Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/OnJJI-UcryEC3I5kYOeKYPOGl7A.roa
File: OnJJI-UcryEC3I5kYOeKYPOGl7A.roa (raw, json)
Hash identifier: j0CqJNVWt12tK61vQ9wyqHc91rd5hkC5twzuHb3o6Z4=
Subject key identifier: 3A:72:49:23:E5:1C:AF:21:02:DC:8E:64:60:E7:8A:60:F3:86:97:B0
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE0CC8D2389EA32D5EDF956DA688E
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/OnJJI-UcryEC3I5kYOeKYPOGl7A.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43959
IP address blocks: 2a0f:5701:fe11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e0:cc:8d:23:89:ea:32:d5:ed:f9:56:da:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a724923e51caf2102dc8e6460e78a60f38697b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:81:70:30:62:48:ed:25:10:96:cd:ff:17:
d8:4d:84:0b:13:83:62:01:8b:25:a3:10:03:bd:c9:
65:5e:57:c4:56:34:64:60:af:8b:d4:ee:57:f4:84:
b0:d9:5d:d8:9d:0b:14:d8:0d:e2:17:46:a9:f2:ec:
43:3a:1e:08:ba:1c:d1:1b:59:93:d0:19:f4:74:8a:
22:cf:2b:37:d5:e4:60:53:b4:a2:1a:ff:8c:83:b5:
f3:b7:24:a0:aa:1c:15:39:df:92:18:82:45:22:39:
07:7c:46:3a:70:c9:1e:ad:f2:cf:e7:95:fd:db:1f:
69:cd:1b:7b:88:67:bb:89:cb:1c:bc:66:17:76:ee:
c3:fa:0f:89:62:32:96:99:f4:9b:bf:9a:5f:c4:cd:
2d:fb:cd:36:b0:81:6a:fd:77:a2:cb:90:e3:25:df:
ec:f1:13:5b:28:8f:ac:ae:52:a6:87:bc:8d:8c:af:
18:8f:a6:2b:a6:ed:92:eb:c9:7e:11:e6:09:41:64:
ef:32:5b:a2:7c:5c:df:be:46:e7:6b:ee:23:66:70:
46:4e:5d:2f:8f:be:94:f4:bf:c8:76:b0:b0:2d:39:
2e:02:f3:77:4d:63:b8:44:01:ed:09:13:06:51:fb:
b8:83:b0:cc:76:ec:37:e2:9c:72:06:3b:47:17:13:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:72:49:23:E5:1C:AF:21:02:DC:8E:64:60:E7:8A:60:F3:86:97:B0
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/OnJJI-UcryEC3I5kYOeKYPOGl7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5701:fe11::/48
Signature Algorithm: sha256WithRSAEncryption
43:78:a4:84:31:05:fe:bd:18:36:13:8b:25:c0:42:24:21:6e:
74:f7:22:59:b1:96:96:a1:a1:7d:11:1c:91:6c:58:a8:42:50:
b1:6c:88:56:db:4b:b2:71:73:91:cc:d1:b8:db:a3:22:0e:83:
35:6f:a2:75:24:82:b7:81:d1:ba:5f:87:49:c6:94:29:e0:54:
5b:54:4e:6a:a3:3d:19:19:e3:0e:c8:b6:37:b7:46:c8:92:9a:
9b:a8:a4:bd:d9:2e:8c:79:58:aa:76:b1:ee:85:b0:07:3c:4d:
39:d1:e8:ff:1a:ae:5a:5e:61:2d:34:23:b6:00:95:57:c8:c2:
2e:65:ac:52:c1:0d:c7:36:fc:77:67:9f:d6:b7:05:b2:60:71:
fc:7a:a0:50:93:8e:68:e4:f4:d6:e3:2c:ce:e1:ad:fa:aa:4e:
a2:d4:80:fe:e0:7d:53:62:9d:5a:86:14:b6:07:17:1c:17:36:
7e:ec:dc:02:6d:e3:8f:4b:83:a3:59:cf:26:03:22:31:4c:19:
cc:f3:b7:09:2c:ce:2d:42:84:5b:47:e7:48:78:67:0a:0e:5f:
9a:30:63:37:07:d5:15:f3:c0:1a:f2:cd:4b:34:d6:dc:45:b4:
f3:e5:bf:51:1d:f6:50:2b:d1:7d:0f:d4:bf:d6:b0:b2:fe:d3:
27:82:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:37 2025 by rpki-client