Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/_sq0c5GTAFHDkK0kB1xS-FJEkxE.roa
File: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (raw, json)
Hash identifier: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=
Subject key identifier: FE:CA:B4:73:91:93:00:51:C3:90:AD:24:07:5C:52:F8:52:44:93:11
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019425FDC711EC16A13B8F61977EF85522DA
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/_sq0c5GTAFHDkK0kB1xS-FJEkxE.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197481
IP address blocks: 2a0a:2c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c7:11:ec:16:a1:3b:8f:61:97:7e:f8:55:22:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fecab47391930051c390ad24075c52f852449311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:84:4b:37:23:c2:e5:bd:66:c9:3f:94:f5:
b4:73:4d:14:57:ba:49:ec:f0:45:af:d7:53:0c:09:
16:15:18:48:b2:ff:3b:d8:55:cb:31:f5:94:4a:6a:
b9:2f:06:72:c9:08:b3:fd:10:2e:26:77:bc:3f:a8:
cc:08:26:12:fb:12:0b:24:76:3d:1c:2e:0e:35:56:
2d:a8:35:47:d4:f7:1e:c6:74:ca:73:da:50:2a:e2:
f3:86:75:50:39:49:d3:71:ba:3a:2a:d3:5a:8d:08:
2d:48:77:b0:1e:07:ee:25:0f:0c:fd:fe:ab:37:9c:
d3:f9:c1:03:d1:70:7d:91:9b:32:77:c3:17:1a:44:
4c:14:2e:e4:35:07:ed:a0:62:25:95:47:bb:12:1e:
35:9b:50:96:5c:59:d8:d7:2c:3e:50:54:fa:cb:0c:
dc:09:61:a9:54:53:5b:0c:48:23:28:a3:6c:df:27:
6e:12:cf:d0:a0:ba:f2:c0:e7:ea:cd:72:7c:61:12:
13:e8:89:d2:d4:e6:9c:b7:c9:cc:e8:f9:90:e0:65:
ef:16:7a:08:9d:e0:68:e2:3b:67:48:c8:f8:c7:21:
e5:f9:ee:bf:6d:f2:d4:2a:df:4d:2d:0e:fb:c6:5f:
bb:0b:f7:9c:04:4c:70:8d:45:b2:32:d6:fe:df:c2:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:B4:73:91:93:00:51:C3:90:AD:24:07:5C:52:F8:52:44:93:11
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/_sq0c5GTAFHDkK0kB1xS-FJEkxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
27:17:18:34:b1:c9:19:6f:8b:38:e1:9d:1a:b0:9c:41:a6:4d:
3e:dc:bc:e4:e1:26:49:e9:eb:ad:87:83:a7:57:fd:85:3c:e4:
be:59:11:25:4e:ee:5c:9c:c5:c4:04:67:bb:87:3b:9a:8a:b0:
45:55:21:f7:f9:f6:66:36:68:bd:3a:d1:13:4c:44:8c:d7:32:
f4:68:13:03:73:c5:57:4f:09:26:b5:eb:41:3c:4d:7a:16:3b:
36:91:49:0c:0a:93:7e:df:55:c6:8c:21:11:c4:c4:94:b2:18:
9d:3b:5e:93:10:20:c0:75:52:23:89:de:ac:3d:a6:19:9d:dd:
1d:30:90:25:0a:33:72:12:82:b3:52:a7:67:38:ce:ca:5e:ae:
2a:8a:93:38:2b:ca:fd:1a:ff:3f:2e:1a:63:8a:1a:73:9c:ac:
45:d6:d9:94:2c:76:5d:1a:f9:aa:ec:87:f9:fe:13:d0:09:25:
01:70:75:31:f8:dc:e4:88:3b:51:32:e9:45:ec:eb:5a:95:f6:
f6:a8:d3:b6:81:39:0a:5f:58:25:45:0e:61:ce:fc:5e:89:1d:
d1:75:5d:3f:10:d3:68:37:aa:aa:8b:ff:8d:f1:f4:33:48:48:
3c:2c:03:14:b8:ed:6d:34:6c:3d:d8:84:fb:4f:e1:dc:57:a9:
7d:0a:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:54:18 2025 by rpki-client