Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/dvJNx6RbxjDoJCEwF7HnrhRhptU.roa
File: dvJNx6RbxjDoJCEwF7HnrhRhptU.roa (raw, json)
Hash identifier: DVANgVeWMmrYwoLblH+nDJmKwe1mEMcVwTPkEqM0534=
Subject key identifier: 76:F2:4D:C7:A4:5B:C6:30:E8:24:21:30:17:B1:E7:AE:14:61:A6:D5
Certificate issuer: /CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
Certificate serial: 0194266C41E04A9E0756AD934A1D2130A512
Authority key identifier: 45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/dvJNx6RbxjDoJCEwF7HnrhRhptU.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51574
IP address blocks: 2a13:5a07:fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:41:e0:4a:9e:07:56:ad:93:4a:1d:21:30:a5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76f24dc7a45bc630e824213017b1e7ae1461a6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:21:0d:a9:54:88:42:89:50:f4:14:ea:3d:
47:bf:30:c0:d5:33:26:0a:d3:96:d4:90:5c:fa:8b:
24:17:61:36:01:e5:31:8b:45:73:ae:31:ac:b4:bb:
4a:c0:64:55:e4:75:a3:c2:87:2e:4e:ad:b7:e0:d3:
9f:9e:f4:1f:ae:6f:f7:bc:61:0d:fc:c5:b4:ab:38:
7c:63:ee:9c:db:dd:a9:ee:7e:32:59:6d:7a:71:95:
57:eb:c8:a0:fc:fe:23:2a:ad:60:95:5b:d3:c6:da:
49:48:9e:b4:eb:51:9e:6a:23:1b:01:72:fa:03:01:
94:67:99:36:99:ee:e0:f5:fb:46:c8:8e:bc:32:20:
e2:91:f2:fd:9d:3f:f0:ba:07:27:49:2b:6f:ed:1d:
77:e5:91:55:1b:fc:5c:9b:3e:c6:67:8b:0e:75:2c:
01:d5:2a:78:6e:41:c2:ca:2c:5f:de:8e:73:16:de:
27:07:8e:33:1b:0d:33:c4:1e:ab:f0:eb:2a:84:69:
67:84:26:fc:11:bc:34:18:fc:9a:e7:9b:93:d6:3e:
65:af:4e:9c:e2:8b:0e:da:4b:e3:42:89:d2:a4:de:
6b:87:69:06:1f:35:96:78:4d:5d:71:db:c4:3a:ab:
50:e4:82:9c:44:37:3d:06:c4:6e:e9:ee:6f:dd:66:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F2:4D:C7:A4:5B:C6:30:E8:24:21:30:17:B1:E7:AE:14:61:A6:D5
X509v3 Authority Key Identifier:
keyid:45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/dvJNx6RbxjDoJCEwF7HnrhRhptU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5a07:fe::/48
Signature Algorithm: sha256WithRSAEncryption
36:a3:6c:97:0f:9b:d0:7b:e6:15:72:5d:e5:4e:e6:74:6c:45:
7e:8c:93:7a:80:2e:d5:a0:a1:15:04:ea:04:68:9a:a8:1d:e2:
6a:1d:11:70:12:66:fd:bf:e8:b1:d6:76:9c:95:0b:67:66:b3:
99:5b:94:10:ca:0b:9b:49:b0:9a:b8:05:7b:aa:5f:10:a4:6f:
ed:91:7f:87:e4:56:7a:92:26:0c:d5:1e:2f:0c:65:22:10:d6:
4d:2a:e9:b5:e4:00:3f:24:49:7b:18:22:d5:5d:5d:7f:27:18:
cb:c9:9c:18:65:f7:66:d6:f2:24:7c:a3:97:9f:69:11:fa:c2:
8a:8a:f7:19:ad:03:25:e4:4a:f5:d8:14:6c:a0:d8:44:5f:d5:
55:1c:3c:35:eb:99:30:64:94:a6:d8:4a:3f:d7:45:45:48:3c:
2c:65:c4:b1:66:45:86:76:18:3f:37:cc:78:ab:f3:9e:ad:76:
21:fe:85:13:83:8c:71:e4:1b:ba:2d:40:c1:c3:b6:b5:23:42:
d9:51:ae:c4:1c:5d:b5:2f:26:48:3f:68:4f:c9:b0:3f:8b:01:
e2:ba:79:10:e2:a2:dd:32:55:1a:d1:53:3e:9d:12:da:b6:9c:
ec:07:f0:40:29:da:d0:3b:c9:6a:94:ea:16:48:b6:d0:35:c9:
4d:f1:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:39:56 2025 by rpki-client