Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa
File: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (raw, json)
Hash identifier: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=
Subject key identifier: D6:2F:2B:90:7C:83:FC:61:29:11:E4:FE:55:23:E6:AC:CE:C6:F6:18
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01942369860698A95449D86A26699815DFCD
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28848
IP address blocks: 2a01:190:15e9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:86:06:98:a9:54:49:d8:6a:26:69:98:15:df:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d62f2b907c83fc612911e4fe5523e6accec6f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:8b:50:97:fa:3b:ca:97:67:2b:01:51:e8:
7e:89:ad:f2:e7:fc:06:06:a0:e2:8a:fb:01:95:54:
67:84:66:10:e9:d4:cd:dc:41:60:e4:3c:09:b8:70:
06:dc:b4:9d:77:e7:71:e3:44:9f:44:4a:be:57:34:
42:3f:4b:1a:24:01:5a:65:6f:87:5c:b1:57:84:61:
71:83:ef:05:a1:ce:bf:7f:97:ef:4f:e7:e7:01:48:
6d:df:12:8d:5b:56:1f:8c:c2:c0:46:4e:0c:ec:48:
24:91:e6:8e:43:72:0f:64:c8:7f:df:10:9b:a7:75:
a7:57:d1:af:9d:3d:dd:4e:c1:a3:7c:fe:3e:a2:69:
b1:53:db:a1:43:ec:e6:cc:15:75:dc:4c:f4:bb:7f:
1f:b6:9a:86:5c:08:9c:7c:4c:98:88:77:b4:d3:d2:
e6:b0:c4:23:30:fe:ac:60:30:a8:27:0f:ef:87:32:
a9:b2:1f:74:d7:39:c5:21:22:8c:5c:d3:0c:f4:fd:
ac:52:02:6f:30:d7:de:3c:b0:ca:db:6e:cb:54:d7:
10:19:35:87:ea:9f:5b:26:a4:68:d4:c2:29:a2:07:
3c:68:c8:d2:66:c6:fe:95:15:db:ac:09:66:5f:e7:
a9:6d:32:cb:f5:2f:01:70:a2:0c:50:1e:67:42:8c:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2F:2B:90:7C:83:FC:61:29:11:E4:FE:55:23:E6:AC:CE:C6:F6:18
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15e9::/48
Signature Algorithm: sha256WithRSAEncryption
ab:ae:99:3c:93:be:c8:69:cc:3a:0e:73:44:51:e1:48:5e:d4:
ed:a4:c6:53:10:79:3f:cb:c1:b0:dd:23:9e:69:7f:25:95:a6:
72:6c:48:ae:c9:01:8b:88:0e:c9:e4:b6:a5:8d:80:71:e2:76:
22:4f:c8:c7:de:0f:08:ea:80:ac:73:f4:8f:86:e8:18:58:9d:
c2:33:d4:88:47:63:c2:45:02:fe:b6:e4:48:5b:a2:6e:86:d6:
69:42:41:42:2e:a5:f2:20:45:a9:80:c8:7e:16:47:4d:6b:24:
0c:10:b4:06:eb:49:aa:b8:2e:b8:ea:b6:c0:74:fd:e3:e5:87:
ab:e8:31:77:52:68:6d:03:85:99:08:5b:c1:f3:26:8b:db:7c:
09:05:b2:e2:f5:da:20:3c:66:16:4b:2b:aa:66:8a:2b:3c:73:
9a:1e:c4:f1:87:6e:ab:f1:94:fc:6b:20:5a:79:47:8d:90:ef:
be:01:d8:dc:ba:c6:66:ad:98:4d:47:cd:97:57:04:41:87:4c:
5e:fc:ac:26:64:33:0f:8f:d6:80:3d:4f:98:bb:40:19:15:4a:
6b:df:29:3d:47:c7:10:a7:ae:0d:61:d5:4f:34:05:6c:70:8c:
81:95:9c:3f:3c:e8:de:0c:08:dc:54:0a:bb:34:8f:e2:58:23:
eb:be:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:38:45 2025 by rpki-client