Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/jmdaY3jB9wAV5m6viUDXvKemdCo.roa
File: jmdaY3jB9wAV5m6viUDXvKemdCo.roa (raw, json)
Hash identifier: KjRHU7c80LizE/Q/1z0ur21E4KmnhATUY3o4TcjtpmY=
Subject key identifier: 8E:67:5A:63:78:C1:F7:00:15:E6:6E:AF:89:40:D7:BC:A7:A6:74:2A
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 019489B23A7999E6FECBDB729A78E8349219
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/jmdaY3jB9wAV5m6viUDXvKemdCo.roa
Signing time: Tue 21 Jan 2025 16:29:06 +0000
ROA not before: Tue 21 Jan 2025 16:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 2a10:ed40::/48 maxlen: 48
2a10:ed40:1::/48 maxlen: 48
2a10:ed40:2::/48 maxlen: 48
2a10:ed40:3::/48 maxlen: 48
2a10:ed40:4::/48 maxlen: 48
2a10:ed40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:b2:3a:79:99:e6:fe:cb:db:72:9a:78:e8:34:92:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Jan 21 16:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e675a6378c1f70015e66eaf8940d7bca7a6742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:fe:40:d2:bb:15:f0:83:bb:1c:78:bf:a6:
89:0a:62:8d:3e:e1:dd:b5:37:44:16:52:4d:38:04:
48:c3:00:f9:42:29:72:f3:6c:c2:1c:70:44:60:93:
6c:7d:92:a6:c4:26:8d:86:49:a2:97:51:ee:ad:c7:
ea:9b:71:eb:01:f9:dc:06:fe:6b:83:c8:d6:70:ab:
5b:28:ab:67:1c:d8:41:f6:9b:4a:34:ba:a9:b7:5f:
24:5b:33:f3:b1:1e:3c:f1:9a:fc:71:dc:36:82:4f:
2d:cb:28:9d:cf:37:22:1e:e7:f2:92:a8:8b:53:cd:
6f:cf:63:89:ce:be:24:c0:4c:9b:26:69:5e:f5:4f:
7d:89:8d:bd:18:47:c5:82:f6:a3:0d:75:cb:1b:7b:
44:26:e3:7d:ca:86:33:99:8f:c2:04:ad:3a:de:92:
69:0c:a4:55:2e:38:aa:95:05:4f:4e:c1:5e:af:3e:
85:44:4d:cd:78:d1:de:24:ba:fc:15:c9:4b:d7:ec:
cd:b1:ea:b0:92:7b:c7:c1:e9:ec:4c:41:7c:35:3e:
9d:6d:af:7d:13:5c:d2:85:72:37:b1:b6:c5:a2:f6:
3a:9b:94:96:2a:42:6c:4d:72:45:63:dd:5a:76:92:
e9:31:21:5c:89:33:f9:b9:c3:97:88:69:4c:62:70:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:67:5A:63:78:C1:F7:00:15:E6:6E:AF:89:40:D7:BC:A7:A6:74:2A
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/jmdaY3jB9wAV5m6viUDXvKemdCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ed40::-2a10:ed40:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:aa:06:7b:b4:a3:29:a6:0c:e7:a2:c2:43:0a:21:f9:a8:e5:
93:8f:f7:44:8c:ac:f0:be:88:dd:e4:d9:12:b0:74:1e:40:73:
d0:30:1b:5b:58:ac:61:8a:74:51:db:89:07:3e:c6:f2:e2:4c:
d7:33:ec:9a:21:cb:b3:8e:02:f5:17:fd:84:46:7e:b4:05:0b:
a7:d0:5e:a8:bc:f6:44:5a:4d:61:ce:79:06:ad:3c:4c:4c:30:
9f:e2:36:87:1f:0c:d0:3a:58:2d:aa:69:b5:9f:ef:c8:a0:cd:
aa:24:24:c5:4f:ce:f4:83:fd:3a:98:b8:b1:1d:46:7c:91:35:
f2:d7:b3:30:6a:ea:d7:88:c8:a0:b4:5a:7b:0f:89:c3:cb:2f:
f2:5e:10:9c:ef:cb:b6:24:e8:5c:28:c5:8e:17:2c:3e:1f:0d:
df:8e:c1:90:d8:bd:51:48:33:46:75:40:8b:11:ea:80:13:8b:
74:36:56:ef:c0:23:9d:fd:7f:b9:fe:8f:46:6d:1d:ad:e1:63:
0b:35:98:0d:83:8c:04:a4:74:67:81:2f:92:30:75:b7:56:53:
60:84:b0:dd:0b:7a:00:91:5c:69:f5:7c:a2:b5:72:c3:fb:9e:
5e:ae:74:67:66:47:63:07:6f:92:d4:bd:73:1b:f4:89:94:da:
3a:2b:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:17:21 2025 by rpki-client