Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/epU58EjYpMtSgrUzd3xlkI9EhKU.roa
File: epU58EjYpMtSgrUzd3xlkI9EhKU.roa (raw, json)
Hash identifier: d2WOVeDIsDjpX00onNi7gIPb75WWaXv2cOi5GanZkh8=
Subject key identifier: 7A:95:39:F0:48:D8:A4:CB:52:82:B5:33:77:7C:65:90:8F:44:84:A5
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01942823194033430F65897E35E17897A177
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/epU58EjYpMtSgrUzd3xlkI9EhKU.roa
Signing time: Thu 02 Jan 2025 17:49:36 +0000
ROA not before: Thu 02 Jan 2025 17:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139242
IP address blocks: 2a06:98c0:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:19:40:33:43:0f:65:89:7e:35:e1:78:97:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a9539f048d8a4cb5282b533777c65908f4484a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:7e:28:8f:9a:7c:4d:3c:ac:6f:e0:f9:68:
40:e6:4d:1e:76:7e:be:c3:5d:d9:aa:db:9c:c4:89:
61:a1:74:e2:92:90:16:a6:3a:75:c2:d0:c9:fe:b0:
3b:49:ea:18:15:7b:d3:7c:97:77:15:5c:82:20:f9:
c4:9a:47:7e:bb:1d:01:c5:da:c9:34:ac:92:17:96:
07:2b:98:e8:56:6f:8b:cd:12:ae:b5:1a:50:9a:f1:
5b:b6:d9:73:5d:39:d2:38:39:c2:a0:10:5b:6b:41:
02:32:86:35:54:a0:f9:ad:b7:31:f0:e7:19:5a:3a:
c1:da:e3:cd:cb:11:db:78:70:25:74:c5:73:d0:48:
fe:77:ae:99:78:bb:4c:ad:f1:55:7c:42:83:cc:49:
8e:96:15:ef:b0:c8:91:95:73:be:04:2b:49:e3:37:
3b:a6:90:94:6b:11:31:74:74:81:e9:f9:32:7a:1a:
84:41:1c:71:1e:1d:d2:7f:b5:6e:12:d9:b4:af:e4:
cd:73:f5:d9:21:2a:e5:0b:d0:d4:58:37:a6:65:8a:
b2:6c:e5:09:3f:07:95:f3:a1:09:d7:f8:08:90:6d:
06:c5:cf:68:64:5b:b0:c6:41:63:78:6c:f6:48:ad:
f4:f1:d5:f1:81:5e:bb:94:f9:3e:06:9f:fa:d5:5b:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:95:39:F0:48:D8:A4:CB:52:82:B5:33:77:7C:65:90:8F:44:84:A5
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/epU58EjYpMtSgrUzd3xlkI9EhKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:98c0:1001::/48
Signature Algorithm: sha256WithRSAEncryption
74:42:db:ec:46:c1:9c:07:da:cc:0d:e7:b9:5e:de:6e:09:c7:
67:ef:bb:7a:34:77:b4:09:64:df:37:20:d0:6f:1c:14:10:25:
18:e3:d3:37:10:7f:61:77:83:e3:80:fb:db:21:e1:5b:b0:4b:
5b:0a:9a:e4:8f:7e:c7:7e:b6:f3:c7:9a:72:27:56:40:4d:30:
c3:58:ae:79:ea:76:58:0b:24:86:8f:c2:6f:65:2a:f8:7d:72:
32:2a:06:d2:e4:fc:86:eb:09:78:18:87:e7:e3:9f:ff:25:65:
ef:40:ea:74:a7:8e:60:b1:fc:24:71:27:dd:7f:de:50:b0:21:
c0:9a:7b:79:50:66:e3:82:fc:61:de:86:52:3e:0a:5e:ad:c0:
eb:8e:33:15:8d:c4:f8:95:f3:4c:99:d3:54:55:3c:4a:6c:c3:
9e:0d:34:d5:d7:1b:ae:9a:6a:bd:55:d1:88:23:14:46:f4:66:
2b:06:81:35:f8:2b:fe:6a:5e:3e:9c:47:ca:a9:82:a3:b9:58:
33:1b:23:fb:3c:e9:7a:a0:e8:4c:8b:ed:61:4c:8c:fe:1a:d1:
4b:9e:0c:e4:9a:04:d6:d4:1a:28:a3:cd:05:6d:07:1c:d2:fc:
7f:1a:6c:80:7c:ba:e6:21:19:20:f1:6b:e5:e2:03:ef:6e:fe:
8b:b8:bc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:52:37 2025 by rpki-client