Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hi43TFpwTUa1bPTZUPSrgm6ZR0Y.roa
File: hi43TFpwTUa1bPTZUPSrgm6ZR0Y.roa (raw, json)
Hash identifier: uyoQYVM2fn2Ho94tHrlyaVhbjVElvndeIP7l0BHoDz0=
Subject key identifier: 86:2E:37:4C:5A:70:4D:46:B5:6C:F4:D9:50:F4:AB:82:6E:99:47:46
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE81F8E89B834ED0A84A03DB34C46
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hi43TFpwTUa1bPTZUPSrgm6ZR0Y.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 2a0f:5707:ab30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e8:1f:8e:89:b8:34:ed:0a:84:a0:3d:b3:4c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=862e374c5a704d46b56cf4d950f4ab826e994746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:a6:38:7d:59:b5:d7:46:6f:ad:a8:12:e5:
b5:8a:c4:c4:21:c5:c3:ed:7f:68:d4:2a:65:a9:75:
d4:d0:11:c9:44:dd:81:5f:6f:56:c1:a6:50:32:cb:
30:4b:b8:7d:8e:46:4b:89:77:21:50:8e:41:9f:ae:
8a:ab:f4:21:d5:ff:44:cd:d4:73:60:21:82:d0:53:
09:81:5f:f7:17:64:84:9c:c0:96:31:22:65:db:28:
66:62:54:84:66:7d:e4:8b:53:34:6c:ad:d9:bf:af:
af:df:48:d2:94:95:13:19:fe:a2:65:54:11:bd:09:
6f:35:18:f9:46:8e:ab:89:df:bb:d2:4c:00:c3:a5:
2e:cd:9e:7f:bb:56:68:43:cb:eb:ea:6b:59:05:a5:
8f:5f:7a:c4:a2:07:fd:bf:61:9c:de:01:0d:5a:ee:
18:b6:ba:81:be:8a:1b:bb:72:72:ad:c2:f0:06:64:
76:db:6b:23:c5:bb:54:a9:28:d1:fe:30:1a:cb:31:
4e:22:bb:cc:43:d0:3d:a1:23:b6:86:fb:94:21:9c:
6a:08:bc:fd:ed:39:c7:f3:69:bf:fe:82:2e:dd:6f:
2a:e6:13:c3:94:9c:97:3b:69:ef:bd:fa:0e:48:e1:
6e:3b:2b:b0:78:52:21:c4:07:65:69:4d:73:d6:00:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:37:4C:5A:70:4D:46:B5:6C:F4:D9:50:F4:AB:82:6E:99:47:46
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hi43TFpwTUa1bPTZUPSrgm6ZR0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ab30::/44
Signature Algorithm: sha256WithRSAEncryption
b4:f9:4f:30:61:bb:98:64:fc:e0:62:68:5a:48:20:10:ce:b5:
57:6d:45:16:6a:95:f4:1e:af:5b:cd:44:46:b6:37:6e:0a:37:
b0:38:ad:95:30:e3:6d:5a:16:da:8c:23:0a:46:d1:7b:19:1c:
1b:ca:52:98:93:f3:49:60:49:d0:85:1a:9f:82:21:4f:a5:cb:
21:d4:cc:20:89:ee:ec:a4:99:34:a6:03:80:2b:35:0b:60:8a:
e2:61:29:70:9e:df:d7:98:a1:81:26:fe:b0:05:0e:de:ea:a0:
2c:96:8f:84:f7:76:bb:ee:ef:a6:b0:5c:79:c4:50:23:0f:a9:
8d:67:ab:a3:3a:41:05:4d:16:e6:60:86:ea:11:db:ab:2c:2d:
fe:5f:8d:40:5d:c4:38:e0:e9:12:4e:6b:05:13:48:34:1c:ec:
9d:ef:9d:96:a0:81:76:c4:88:58:ee:e6:83:bc:94:e8:46:e2:
52:bc:b6:77:f7:4b:dc:c9:c4:a2:26:88:bb:d4:a3:61:b5:c9:
8b:3c:9f:73:86:41:6e:a1:e3:44:b6:c8:8e:0c:70:3a:4f:53:
8b:9d:6f:21:e6:35:35:bb:65:3f:3b:e7:7a:c2:0f:64:f1:fb:
24:d6:fa:6c:0c:ea:df:b3:a8:cd:5b:5d:3a:66:30:8e:00:7b:
75:28:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:43 2025 by rpki-client