Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa
File: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (raw, json)
Hash identifier: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=
Subject key identifier: E9:72:44:F2:B9:58:A1:6B:6B:87:66:9D:DC:AB:E6:ED:0F:F2:E4:24
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 0195FB85936CF7EFE7403DC139BD3BB94DAD
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa
Signing time: Thu 03 Apr 2025 11:59:49 +0000
ROA not before: Thu 03 Apr 2025 11:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205574
IP address blocks: 2001:67c:1890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:85:93:6c:f7:ef:e7:40:3d:c1:39:bd:3b:b9:4d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Apr 3 11:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e97244f2b958a16b6b87669ddcabe6ed0ff2e424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:9e:1a:ce:1f:9f:de:b1:d9:9d:ce:d0:0f:
72:44:21:17:9e:f6:88:02:ee:8d:22:9d:72:80:45:
ea:3b:86:85:0d:ec:17:95:d5:f4:31:39:d8:b8:ee:
8b:ae:10:29:b9:7c:60:37:7d:ae:3d:9b:1a:9b:a6:
99:93:2a:b1:6b:cb:9f:99:77:0a:0d:1c:20:ed:e8:
bd:68:92:7f:5b:28:b9:85:c4:8a:3d:89:6b:eb:15:
cd:58:78:a9:79:e2:12:67:6a:d9:41:94:f6:e8:b0:
a6:f1:46:b3:1c:af:7b:c1:67:08:83:6f:92:34:8e:
a1:45:3d:b9:25:b6:65:df:5a:06:cc:5d:4d:11:cb:
8f:0e:da:7f:91:09:dd:34:0d:1d:f1:f5:3b:67:6d:
a4:d4:e5:9b:d4:23:04:58:33:50:da:42:bb:60:7c:
d6:ec:36:53:60:70:10:fa:7f:40:55:42:98:76:35:
5e:92:b6:83:5c:63:18:8d:27:62:6c:8f:2c:cf:f6:
70:74:e1:b3:48:18:52:99:cc:6f:19:04:6b:c8:03:
47:db:98:95:05:41:89:d3:5a:d8:f6:8a:10:1d:78:
75:c0:41:c9:d7:ce:17:bc:8c:24:17:83:47:76:58:
5c:0e:27:8d:d8:c3:31:33:4c:ed:27:ba:63:90:f8:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:44:F2:B9:58:A1:6B:6B:87:66:9D:DC:AB:E6:ED:0F:F2:E4:24
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1890::/48
Signature Algorithm: sha256WithRSAEncryption
51:d9:9f:4e:a3:73:86:c2:74:7b:d9:47:05:86:e0:97:93:25:
a0:7a:d8:1d:46:07:60:24:e6:d7:ec:1f:5c:3f:06:54:b4:b4:
58:8f:11:e1:ae:0e:4b:16:b2:e6:01:4d:25:f9:08:34:c1:0b:
ca:80:e4:4f:e6:f4:17:1e:4a:d6:45:3a:d4:ab:d5:74:ad:af:
e1:6b:1c:cf:ad:4a:97:9f:d4:9b:34:ac:d3:cd:11:17:57:ba:
88:e2:84:48:ca:11:0d:ad:c8:ab:12:6c:1a:5d:c4:ef:d5:fb:
ac:09:4e:5d:a5:fd:66:a3:53:12:fe:27:96:cc:93:ab:c3:fe:
ec:d7:b0:e1:49:ae:4c:0d:ae:df:1d:3d:8c:56:b1:5e:e4:c1:
7d:3d:e4:a1:62:9a:9e:4b:55:cb:95:e6:4e:c9:c9:0b:2d:c8:
08:f5:ef:dc:1b:54:34:e6:94:68:01:69:87:84:4e:62:2b:ff:
3e:fb:9b:ea:3e:73:2d:4d:28:17:c1:96:0d:44:eb:af:e4:1f:
40:b1:a2:09:6c:f8:70:ab:71:20:6c:de:54:a4:ce:29:7f:f9:
4c:36:ca:99:a2:5f:3d:71:ba:63:dc:1a:ff:5e:1b:55:01:7a:
ae:3b:b5:f7:1e:9c:ba:c3:c5:52:cc:b0:bd:2e:8a:e4:d4:a2:
c5:40:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:55 2025 by rpki-client