Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/T-x5NWBWP7z0RtMavKGuf9lbyTk.roa
File: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (raw, json)
Hash identifier: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=
Subject key identifier: 4F:EC:79:35:60:56:3F:BC:F4:46:D3:1A:BC:A1:AE:7F:D9:5B:C9:39
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D94E17D4721BA9C5269A59EA4B2594
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/T-x5NWBWP7z0RtMavKGuf9lbyTk.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57010
IP address blocks: 2a04:ac00:4::/48 maxlen: 48
2a04:ac00:5::/48 maxlen: 48
2a04:ac00:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4e:17:d4:72:1b:a9:c5:26:9a:59:ea:4b:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fec793560563fbcf446d31abca1ae7fd95bc939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:a1:b8:0f:e5:37:ae:79:4e:c6:2f:1c:8d:
42:6e:2c:20:3f:79:34:c2:d8:3b:57:40:11:1e:58:
30:85:a8:0a:5f:bb:d1:c9:2d:f6:2a:76:46:0b:b7:
45:1c:0a:df:3e:ba:db:17:19:45:8c:b9:b6:27:54:
4d:4f:e4:57:6d:f8:dc:9b:e9:e1:96:b4:26:85:25:
0d:d9:f4:02:c5:4e:d0:28:8f:2d:75:d1:2e:2f:9a:
8c:c0:88:df:bf:31:9a:07:0b:2e:c2:4b:46:49:e5:
d2:81:19:eb:3d:f6:97:a0:02:f4:f8:0d:93:65:94:
a8:11:a3:45:6d:9f:9d:4a:8b:c3:89:58:49:47:7b:
d8:fd:c2:49:d0:b1:97:cc:5c:65:14:ad:4b:06:b5:
bb:72:df:7e:29:a4:de:e3:34:12:34:43:ee:bd:85:
8e:75:86:e9:e5:d5:96:21:9b:97:09:4e:84:73:a0:
c8:86:57:3b:e3:71:78:cc:cb:8a:fc:1b:0d:ff:01:
81:11:bd:f7:aa:8d:02:fd:2e:24:d2:5a:ad:28:4d:
cd:b9:68:ca:a2:e7:7e:6f:ad:7e:f5:e9:0f:7d:04:
37:a8:09:b3:3d:51:c7:38:83:b9:cd:23:ac:bd:f1:
29:5a:56:87:1d:64:40:5d:fe:ce:ae:d7:e4:2b:44:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:79:35:60:56:3F:BC:F4:46:D3:1A:BC:A1:AE:7F:D9:5B:C9:39
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/T-x5NWBWP7z0RtMavKGuf9lbyTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:4::/47
2a04:ac00:8::/48
Signature Algorithm: sha256WithRSAEncryption
33:94:f4:13:a3:78:7b:f9:9b:21:f4:73:45:7d:b9:43:8d:3b:
9d:81:a3:7b:e7:dc:7f:12:5e:bf:c6:2f:ac:5f:b5:71:fd:f6:
b6:0f:62:4d:12:f1:e3:01:70:6b:97:35:80:fa:8b:bf:39:7f:
be:c8:b1:9e:f7:14:7b:d8:92:1d:f9:42:48:10:94:67:71:38:
b7:3e:27:1c:c4:d9:9e:27:13:36:7b:cd:9b:20:48:e8:3d:b1:
53:5a:f2:fd:d5:15:ab:a1:03:60:cd:5b:d1:e1:81:4d:f7:b8:
81:09:fb:8b:32:70:87:3b:6a:f9:27:18:29:8c:23:e8:16:a5:
ad:94:b4:9c:53:b1:e8:86:d2:37:da:ae:5f:4c:db:7a:7a:0c:
6d:cb:17:b9:71:e7:51:08:0b:c1:67:25:80:64:f3:00:50:d7:
b5:af:d7:39:98:69:b8:88:72:de:60:77:02:f1:76:a0:4e:19:
7a:49:c3:0c:a2:e1:99:ef:12:df:6c:9e:54:80:65:04:3e:c6:
92:92:c0:e7:bd:46:f2:4b:f8:70:c7:da:09:cc:03:93:5e:c0:
55:c0:0a:16:3b:82:5f:c1:ae:a9:61:c5:9a:92:10:ec:cc:82:
36:0a:69:fe:46:86:a6:1f:18:15:cb:01:64:f9:de:93:67:18:
e7:d1:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:52:57 2025 by rpki-client