Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa
File: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (raw, json)
Hash identifier: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=
Subject key identifier: E8:91:29:FD:34:BF:BE:C4:DA:20:CC:DE:62:3C:51:83:CC:BB:FD:5F
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019425FC7AF28C5D3205FF95388697EA2E05
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa
Signing time: Thu 02 Jan 2025 07:48:10 +0000
ROA not before: Thu 02 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35402
IP address blocks: 2a01:5c8:800::/48 maxlen: 48
2a01:5c8:801::/48 maxlen: 48
2a01:5c8:803::/48 maxlen: 48
2a01:5c8:804::/48 maxlen: 48
2a01:5c8:805::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7a:f2:8c:5d:32:05:ff:95:38:86:97:ea:2e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jan 2 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e89129fd34bfbec4da20ccde623c5183ccbbfd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:59:71:af:f5:a9:52:13:8a:2d:d8:e2:65:
18:e3:52:39:f4:98:5f:2b:d7:01:f0:89:2c:0f:5d:
e1:a4:a4:8e:88:2e:5a:d0:5d:b8:0f:32:4f:ba:d8:
38:7d:83:4b:47:b9:71:d6:62:dd:e0:dd:11:da:ce:
ec:12:bb:92:60:84:27:d7:c9:53:5c:17:2d:dd:53:
2b:0f:17:2a:f5:e3:a1:c9:24:ea:0f:86:25:ad:2f:
39:71:f3:73:2f:e3:25:c1:f4:12:fa:e3:92:4e:ce:
bb:30:cb:c7:75:68:88:35:41:4a:cc:53:e1:cb:f6:
e6:65:1e:0e:d0:8c:ee:1e:8d:64:61:98:5e:85:dd:
3c:a3:58:f9:e3:ca:0b:31:2c:9e:48:e3:2a:83:77:
cf:ed:9d:63:56:69:bd:1d:84:d9:1b:31:eb:47:a1:
75:c6:0f:c2:34:4f:7e:d3:80:4f:e9:8b:dc:38:eb:
bd:71:53:a4:76:83:1d:ac:b1:9a:f3:6c:c9:58:76:
68:ca:52:a5:5b:1b:c9:77:75:8d:57:4d:c8:ab:75:
13:eb:86:6e:1d:1d:30:9f:85:3c:76:2f:d2:5f:5e:
12:3b:51:77:f6:10:5e:27:74:bc:49:84:d5:da:f1:
7c:6b:23:8f:b3:18:13:02:cf:bf:7f:df:03:59:35:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:29:FD:34:BF:BE:C4:DA:20:CC:DE:62:3C:51:83:CC:BB:FD:5F
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5c8:800::/47
2a01:5c8:803::-2a01:5c8:805:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:d3:15:e2:6c:18:93:f6:18:32:6d:e0:cf:f5:66:2f:24:67:
2d:70:5e:c7:25:2f:46:72:41:99:8b:1a:fd:9d:58:fb:1c:63:
9d:ca:68:cf:82:d8:d3:31:26:c2:f1:b0:f6:b2:13:7b:8a:30:
13:72:bd:c9:09:0e:84:3b:50:b0:c6:d0:ed:0f:5f:64:98:ac:
0f:fa:3a:14:fe:69:38:c1:2d:1b:79:59:a7:6a:91:2f:73:c0:
f7:9f:41:d5:d0:79:d0:42:01:3c:87:52:ef:53:bc:0c:f4:dd:
08:be:bd:43:ec:4f:28:bd:a5:eb:c6:46:f8:a8:b4:d4:ca:a6:
a0:2c:79:a0:fc:da:cf:dd:6d:66:5c:16:91:20:a4:73:6d:82:
a3:a3:85:51:58:ad:f8:0b:d8:5e:34:e9:76:32:f8:8e:83:e4:
c2:c6:ae:be:2c:69:8e:5d:1d:06:7c:9f:d2:4e:b7:ef:ae:33:
84:43:23:3d:d7:4b:8f:1a:ad:4c:07:82:93:86:fb:c7:bf:cc:
b2:53:92:af:11:d1:fe:80:2f:20:f8:d5:b9:7e:62:4e:5e:3a:
d4:26:18:87:ef:88:a3:6f:a0:d7:35:e9:88:0a:02:4e:55:0f:
cb:f0:6f:23:37:58:19:bc:2c:ed:56:d2:23:6e:70:fc:28:db:
f9:de:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:21 2025 by rpki-client