Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-rkGfwVeTsZ0utDQQICY0qj0K-U.roa
File: 1-rkGfwVeTsZ0utDQQICY0qj0K-U.roa (raw, json)
Hash identifier: G7T4a/cvZpM4q4oF4oMGYV5YaBY5pE94DW3T6hBVUO4=
Subject key identifier: FA:B9:06:7F:05:5E:4E:C6:74:BA:D0:D0:40:80:98:D2:A8:F4:2B:E5
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDA57DBE296F3329F70CF1B1EFDE5
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-rkGfwVeTsZ0utDQQICY0qj0K-U.roa
Signing time: Thu 02 Jan 2025 07:49:40 +0000
ROA not before: Thu 02 Jan 2025 07:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 2a06:e881:9100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:da:57:db:e2:96:f3:32:9f:70:cf:1b:1e:fd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab9067f055e4ec674bad0d0408098d2a8f42be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:ed:44:53:48:c2:76:52:89:20:57:ec:55:
2b:8c:29:ef:1a:dc:58:7d:f0:02:0d:c1:70:ef:f1:
b2:1f:44:1e:21:fc:74:23:52:1b:d5:84:06:61:5f:
36:74:f9:50:ba:76:3e:8e:a1:dd:70:5d:bd:ca:8b:
d6:84:63:2f:e4:67:97:68:63:5c:89:a6:e7:44:d6:
a3:d9:1a:bb:ad:5e:6a:6c:d8:6e:05:5f:eb:2c:1f:
7b:8c:ed:49:c6:a4:1c:bf:61:dd:5c:4b:81:6f:fa:
f6:66:72:99:12:7a:db:fa:c9:9c:2d:df:22:23:02:
34:74:2a:65:06:e9:86:7a:f9:f5:62:8d:97:c4:89:
7b:90:2b:c1:1f:14:65:82:8b:44:99:18:f7:86:31:
b9:cb:d7:9b:8f:31:52:5a:bf:91:39:fc:f3:40:72:
cd:d6:0f:9e:02:e6:a1:0c:8c:c0:4c:d4:a6:03:82:
d8:12:b5:97:64:49:ee:4c:a8:53:e7:b5:1c:bf:7d:
55:0e:57:b3:00:29:0c:d9:93:5d:d3:c2:f5:4e:9b:
a5:59:18:b3:60:61:d0:31:18:ad:3d:b4:88:ed:f0:
6c:e1:b8:12:f9:d1:de:a7:db:81:aa:14:f5:bf:5f:
8b:df:a9:8f:b8:bf:a0:c1:e6:2a:2e:7f:c1:90:e2:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:06:7F:05:5E:4E:C6:74:BA:D0:D0:40:80:98:D2:A8:F4:2B:E5
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-rkGfwVeTsZ0utDQQICY0qj0K-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:9100::/40
Signature Algorithm: sha256WithRSAEncryption
d2:20:54:06:07:d8:06:66:c1:3b:af:c5:64:10:e2:95:31:73:
84:ff:c5:08:66:77:4e:f0:27:f6:9c:72:6b:4c:b9:9d:22:f2:
12:41:71:5e:53:45:15:f1:99:6b:a8:4b:43:f5:2e:64:fe:fd:
54:3b:7d:bc:00:dc:ee:4a:14:61:30:38:d7:c5:a5:d3:5e:db:
64:3f:c3:25:67:bc:04:56:d1:64:1b:09:f9:1c:04:f7:b4:40:
58:29:7d:8b:63:a9:64:cb:a1:f8:a5:f4:e7:f4:87:ea:a8:90:
24:ea:44:1e:62:25:f7:28:c4:03:2c:c4:e8:b5:96:6a:48:c4:
e9:a4:08:22:2b:91:2b:69:20:f4:e7:51:5c:1b:c6:ba:db:8c:
ae:88:ac:4a:a2:23:e1:34:56:db:6d:ec:7c:af:53:1f:d8:35:
ce:b2:8e:d1:9d:a0:72:69:ee:51:57:fe:8a:ab:38:ed:7b:6c:
23:55:fd:aa:ac:33:76:eb:82:28:b2:5a:e6:a2:88:0c:f6:f7:
ec:25:9f:75:32:74:7a:21:4d:db:30:5a:bd:ee:e6:84:44:00:
e9:2e:be:dd:e3:91:ea:cf:9d:5d:bf:01:b7:a6:0b:94:6f:60:
6b:16:bb:bc:8d:c4:48:ae:c4:22:59:0c:2c:ab:46:1d:cf:32:
7d:6c:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:06 2025 by rpki-client