Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/R53HF16-DhpMan6DGJreuoiZvhM.roa
File: R53HF16-DhpMan6DGJreuoiZvhM.roa (raw, json)
Hash identifier: YMTUr2YHozBY/XM5xPZFSd0Be/ThKDktKka2E/pg3YM=
Subject key identifier: 47:9D:C7:17:5E:BE:0E:1A:4C:6A:7E:83:18:9A:DE:BA:88:99:BE:13
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE7221E983D2DC677DAB2DE7DDF09
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/R53HF16-DhpMan6DGJreuoiZvhM.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208434
IP address blocks: 2a06:e881:6900::/48 maxlen: 48
2a06:e881:690f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e7:22:1e:98:3d:2d:c6:77:da:b2:de:7d:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=479dc7175ebe0e1a4c6a7e83189adeba8899be13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:0e:6b:80:97:ce:79:5a:0f:65:12:71:06:
45:82:ca:78:84:68:69:eb:56:57:d1:b8:9a:80:bc:
19:51:05:fa:44:10:45:7f:10:8b:66:2b:cc:96:5b:
d4:6d:b6:36:d7:cf:ad:f6:b2:62:6c:d8:de:bf:44:
6e:2f:3b:41:f2:0f:47:85:30:70:4a:4f:2c:0f:31:
db:04:b4:6a:3e:97:d0:79:33:30:7c:25:81:4c:89:
48:8a:b9:c3:b0:df:23:94:5a:ae:72:69:5b:96:70:
4c:45:6e:c6:79:37:27:3d:19:b8:f6:26:b3:40:69:
61:05:4a:c6:b0:45:15:a0:db:d1:5e:82:01:c7:fd:
bb:18:c6:a6:d2:6a:d1:95:c2:f6:06:29:41:1c:2b:
8b:9a:80:ed:75:cd:7d:eb:1b:c9:c8:cd:f3:f8:4d:
c2:9c:c7:5d:6c:34:43:8c:a4:14:eb:d5:13:80:92:
22:35:33:0c:d8:26:9e:1b:ea:66:c4:5a:78:90:b9:
ea:4c:17:80:01:d4:02:af:35:0a:89:67:55:e7:63:
bd:66:df:f2:ef:7a:31:d8:21:15:1f:8e:39:80:f6:
62:a6:f1:9b:cd:ad:e7:33:7a:c7:b8:ae:1b:77:f3:
c5:88:ef:48:12:1a:aa:fd:1a:b7:55:a5:35:8a:23:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:C7:17:5E:BE:0E:1A:4C:6A:7E:83:18:9A:DE:BA:88:99:BE:13
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/R53HF16-DhpMan6DGJreuoiZvhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6900::/48
2a06:e881:690f::/48
Signature Algorithm: sha256WithRSAEncryption
aa:a9:5a:9b:54:8a:88:21:7e:9d:5f:7b:b6:78:2e:a4:a8:53:
cc:30:b0:f7:4e:4f:c4:03:ac:3a:e4:cc:76:b4:51:cd:a3:a4:
cd:29:87:78:5b:b3:da:75:63:98:3a:f5:21:1b:2c:53:ac:54:
05:67:9e:3b:c7:7d:66:b2:d2:c0:ba:c2:6f:d3:87:c3:a0:7d:
e4:31:89:0d:78:9d:b9:55:4b:bb:41:15:dd:03:5c:9b:2c:f9:
1f:08:f3:65:c9:df:cd:ad:a9:2c:50:0b:3b:22:4a:63:29:6f:
da:15:53:eb:11:64:a0:90:68:a5:d2:29:63:b0:fd:ea:2c:1f:
ec:b5:5b:f7:e7:74:3c:5c:e8:e0:02:bf:fd:65:f8:f0:0c:85:
b9:73:97:be:10:83:33:0b:1d:46:2f:02:fd:e0:b6:98:98:d6:
56:22:03:32:7b:df:c4:bc:4a:90:05:59:fa:ba:cf:68:46:fc:
f1:68:9a:4e:d8:df:85:06:e5:19:ce:c0:e3:29:76:3c:7a:d7:
be:a9:af:85:90:5a:f8:6f:77:ff:19:95:ad:94:13:a6:e9:75:
d4:24:42:2d:2f:fd:41:4c:78:62:78:4c:f0:ce:4b:c7:ff:67:
5f:65:c4:3e:d7:ad:bd:b0:ec:a3:b7:fb:bc:c9:40:07:c0:72:
69:77:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:10:04 2025 by rpki-client