Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/9LxbGWcyNt248nMDeMOo4a0XEpw.roa
File: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (raw, json)
Hash identifier: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=
Subject key identifier: F4:BC:5B:19:67:32:36:DD:B8:F2:73:03:78:C3:A8:E1:AD:17:12:9C
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 019424456BD52B489FF229DB3EC83E78BCC8
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/9LxbGWcyNt248nMDeMOo4a0XEpw.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215419
IP address blocks: 2a13:7b40:40::/48 maxlen: 48
2a13:7b40:51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6b:d5:2b:48:9f:f2:29:db:3e:c8:3e:78:bc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4bc5b19673236ddb8f2730378c3a8e1ad17129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:24:7b:35:af:1d:f6:80:de:4b:ba:c7:62:
84:ad:aa:11:de:00:e6:dd:99:39:82:22:b2:02:75:
1a:9e:23:c5:d5:27:b1:3b:07:17:e7:bf:57:25:cf:
64:59:de:f7:0b:9b:c3:7a:c8:9f:eb:34:7d:5a:23:
a2:be:91:14:6f:6c:bb:db:b9:ba:b2:23:7d:67:68:
f4:82:84:5f:bc:cb:bc:74:70:82:ae:eb:b3:42:70:
88:ac:50:20:af:5f:23:3a:85:fc:7e:ba:89:ee:42:
a2:16:fd:10:19:4c:5f:39:c6:00:98:23:7a:9b:e5:
7f:f3:d4:66:66:08:07:cb:99:f1:58:be:6a:04:74:
32:94:89:0d:4d:2d:9c:36:04:0f:8e:94:54:61:9b:
e7:e5:18:7b:57:ee:ca:3a:66:47:12:37:2b:53:d4:
4a:57:dc:f8:b5:7c:a7:ab:d8:59:ca:72:62:5d:91:
9f:b0:ce:5b:00:04:c6:67:a3:23:ee:01:ae:ac:1d:
ff:34:e9:f6:30:57:dc:38:d4:0c:fa:30:d2:78:1d:
7a:a9:e9:68:af:4c:36:09:69:31:77:eb:38:b9:6c:
ca:4b:6c:79:a3:d3:ed:5e:95:6d:1e:57:98:87:b1:
52:32:f1:23:43:92:6a:f4:e9:78:9c:80:41:55:92:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BC:5B:19:67:32:36:DD:B8:F2:73:03:78:C3:A8:E1:AD:17:12:9C
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/9LxbGWcyNt248nMDeMOo4a0XEpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7b40:40::/48
2a13:7b40:51::/48
Signature Algorithm: sha256WithRSAEncryption
11:5f:57:1b:b2:64:7c:af:8f:c7:72:31:8d:bd:ee:8b:94:79:
84:58:6c:88:20:58:a0:0b:22:9a:11:de:9c:a9:83:d3:e7:4b:
06:75:0d:ea:13:c6:da:cd:9a:32:86:6a:ea:a6:d9:f5:bf:0b:
7f:a8:0d:8d:f9:70:28:20:ab:da:4c:3a:e7:29:75:97:e3:87:
6e:da:c2:07:a3:52:b4:b9:5e:5d:8b:f7:22:ca:a5:8e:2e:f8:
c1:5f:d1:81:92:d3:d7:72:02:31:35:e6:7e:7b:ac:ae:b7:c5:
29:2e:db:76:e1:0a:cb:59:eb:5c:e0:74:84:ef:62:7b:14:75:
9a:01:9d:b8:e3:20:93:1d:69:d2:ba:2c:63:f4:09:41:07:a6:
e1:fc:17:fa:c1:ff:7d:3b:25:b0:53:05:e7:fe:8d:38:74:61:
de:c4:4f:9f:cf:f6:6c:cc:06:13:18:74:84:11:35:9e:46:a5:
8e:9e:ac:e6:0f:06:af:e7:9b:c2:f6:bd:00:bf:ba:86:71:df:
66:5a:76:1d:5c:f5:6c:04:1b:d9:67:95:ee:80:ec:48:d6:43:
61:d2:41:b2:9c:d4:b4:41:59:cc:cb:cd:ee:cc:74:63:ec:e5:
28:c4:25:ee:8d:a4:50:90:72:b0:ca:1b:d5:66:ed:f5:38:de:
6b:7a:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:03 2025 by rpki-client