Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/g8c9p1nZ48vYDz_bXsYMpE-V1Fs.roa
File: g8c9p1nZ48vYDz_bXsYMpE-V1Fs.roa (raw, json)
Hash identifier: OFJ+XwENBywfs1ga4y65EMlSz7J1svG9/v9hqXVZeA4=
Subject key identifier: 83:C7:3D:A7:59:D9:E3:CB:D8:0F:3F:DB:5E:C6:0C:A4:4F:95:D4:5B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B38F1EAF365AE23E2E26FE28DE4F57
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/g8c9p1nZ48vYDz_bXsYMpE-V1Fs.roa
Signing time: Thu 02 Jan 2025 15:47:46 +0000
ROA not before: Thu 02 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6233
IP address blocks: 2a07:e340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:8f:1e:af:36:5a:e2:3e:2e:26:fe:28:de:4f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83c73da759d9e3cbd80f3fdb5ec60ca44f95d45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:0e:0a:57:49:86:e6:a0:8a:3d:de:46:b4:
73:7e:20:2e:92:ed:73:eb:cf:91:07:46:95:8a:71:
a7:9d:2b:a7:3b:65:ef:ed:0e:57:55:1d:53:3f:48:
06:01:60:18:89:34:14:e5:2a:9a:94:e6:d8:da:00:
d2:6d:b2:cf:51:ba:bb:79:58:eb:20:3d:22:07:3e:
ad:16:c8:9b:d8:df:71:b7:57:b2:9e:5b:9b:80:11:
6f:70:5f:d4:df:69:80:4b:af:e2:c9:5c:5f:c8:e9:
3e:bb:84:3e:49:12:38:c6:dd:9b:8a:a7:3d:04:e4:
2e:14:82:d1:ab:43:f4:b8:74:73:8c:d6:1a:b6:ce:
5f:b9:f6:aa:fa:21:cf:53:50:40:5e:c5:0e:4b:32:
a5:91:e7:c0:6d:c1:90:19:da:a9:33:e2:85:83:e3:
50:40:9a:89:18:97:d9:ad:af:62:fa:be:78:a8:f9:
17:82:b1:3b:81:8a:6e:2c:83:c4:8c:81:ac:35:b2:
dd:75:ae:47:b5:e4:54:06:c6:70:2a:df:9c:be:00:
24:83:8f:d2:c0:0e:48:4e:db:4f:24:ee:99:ae:a9:
d8:d0:36:33:9d:64:19:08:7b:45:61:73:cc:72:6c:
df:7b:33:45:ca:ec:ea:ba:aa:ac:5b:53:e0:59:ac:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:3D:A7:59:D9:E3:CB:D8:0F:3F:DB:5E:C6:0C:A4:4F:95:D4:5B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/g8c9p1nZ48vYDz_bXsYMpE-V1Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e340::/32
Signature Algorithm: sha256WithRSAEncryption
aa:00:b4:52:4b:27:21:67:19:86:5c:b4:f6:3f:08:f0:69:a5:
10:81:68:81:4d:17:6d:8a:cd:08:9a:78:c7:7a:ad:95:92:79:
c2:91:85:d1:67:c0:17:ec:f5:3d:c8:88:88:0d:94:75:98:c0:
62:53:c6:8e:85:c9:cd:b3:ce:8c:be:45:c4:e2:49:ee:1c:29:
50:29:3a:1a:68:10:24:f2:22:a0:d3:ee:04:bf:fd:1c:4b:96:
d4:09:17:7c:2f:34:4b:93:41:f7:91:63:3c:10:a6:33:5e:ea:
42:96:bd:ec:21:52:bb:f3:f7:9f:de:05:7c:e7:78:14:d9:f1:
84:c4:93:cd:cc:10:38:9b:66:6c:d4:18:0b:31:96:84:c8:11:
95:fa:49:d7:f4:0b:bd:b0:54:6e:ff:75:62:79:a3:15:7d:51:
c5:79:da:d3:44:72:2e:61:bb:e5:6b:1e:14:f6:1f:33:ad:de:
cf:8f:fb:2d:b3:04:36:a7:df:64:03:21:e0:56:24:ac:6b:93:
9c:0a:a9:48:4b:4b:e0:6f:cf:a9:c2:e2:c9:47:51:c6:62:21:
c3:56:ac:87:01:0a:37:d9:86:7e:f9:5c:0c:72:ad:b8:01:fd:
e1:db:c5:f5:9d:62:59:0d:18:b5:22:45:38:f3:c6:47:ab:cf:
00:01:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:52:57 2025 by rpki-client