Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/SsKksLRWQogSj52YcU-fm-l9ki8.roa
File: SsKksLRWQogSj52YcU-fm-l9ki8.roa (raw, json)
Hash identifier: LT2cv49CnhJN4EhKe6Mnshi7ikcDyNISdAh+6UAXoeQ=
Subject key identifier: 4A:C2:A4:B0:B4:56:42:88:12:8F:9D:98:71:4F:9F:9B:E9:7D:92:2F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE81F35F049D933D620CF90E14D24
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/SsKksLRWQogSj52YcU-fm-l9ki8.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208958
IP address blocks: 2a06:e881:6500::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e8:1f:35:f0:49:d9:33:d6:20:cf:90:e1:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ac2a4b0b4564288128f9d98714f9f9be97d922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:7f:79:89:b9:d9:23:ff:5a:ea:53:d2:a9:
bb:33:f5:db:53:35:8c:ea:e2:05:0f:a7:5f:3d:02:
3c:d8:0c:4c:a8:48:70:18:42:57:31:51:2a:2d:ad:
a8:9e:66:f3:82:ac:08:06:b1:15:67:db:2e:2f:3b:
e3:c7:29:ef:da:56:d4:64:ad:97:68:48:5d:57:b7:
1a:58:2a:a1:0c:15:8c:51:05:a0:55:07:65:60:5b:
1c:3f:c5:16:62:69:02:28:98:a3:52:a0:46:fb:fa:
eb:76:9e:0d:3b:be:eb:72:56:e1:41:98:fa:e2:be:
49:d9:95:43:51:eb:04:ec:37:2d:bf:a0:41:86:e3:
b2:63:ea:6b:be:12:ac:4c:9d:2e:f7:9d:46:92:8e:
aa:9f:cc:19:63:25:dd:24:6d:12:a4:46:8f:3a:b4:
ee:9f:a6:ac:76:ed:2f:18:da:14:96:d5:06:ce:0d:
78:fe:3d:f8:79:d7:3b:7c:41:bd:33:77:b0:8e:24:
c1:91:95:fd:e2:b4:23:67:c6:ad:86:a4:18:23:d1:
e7:71:e9:c8:76:5b:0b:4e:e4:ca:36:b7:e4:a7:72:
bf:82:e2:2c:15:03:f1:41:94:e7:00:2e:87:f4:58:
92:c9:99:66:27:89:97:47:b6:c1:e3:3a:23:e8:40:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C2:A4:B0:B4:56:42:88:12:8F:9D:98:71:4F:9F:9B:E9:7D:92:2F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/SsKksLRWQogSj52YcU-fm-l9ki8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6500::/44
Signature Algorithm: sha256WithRSAEncryption
9d:aa:2d:f4:89:33:3e:3e:5d:a8:f4:dd:fe:5f:4a:17:05:12:
7e:e1:c3:a2:15:a2:a9:5f:fe:a5:52:bb:18:f2:b9:60:92:ae:
32:ab:0d:41:83:0c:a9:f8:c3:7d:13:0b:d4:3b:d1:d4:74:b1:
7c:18:1b:ad:31:ff:a0:71:e1:60:e0:85:5e:c7:c5:0d:6b:af:
2a:69:0d:01:ff:01:16:7e:13:94:7d:ef:70:16:5a:26:27:c4:
36:11:2e:5f:c5:2d:c5:4e:cf:f6:67:f7:ef:36:cf:a2:ad:e1:
29:78:1f:34:7b:ab:ba:80:0a:8e:85:8d:d4:3c:c1:1c:7a:0d:
41:27:1a:e7:b9:69:cb:ef:d5:cc:3a:75:e6:ad:70:dc:e3:1b:
f5:56:19:9d:06:cb:d7:0a:a4:55:66:62:5f:4d:6b:fa:ec:b2:
10:e7:2b:df:b0:3c:a5:de:5c:56:a7:f4:c4:ff:d6:e3:8b:fa:
46:a4:4d:db:92:0e:4c:1e:24:ee:6a:57:b2:52:b4:a4:3c:b5:
48:6a:e1:04:c5:5c:16:e3:8e:61:e5:58:ad:6a:35:67:ad:82:
34:4b:35:73:32:18:71:6e:ce:0c:d4:7b:37:3e:02:1f:c4:ab:
c6:b7:70:65:58:9c:db:6b:81:39:78:ec:43:b0:e5:c3:ba:83:
b6:f1:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:52:54 2025 by rpki-client