Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Q0yZFa7ENCPQT5Adcu0zaT-pmo4.roa
File: Q0yZFa7ENCPQT5Adcu0zaT-pmo4.roa (raw, json)
Hash identifier: dLqIoXHSulGz/m5dBQGLLlC3REzPPLjg6udDmzVt7yA=
Subject key identifier: 43:4C:99:15:AE:C4:34:23:D0:4F:90:1D:72:ED:33:69:3F:A9:9A:8E
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448DA3DDD298B519E5473138EEA7CF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Q0yZFa7ENCPQT5Adcu0zaT-pmo4.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41767
IP address blocks: 2a09:7:2005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8d:a3:dd:d2:98:b5:19:e5:47:31:38:ee:a7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=434c9915aec43423d04f901d72ed33693fa99a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:ce:fa:37:70:0d:5d:92:e5:9a:fc:f9:da:
0f:47:d8:20:61:3a:53:ef:b5:b2:00:a8:a3:c2:81:
69:07:9d:e9:60:31:d5:15:96:b0:f8:e7:91:1c:e6:
62:17:be:0a:92:44:73:a5:28:fe:38:a2:7e:db:e1:
85:be:e3:31:76:e8:4b:43:42:96:ae:50:5a:c5:22:
ef:0c:0f:d1:1a:3b:d3:7b:55:cc:f0:da:77:44:24:
e4:7d:10:da:db:49:b9:ee:75:a1:46:8d:e9:e0:9d:
40:9a:18:19:f9:d2:69:6d:b7:52:6e:6e:9d:14:0e:
8e:09:26:a2:f1:fc:f1:e1:dd:05:97:5f:23:81:7e:
fc:63:41:43:f2:b1:81:89:68:0c:71:98:22:aa:a9:
aa:be:5f:ef:a4:a6:86:a0:e0:34:59:cf:93:c5:58:
31:4c:68:63:35:42:51:d5:84:54:36:69:fd:2c:ab:
ca:7c:d0:75:bb:4c:60:94:fd:45:4a:34:35:f6:e0:
53:ab:6e:6a:3f:f3:24:7d:69:a7:6d:28:84:2f:35:
44:c3:e7:41:86:3e:aa:dd:f1:0c:b4:c6:76:6c:c4:
9b:44:c0:b0:d6:5f:ca:3c:6d:5c:b5:a2:72:3d:41:
0d:4d:f6:91:cd:59:04:96:26:68:36:2c:9a:0f:f0:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4C:99:15:AE:C4:34:23:D0:4F:90:1D:72:ED:33:69:3F:A9:9A:8E
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Q0yZFa7ENCPQT5Adcu0zaT-pmo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2005::/48
Signature Algorithm: sha256WithRSAEncryption
a4:8d:df:11:89:69:f8:5b:60:c9:d0:ad:db:cc:ed:cc:bd:c2:
1a:64:eb:cf:a0:d4:11:e0:25:28:c0:eb:8a:9c:77:ba:f7:e4:
ee:54:c7:09:dc:d2:4b:7f:c1:ca:e9:99:20:34:4a:8a:85:47:
d5:29:11:6c:15:70:c9:76:c3:4b:f1:54:b2:12:8b:fb:cd:c7:
a7:2c:a1:29:9f:3d:d4:51:ed:a5:4c:69:0e:fd:77:14:81:ab:
44:2d:d7:c5:3e:9b:63:c6:6f:97:ce:ac:a3:f6:f1:ff:a4:19:
a8:04:73:3b:39:d0:fb:31:ce:70:9a:89:9f:9c:c6:c4:46:9d:
9e:67:e4:68:8a:28:ce:40:f1:6e:74:29:b9:d5:88:11:34:fb:
00:7f:1d:c3:70:75:d1:a2:d6:8e:15:b8:de:44:33:5b:37:7f:
ff:a1:c8:01:0e:f5:c7:26:a2:ce:89:45:b0:72:16:13:f9:1a:
9d:13:47:ce:8b:6f:3a:e9:fe:25:ca:6e:c6:c3:99:56:9e:bc:
bb:ef:d2:58:df:25:a5:1d:b2:43:a4:cb:14:46:ae:ff:ca:91:
0f:18:ef:61:9a:eb:44:73:73:10:e2:f8:da:d5:2e:17:da:09:
4c:b1:f1:c0:23:39:ad:0b:45:fa:44:e7:b1:20:63:c6:b0:81:
1d:63:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:19:05 2025 by rpki-client