Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa
File: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (raw, json)
Hash identifier: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=
Subject key identifier: F6:4E:90:BF:A4:35:21:CC:A5:CB:80:53:BB:D4:D9:38:25:29:53:12
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D633CFA6479812AB3224439E39F2D5
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215493
IP address blocks: 2a0d:f407:1006::/48 maxlen: 48
2a0d:f407:1017::/48 maxlen: 48
2a0d:f407:1025::/48 maxlen: 48
2a0d:f407:1033::/48 maxlen: 48
2a0d:f407:1049::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:33:cf:a6:47:98:12:ab:32:24:43:9e:39:f2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f64e90bfa43521cca5cb8053bbd4d93825295312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:e3:5f:f7:6b:eb:bf:f4:7d:2e:af:62:53:
2f:69:4f:e4:bc:b9:eb:3e:8e:17:af:47:32:d7:96:
09:ab:0f:10:1b:17:10:2d:08:c9:4b:df:81:f1:f8:
e9:9f:63:91:18:7e:61:40:7d:c0:6d:a0:e5:49:e6:
6b:f4:4b:02:ef:3c:3d:dd:75:9f:79:16:b4:3c:ea:
55:96:cf:65:ae:25:24:de:b1:44:bc:ce:d5:1b:98:
98:93:bc:af:10:42:99:89:28:1e:cc:f7:79:2e:e5:
9d:46:10:d4:4c:b2:a5:ae:a6:3e:e9:04:b9:2a:f6:
f8:e6:94:67:3f:24:49:c9:02:0b:26:ae:04:5c:ab:
7a:ea:11:2e:2b:fc:1d:f8:da:81:65:c2:09:f5:3a:
94:ea:03:ba:58:6e:44:bb:64:a8:1b:bd:82:f9:c8:
08:1a:f9:38:3c:34:22:c2:12:6e:8c:0a:80:86:19:
80:b1:ec:33:88:64:ba:ac:1e:61:9f:22:10:9f:8a:
97:06:99:53:9b:ff:e2:70:aa:3c:b6:e0:22:ac:1d:
5e:0c:e7:25:6b:3a:42:1b:09:f2:39:62:73:1c:22:
91:c3:c4:3a:48:06:c2:db:7e:31:3f:fe:ca:2d:47:
3e:ba:c1:2c:ba:1b:9a:07:f9:4a:d5:b0:e8:fa:74:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4E:90:BF:A4:35:21:CC:A5:CB:80:53:BB:D4:D9:38:25:29:53:12
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:1006::/48
2a0d:f407:1017::/48
2a0d:f407:1025::/48
2a0d:f407:1033::/48
2a0d:f407:1049::/48
Signature Algorithm: sha256WithRSAEncryption
3d:59:81:b2:c8:f1:72:81:8e:ba:af:96:74:d5:a1:37:c6:63:
b3:9e:ee:2b:5c:af:3c:1e:5c:72:d0:be:72:98:09:cf:07:22:
c2:50:47:e2:20:28:54:83:99:ca:87:40:5f:0a:e0:7d:b6:b2:
08:51:37:8c:80:12:48:8d:c9:c6:4b:f0:c2:18:af:14:37:59:
8b:11:ee:38:b5:b1:4b:78:99:c4:48:27:76:ec:23:03:2e:5a:
b7:27:1f:18:83:35:f0:2b:8d:53:ae:4b:62:af:6c:10:f5:61:
17:75:21:88:c6:b0:3f:d2:c1:8e:94:18:13:f9:ed:58:e8:88:
8f:a8:98:18:59:92:18:77:b6:9a:65:f5:0d:49:38:46:b4:7e:
0e:e5:f1:66:ec:3f:c4:8e:4b:b3:08:51:d2:ca:fe:9e:28:25:
80:d1:42:61:13:67:97:46:5b:e1:45:24:0a:d2:b7:c3:e8:2b:
e6:dc:e2:6d:d9:54:a5:b1:6f:79:0f:d7:a2:e5:16:90:34:ff:
b5:b5:56:8f:c9:3e:cc:aa:df:66:51:dc:27:77:6a:44:eb:40:
dc:df:ad:5b:19:46:15:c6:61:a6:1c:65:c4:9d:cf:b3:46:d6:
d4:5b:55:d9:07:75:68:5c:86:69:55:3d:2b:a9:90:db:12:55:
b1:c7:a5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:30:57 2025 by rpki-client