Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4ea1dMd4wRgTBo1jIMebmZZJLM4.roa
File: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (raw, json)
Hash identifier: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=
Subject key identifier: E1:E6:B5:74:C7:78:C1:18:13:06:8D:63:20:C7:9B:99:96:49:2C:CE
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 0194244568198E881B091AD9CA6239681F4B
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4ea1dMd4wRgTBo1jIMebmZZJLM4.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202729
IP address blocks: 2001:67c:a6c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:68:19:8e:88:1b:09:1a:d9:ca:62:39:68:1f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e6b574c778c11813068d6320c79b9996492cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:48:dc:eb:89:a7:2b:4e:ee:4f:57:e5:05:
27:f8:fc:9f:d1:ca:51:1b:c8:5b:01:73:42:76:4b:
c2:49:67:6b:c2:9a:ff:6d:7f:3b:95:f2:68:e7:59:
96:29:71:6f:cb:73:89:84:e1:dc:a6:6d:df:0d:34:
b4:21:e1:9b:47:8f:b5:35:b5:2f:ed:92:b0:95:82:
b3:31:f9:6b:96:5c:c6:fb:6d:53:f2:60:57:77:66:
8f:db:eb:c3:38:ba:e8:d1:62:cd:c2:1b:c8:46:f9:
ed:11:be:d2:ae:b8:e5:e0:ca:8c:91:b3:96:45:95:
f0:69:e4:9f:12:7c:df:50:2b:27:15:0c:72:ce:4b:
90:b6:71:e4:1b:7d:29:86:9c:bc:19:99:90:e8:8f:
9e:f5:8c:f0:0e:4c:12:9c:9e:88:e2:3a:02:7d:ea:
01:08:e7:8a:12:59:52:84:69:c7:0b:7d:85:d3:eb:
df:2c:7e:66:e3:35:97:59:89:52:a3:66:28:17:c2:
ac:39:1a:7e:19:cf:d8:33:b4:46:9c:a2:7f:bd:14:
f1:69:9c:29:c9:16:97:8d:a7:54:b6:9e:67:46:34:
b7:7d:ab:9e:be:6b:9f:cb:dc:94:09:26:2e:94:da:
47:ce:7e:12:a3:47:0b:81:de:2b:0f:37:d4:60:66:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:B5:74:C7:78:C1:18:13:06:8D:63:20:C7:9B:99:96:49:2C:CE
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4ea1dMd4wRgTBo1jIMebmZZJLM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a6c::/48
Signature Algorithm: sha256WithRSAEncryption
67:9b:37:13:30:3e:62:91:b3:1d:ba:db:4a:57:8c:66:c9:5a:
fc:22:b9:b4:1d:9a:ff:81:2f:fa:76:64:9e:c8:b2:4c:1c:25:
49:31:97:fd:ed:25:72:65:f5:ab:a4:f1:db:ee:3a:31:69:a5:
98:e1:d2:78:fb:d8:67:df:87:82:5d:89:37:f2:7b:08:28:16:
e2:c4:2c:d4:f4:d0:94:30:9a:f7:7e:6a:ac:3a:5a:c5:24:9d:
7f:87:91:88:e9:c2:87:80:2e:38:b7:a9:df:7a:f9:a6:1f:79:
41:52:9f:44:9a:d7:dd:48:e3:b8:ae:af:7b:ba:88:af:b2:65:
36:b6:86:c2:79:38:c1:b1:25:c6:85:42:a6:78:ba:21:a4:70:
3a:66:db:53:89:c3:cb:03:03:d2:1c:21:22:fd:da:e6:65:03:
7d:14:79:95:39:9a:13:b4:08:8b:a2:fb:d5:10:ee:a9:e7:db:
e3:bf:20:80:ef:f4:25:ca:e1:b1:79:42:b9:c3:3f:4e:d0:15:
c9:12:99:aa:92:c7:00:fc:86:b5:3a:de:6e:a9:a2:8d:0b:2b:
cc:70:4b:38:3e:9b:25:47:35:8a:33:69:32:d5:06:dc:2e:07:
17:60:f4:2a:4b:24:94:3a:6c:22:57:ce:c0:2d:e0:bd:f6:a9:
98:97:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:40 2025 by rpki-client