Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/uejJGeBDuzCDQxudVuMI70V-pGs.roa
File: uejJGeBDuzCDQxudVuMI70V-pGs.roa (raw, json)
Hash identifier: BSepZGrADNb3VYStxDeZMexjvdT9hfJ7uidNLEEdkHE=
Subject key identifier: B9:E8:C9:19:E0:43:BB:30:83:43:1B:9D:56:E3:08:EF:45:7E:A4:6B
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 01959B375690290D663CBB6CFD842F6F1D29
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/uejJGeBDuzCDQxudVuMI70V-pGs.roa
Signing time: Sat 15 Mar 2025 19:10:49 +0000
ROA not before: Sat 15 Mar 2025 19:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 2001:30c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9b:37:56:90:29:0d:66:3c:bb:6c:fd:84:2f:6f:1d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Mar 15 19:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9e8c919e043bb3083431b9d56e308ef457ea46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:4f:14:7d:72:a9:0b:3d:a8:a3:cf:6d:80:
83:76:bf:5e:a2:10:38:e4:99:6d:1a:a0:e8:94:14:
c9:86:c4:60:6b:1c:57:94:4b:01:b1:f4:e6:7d:a0:
db:af:ee:38:11:47:da:d4:72:66:ef:88:6c:4a:fa:
b0:9f:39:7d:e8:9b:6a:9b:45:5a:16:8c:2d:93:fd:
e4:97:68:48:9d:83:06:78:df:53:80:c2:84:22:7a:
79:fa:b2:09:7c:7b:80:e0:f0:5e:c9:c7:70:8c:81:
a1:9f:82:89:d3:f0:c4:75:f6:86:e1:3f:62:b0:e0:
2e:1c:f4:b9:9b:c2:7b:1e:ff:cf:85:f0:21:42:08:
81:a7:da:e7:2e:86:d0:d6:45:46:5e:f6:18:6a:60:
46:ea:20:5f:45:1e:bc:dc:96:0e:0a:11:e8:76:5b:
b8:8d:c7:b3:b9:ea:5a:ab:97:99:a2:7f:1f:10:0e:
04:d6:8e:26:5c:10:b7:50:4f:bc:71:1e:f1:00:96:
5f:f7:7a:21:7c:16:17:10:2a:78:3c:7a:8f:f5:19:
d1:2a:6d:41:c3:5f:60:cb:f2:30:f1:ae:d1:0a:d6:
05:77:5f:df:f0:0f:56:9d:77:8b:f8:6f:e6:70:8b:
de:2f:5f:d5:dd:81:40:7f:07:59:55:8d:25:cc:2b:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E8:C9:19:E0:43:BB:30:83:43:1B:9D:56:E3:08:EF:45:7E:A4:6B
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/uejJGeBDuzCDQxudVuMI70V-pGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
46:fe:72:42:9e:37:48:56:3e:43:7f:4e:13:f6:22:a7:4e:7b:
35:5f:dd:86:43:96:8c:7d:ac:da:ce:81:5f:9f:5c:81:f8:71:
f6:b2:e5:09:00:e1:3b:c4:b5:de:19:26:03:d6:23:05:a1:de:
8a:f4:ef:09:66:69:ad:8f:b9:fb:ed:64:03:9b:e7:66:95:de:
f5:ef:b2:d1:31:3b:88:33:36:56:92:83:58:42:f7:d6:4e:29:
fd:03:22:a2:ab:67:4c:9b:8e:07:b6:a5:8f:c8:f2:33:fc:5c:
b3:e6:aa:ac:b3:1f:5e:b6:4f:99:7b:a5:4b:fc:fc:18:8d:15:
82:52:b3:40:bc:62:af:02:90:26:ce:40:66:90:fd:6f:f5:ed:
34:1a:fb:45:b9:08:da:0a:a8:b4:9b:8b:b4:b1:37:95:a5:2c:
a1:b1:ad:8f:22:20:62:00:fa:5d:2f:e4:80:99:2f:8e:0d:cd:
fa:1c:1c:38:fd:87:da:4c:d2:c6:3b:ef:73:d2:86:a5:b3:68:
ac:16:92:1d:3c:96:53:54:41:97:20:18:1c:f1:46:66:9c:7c:
11:f5:f2:8a:98:5d:89:8e:7b:6a:68:99:9f:76:37:4a:a4:23:
14:3b:14:50:9c:44:e8:de:b9:a6:46:ff:bb:12:44:87:d2:62:
cd:93:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:47:32 2025 by rpki-client