Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/FhEZUb-g8tz0dmvk1v5GsrCRk84.roa
File: FhEZUb-g8tz0dmvk1v5GsrCRk84.roa (raw, json)
Hash identifier: HgfA9zucPguD1AxEbybavmC0DMPH66TlawClBCpe9FE=
Subject key identifier: 16:11:19:51:BF:A0:F2:DC:F4:76:6B:E4:D6:FE:46:B2:B0:91:93:CE
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BF3D85DF8427B2F3C004484AE009B
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/FhEZUb-g8tz0dmvk1v5GsrCRk84.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212049
IP address blocks: 2a0f:5707:aaf0::/44 maxlen: 44
2a0f:5707:aafa::/48 maxlen: 48
2a0f:5707:aaff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f3:d8:5d:f8:42:7b:2f:3c:00:44:84:ae:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16111951bfa0f2dcf4766be4d6fe46b2b09193ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:f4:e5:b2:fd:49:48:7f:e1:85:28:56:bd:
12:55:33:3c:4c:9d:46:8d:4b:45:2c:75:ab:ea:56:
0b:79:e9:82:be:6e:51:55:bf:71:1d:79:45:33:e8:
5c:44:fa:af:d3:b4:8e:f6:f7:44:a5:5c:c4:46:20:
6a:b1:7d:1a:d2:a0:71:64:aa:78:51:cd:ad:41:c5:
be:6e:16:b6:f8:f2:ea:85:a7:55:3c:e6:ee:5b:d2:
fa:75:ff:d8:d0:ac:a2:c2:17:e5:98:21:8e:10:2d:
d3:44:61:d5:77:a1:e9:6b:fb:98:0a:ce:1c:25:ea:
77:6c:03:fe:9c:38:ad:5a:b4:17:b4:c9:7e:a7:7f:
63:81:5f:ea:54:74:ea:35:48:82:b2:36:18:95:8e:
66:38:d1:dc:30:07:9b:00:16:ca:5d:aa:df:a0:99:
43:bf:d0:eb:4d:8e:57:83:a9:0e:83:34:75:d6:fc:
92:7d:a4:f1:c8:ed:e0:68:3f:bc:89:ca:78:eb:66:
6e:39:f1:5e:a6:53:1b:0a:52:49:d9:88:72:d7:fa:
96:49:2f:d3:01:66:8d:16:b2:1e:fe:3e:a7:f0:fa:
4c:9e:26:bf:56:5d:85:35:13:d6:ca:a3:dc:46:8d:
ef:34:7e:65:f2:d3:1e:37:37:df:8b:8a:be:06:96:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:11:19:51:BF:A0:F2:DC:F4:76:6B:E4:D6:FE:46:B2:B0:91:93:CE
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/FhEZUb-g8tz0dmvk1v5GsrCRk84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aaf0::/44
Signature Algorithm: sha256WithRSAEncryption
2c:28:9e:a3:a8:de:2b:93:a1:5f:fb:52:22:72:4b:c4:c4:fc:
d5:2e:39:82:92:5e:2a:39:51:6f:f2:c1:b9:b9:e4:5b:35:3b:
d6:c2:a7:56:01:ae:5a:b9:ed:2c:61:ee:79:49:0b:98:d0:6d:
bb:63:80:db:f4:9b:dc:33:58:8b:55:3a:e6:8e:53:82:92:85:
25:87:32:73:75:11:57:0a:c2:b5:f3:ae:23:9c:fc:8e:21:b5:
ff:c9:15:20:70:24:ea:2c:e4:e0:63:4e:4b:f7:b1:b4:b5:55:
19:52:ec:8e:f0:6a:3c:0e:08:f6:34:3c:ab:91:c8:88:d6:0c:
d5:56:b1:9f:bf:23:22:ab:11:ae:c1:fb:ff:a6:70:a9:38:68:
37:d3:6f:16:f4:d8:92:da:9b:34:24:08:ba:d3:af:50:b7:f7:
41:04:37:53:2a:b8:71:d2:12:1c:10:7a:a0:09:c0:c2:36:80:
ad:80:19:31:4f:07:e6:1a:f5:b3:a3:e8:22:fa:b8:f5:ae:1f:
36:e4:33:3d:75:a1:f5:3d:d1:6a:49:ef:e6:7e:27:fd:f1:8f:
04:16:f1:e6:0c:dc:36:ce:1b:f7:b9:cd:6a:9f:86:95:95:b3:
eb:1c:a9:2b:9c:c2:af:88:90:cc:5b:2a:b0:49:e4:68:ac:4e:
2b:b6:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:57:57 2025 by rpki-client