Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NktlJjkaADAadLpypIsfD6K2TiA.roa
File: NktlJjkaADAadLpypIsfD6K2TiA.roa (raw, json)
Hash identifier: oejtMtCoKhWHfsOmiatw50R67+R/JChku994OHaxxOk=
Subject key identifier: 36:4B:65:26:39:1A:00:30:1A:74:BA:72:A4:8B:1F:0F:A2:B6:4E:20
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDBB312596AE19CB1DBA02127C36B
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NktlJjkaADAadLpypIsfD6K2TiA.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137909
IP address blocks: 2a06:e881:1600::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:db:b3:12:59:6a:e1:9c:b1:db:a0:21:27:c3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=364b6526391a00301a74ba72a48b1f0fa2b64e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:d6:58:50:71:b7:3f:c6:4c:0d:86:99:67:
e8:03:d7:9e:9c:2a:45:e1:69:97:f0:40:fc:76:d8:
7a:40:8e:ca:72:6c:ef:6d:4a:8e:03:44:c9:4b:0f:
07:ff:ca:bd:02:99:7d:85:2f:1c:ee:22:f7:ab:13:
17:be:54:aa:2d:7c:ce:39:60:bd:4f:a9:76:53:26:
66:ec:b6:de:bb:f7:64:7a:42:c9:50:20:5f:1a:ba:
8f:90:7f:46:50:55:32:ce:19:c0:4e:e3:51:14:de:
88:3c:13:fe:e5:bc:bc:5e:bd:9e:85:e5:af:a4:95:
0e:f4:90:a0:b7:76:94:1a:ac:fa:cb:43:05:40:ab:
2c:0a:5d:c4:4e:49:37:ed:a2:f8:5a:65:9a:59:60:
83:ae:e2:d8:54:9f:e6:ec:11:99:36:35:cf:15:97:
84:a6:c5:2a:72:b6:16:36:d0:af:6d:9c:7a:aa:05:
d3:f8:a6:f7:57:f8:9d:dc:a0:3d:2d:0f:0f:44:ed:
9f:56:9c:ad:72:41:e6:14:aa:27:92:90:88:df:0c:
7a:f6:67:f3:07:80:38:5e:6d:a4:3e:32:d8:7c:0b:
22:5b:a3:08:c5:a9:67:ff:f6:1a:76:27:6c:9b:8f:
57:f1:4c:c6:14:ab:7e:6b:d7:3d:ab:be:bd:6a:17:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4B:65:26:39:1A:00:30:1A:74:BA:72:A4:8B:1F:0F:A2:B6:4E:20
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/NktlJjkaADAadLpypIsfD6K2TiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:1600::/44
Signature Algorithm: sha256WithRSAEncryption
0f:84:6b:e8:e3:a1:ee:18:00:26:5b:39:6b:bd:6f:c2:03:60:
e7:2f:ee:d2:7d:a7:5b:eb:4f:43:cc:ea:88:a7:8a:e1:73:97:
87:30:4d:5c:a6:d6:39:ba:4c:d4:df:df:94:5f:f2:08:4c:58:
72:24:e9:19:00:6d:9f:26:0c:a5:8d:10:bc:cc:ce:12:0c:bb:
fb:25:13:44:17:df:b2:76:df:f7:39:2e:f1:74:ef:84:d8:99:
cd:7c:00:77:03:a5:ac:9e:97:62:37:53:b9:c4:d3:06:0e:0c:
dd:10:9b:63:14:9a:6e:df:1f:ba:0c:17:9d:b8:80:36:2e:6a:
42:c1:68:a4:7a:61:5c:98:1a:35:1e:b7:a1:1e:52:38:25:59:
aa:f1:bc:56:c6:a9:8a:9e:a0:9f:d1:32:8c:91:35:43:69:5b:
0e:de:36:45:a1:6f:9b:90:38:37:da:84:35:05:b7:83:c5:2c:
c4:e2:fa:c5:67:3c:39:1f:e5:e4:5b:a7:3f:8c:83:57:f3:8a:
13:56:e3:e6:f9:62:51:d3:83:79:49:d5:d8:8f:a8:f8:48:b9:
e5:27:54:15:29:d9:99:25:4b:56:72:60:0a:1f:68:d7:1b:86:
3e:de:50:42:09:8b:78:25:35:84:d0:4e:73:ab:60:9f:01:6c:
5f:56:dd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:43 2025 by rpki-client