Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/UrlGR9v18F5T4YYElfr8yqGscS0.roa
File: UrlGR9v18F5T4YYElfr8yqGscS0.roa (raw, json)
Hash identifier: fj1TXr5g11+IfyDk1z4S0+oWVp/JX8PPHR9S29gA7PE=
Subject key identifier: 52:B9:46:47:DB:F5:F0:5E:53:E1:86:04:95:FA:FC:CA:A1:AC:71:2D
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 019420682C81CE77D9FF913BD8B537663D0A
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/UrlGR9v18F5T4YYElfr8yqGscS0.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15542
IP address blocks: 2001:67c:2e64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2c:81:ce:77:d9:ff:91:3b:d8:b5:37:66:3d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52b94647dbf5f05e53e1860495fafccaa1ac712d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:6f:82:3b:ff:0b:d7:41:2d:32:c5:e0:05:
78:a4:49:46:0a:92:5c:12:37:5a:32:6c:68:d0:66:
55:98:f9:c9:b0:eb:0e:df:4a:db:7f:b0:30:ee:66:
af:cb:36:bd:8a:64:79:db:7f:6d:50:33:cb:bd:a5:
f5:c9:93:5f:d9:b0:bb:b8:3e:34:35:ee:bc:89:9a:
10:43:99:cf:21:94:3a:8d:0d:5a:f4:5c:07:1e:81:
dc:4e:a7:62:e7:fe:b3:2c:02:6a:d0:89:ba:24:c8:
a5:f1:ba:18:07:ad:7e:d8:72:ea:d5:63:f8:89:f5:
49:68:34:2f:2e:67:94:88:57:18:0b:41:0c:97:72:
55:ce:09:fd:47:0a:f6:d4:ad:c1:39:9e:12:de:5e:
28:a1:bb:dd:79:8d:d9:a8:a1:10:bc:00:42:17:68:
ca:0c:32:89:3b:ee:89:2b:aa:b1:a5:45:ca:d5:94:
9b:81:7c:c2:0c:75:8f:4e:76:9e:2b:33:91:2c:4d:
d1:eb:1f:fb:c9:be:cd:df:0b:3a:36:c3:71:e1:e2:
bc:e4:5d:0f:53:59:e7:29:6e:db:bb:3a:72:cd:b9:
69:37:5d:8c:4b:9e:a9:10:c9:71:2d:28:59:8c:e7:
4d:35:30:07:56:9f:90:74:85:14:7a:8b:1c:26:6f:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:46:47:DB:F5:F0:5E:53:E1:86:04:95:FA:FC:CA:A1:AC:71:2D
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/UrlGR9v18F5T4YYElfr8yqGscS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2e64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:ed:66:0d:b8:61:f5:f3:9c:70:6c:e3:f7:37:0e:fd:5a:dd:
e1:6e:17:7f:10:ca:4e:5c:5d:56:17:24:4a:3b:31:2f:5c:93:
2e:69:3e:72:6e:bc:b1:64:b8:11:eb:21:b4:62:78:8e:a2:d2:
06:e6:b5:1d:1f:0d:a9:d0:81:1d:0b:ce:c3:ac:c4:5f:e7:75:
f9:ca:9c:a7:bf:7f:dd:5e:60:0d:b5:d7:ac:36:0c:ef:19:ed:
11:0e:42:fd:3b:9a:55:af:18:8a:90:9a:12:99:38:61:66:f5:
dd:7c:2a:2b:d0:45:d3:df:c7:2c:be:3b:7d:14:f8:df:a3:4a:
e6:ba:23:81:ad:0d:b9:f5:dc:97:6d:5d:20:fa:78:84:83:8e:
69:72:5b:9f:24:d5:66:0d:01:bf:9e:68:04:47:68:d3:fa:63:
6a:e7:99:36:f4:6b:7f:3f:4c:bd:5e:b7:49:8e:83:39:74:f7:
2c:f2:43:f3:52:8d:cc:00:14:64:e5:cf:2f:67:5b:e8:0a:6f:
b9:bc:79:31:f1:ef:67:00:cc:36:e9:d8:be:16:51:64:5d:e0:
d9:17:19:73:3c:20:b6:f8:a3:0e:08:c5:56:a8:aa:95:9a:4b:
5e:7d:92:f7:25:02:06:a8:8b:f8:7b:e7:92:5e:98:54:c0:83:
98:66:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:03:55 2025 by rpki-client