Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tTV1V42tSaHps7bSsdHhiW2ddX0.roa
File: tTV1V42tSaHps7bSsdHhiW2ddX0.roa (raw, json)
Hash identifier: 9q8z9lTik2hqAZLSytBxG0swrHfT3U4nPSv0n3AFUpc=
Subject key identifier: B5:35:75:57:8D:AD:49:A1:E9:B3:B6:D2:B1:D1:E1:89:6D:9D:75:7D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0194DA9FB2E10E083C3F1E14487F54142517
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tTV1V42tSaHps7bSsdHhiW2ddX0.roa
Signing time: Thu 06 Feb 2025 09:38:06 +0000
ROA not before: Thu 06 Feb 2025 09:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12608
IP address blocks: 2a09:5300::/29 maxlen: 29
2a0f:7b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:9f:b2:e1:0e:08:3c:3f:1e:14:48:7f:54:14:25:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 6 09:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b53575578dad49a1e9b3b6d2b1d1e1896d9d757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:51:e1:fc:48:cd:c8:c1:e2:18:bf:fd:79:
63:ba:50:f1:c2:01:c6:72:3d:62:54:bb:e4:ab:f8:
51:e8:ca:24:36:cb:44:17:73:78:3d:c7:41:24:fd:
29:61:e7:7f:e1:51:c9:fb:b2:97:18:cd:47:7b:64:
0b:23:47:d9:b3:0b:75:11:bc:5c:84:12:7f:b2:ac:
55:31:60:51:7f:60:66:c8:19:a1:3a:96:51:29:ea:
e3:65:6f:1d:5a:aa:92:3d:aa:b6:4f:a7:40:d7:3d:
b4:8b:1c:ad:40:75:37:c4:9e:10:ca:0c:e0:0e:18:
15:c6:50:3d:76:5d:d4:bf:a3:e0:45:1b:da:e1:41:
37:b5:f5:5c:a3:cd:33:d3:68:b5:d7:7e:2c:6e:e3:
27:04:d7:df:1d:bc:df:c4:2d:be:78:6b:9b:41:e6:
c9:62:46:77:b2:ee:7a:3f:4a:cb:c0:07:5a:c2:95:
08:bc:a1:a4:99:3f:97:be:49:80:5d:87:71:7a:04:
de:80:f8:d5:0b:a0:d8:55:49:d6:03:94:b7:39:be:
1a:99:cf:b9:69:00:22:f6:b6:50:98:35:ed:a0:24:
c0:c6:e9:c4:e7:04:25:a8:a2:c2:59:68:16:e6:e1:
da:15:7c:73:e1:ba:23:5a:34:ef:87:6f:91:86:62:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:35:75:57:8D:AD:49:A1:E9:B3:B6:D2:B1:D1:E1:89:6D:9D:75:7D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tTV1V42tSaHps7bSsdHhiW2ddX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5300::/29
2a0f:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
66:03:23:9c:08:23:45:f9:1d:c4:21:4c:cc:41:dc:91:06:77:
17:6e:97:cb:9f:3a:ea:27:52:4e:92:fe:86:c8:c4:10:f4:3b:
21:7a:be:a2:03:4a:6c:36:49:f5:8b:7a:06:97:72:27:2b:49:
82:06:eb:4f:f4:26:64:1b:7c:40:2a:50:f5:96:6a:4d:2f:9c:
40:fb:d4:f7:a8:f1:79:af:ab:de:7c:1c:58:4b:7a:5e:b1:d0:
f9:70:63:33:80:b6:e9:48:5b:43:23:bb:9f:5e:4a:69:df:30:
49:ac:17:39:cd:60:d3:f8:0a:71:2a:b8:ab:65:bd:a1:d6:4e:
95:fd:19:08:5e:00:8f:d9:73:84:8a:58:16:d3:aa:0e:94:ff:
1e:36:cf:07:ba:5c:6d:51:8c:c5:c0:d9:2c:ed:f9:83:3c:35:
0b:46:43:1b:e8:61:63:ff:9c:11:c6:ed:c2:fd:b0:17:d4:10:
3c:d4:4f:15:f4:cb:9d:f6:31:e3:fc:39:bd:10:97:f5:40:ee:
ba:c6:5d:50:b6:21:8a:ea:1c:fa:c3:77:63:2d:ba:13:21:69:
93:08:6f:67:57:e2:34:15:15:50:ac:32:2c:36:c3:28:fd:0c:
05:59:34:f9:72:54:00:d5:1e:27:7c:a6:50:42:07:a3:f9:93:
8b:39:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:19 2025 by rpki-client