4:92:08:37:ea:92:ef:0e:c5:8f:7f:5e:7b:ae:
f2:eb:ae:bb:93:5a:32:b6:c1:f2:e0:33:4b:35:98:e3:46:83:
fe:c0:f1:5b:7d:cf:43:b8:ec:f3:3a:16:15:fa:7c:c4:dc:e2:
34:04:cb:13:f7:cb:f7:25:88:c3:67:42:a6:b2:b4:39:02:65:
b6:06:83:a5:56:67:c1:33:ae:04:2c:45:c4:8c:26:32:97:9e:
44:5f:7a:9c:b9:49:0e:2d:43:91:80:3c:e7:7f:89:5e:88:b8:
7f:5d:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:49:51 2025 by rpki-client