Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/aZqrjg1nptDw4BL6wn0FWmNJwvo.roa
File: aZqrjg1nptDw4BL6wn0FWmNJwvo.roa (raw, json)
Hash identifier: 6z4ObLCuZw7zfOx69ROq9FyPUpV9T3VmKmi0WDHpUOc=
Subject key identifier: 69:9A:AB:8E:0D:67:A6:D0:F0:E0:12:FA:C2:7D:05:5A:63:49:C2:FA
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B5C981FF59A289474D388E9B5237D
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/aZqrjg1nptDw4BL6wn0FWmNJwvo.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198127
IP address blocks: 2a00:e200:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5c:98:1f:f5:9a:28:94:74:d3:88:e9:b5:23:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699aab8e0d67a6d0f0e012fac27d055a6349c2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:e9:f6:9f:0b:dc:77:d0:0e:09:6d:a4:0e:
22:1d:1d:f2:7c:ef:d7:58:e7:77:57:be:e7:10:24:
1a:e9:03:86:3a:84:56:ec:12:1a:2e:ff:58:86:db:
e8:92:7f:73:32:45:54:6b:40:b1:98:21:ce:b6:84:
72:92:ff:6b:87:65:2e:9c:6a:f7:2d:81:e9:6c:01:
8e:f4:57:b0:f9:86:2b:49:f4:53:2f:3d:5e:12:0e:
19:ce:ef:d3:3a:3a:e2:c2:96:79:f1:67:1d:2e:4b:
1d:28:65:8f:25:33:a8:57:85:ac:55:71:72:51:20:
e8:11:a1:3f:17:2e:74:d1:47:a2:7a:07:e1:ae:af:
ea:1c:4c:4b:dd:02:85:63:b1:8e:33:bf:a8:af:dc:
c4:d1:5c:e2:b0:2e:31:1e:38:1f:35:32:58:de:46:
df:04:5e:1f:73:98:70:d5:9c:da:21:ff:b2:35:7b:
bf:c8:ce:d6:6a:1a:4d:e5:14:71:d3:3a:aa:42:01:
50:5c:2e:7e:80:29:8c:63:da:de:38:46:db:95:eb:
2d:a4:81:a0:97:2e:83:b4:57:c8:3c:e7:8f:7e:08:
1e:c7:cf:ad:31:a2:d1:a0:40:be:19:30:15:ce:78:
dd:87:0a:e7:91:dc:ed:ea:f3:b0:4c:4f:00:a3:22:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:AB:8E:0D:67:A6:D0:F0:E0:12:FA:C2:7D:05:5A:63:49:C2:FA
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/aZqrjg1nptDw4BL6wn0FWmNJwvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:e200:104::/48
Signature Algorithm: sha256WithRSAEncryption
4f:4d:e7:82:13:d5:72:36:e1:4e:b2:3c:0d:34:98:de:0e:68:
e6:1d:c7:aa:12:1c:d7:50:7d:d5:23:19:01:12:8d:40:79:a3:
8c:e6:5c:7e:21:f2:ea:50:9b:33:81:57:70:0e:95:76:61:d0:
c5:d9:7b:a2:b8:b4:5a:9e:d7:40:44:5c:77:56:4e:7a:30:26:
31:df:75:6b:af:51:50:10:67:bb:91:8a:48:09:01:97:23:e0:
38:6b:ac:2d:65:f1:c3:4d:0a:8a:1a:09:26:b8:d0:4c:42:46:
b6:10:0c:6c:2b:f6:25:e4:7d:55:99:fc:90:11:94:00:93:79:
bc:1a:1f:5e:3b:bb:1a:82:f7:61:0b:1b:4a:df:5b:0f:e9:cd:
43:1d:8e:73:f4:ca:dd:fb:c9:64:d8:aa:ac:b8:5f:5a:24:db:
af:12:58:d6:a6:31:95:05:c7:fb:4a:7c:d1:a8:a6:41:76:42:
32:de:b1:87:a2:02:02:bc:db:53:e5:7c:f5:af:82:df:97:34:
b5:d9:70:4e:69:9f:c4:41:f0:98:71:30:45:4a:86:41:f6:e3:
f2:93:3e:43:5f:b1:43:c0:bc:69:00:8d:5e:39:8a:df:92:10:
e5:9b:a1:41:c9:db:cc:11:2f:3c:0b:5b:28:5e:9d:6a:c4:0c:
9d:d2:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:01:17 2025 by rpki-client