Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/b9YEmpfPninMk0asKBNPcoiyaVU.roa
File: b9YEmpfPninMk0asKBNPcoiyaVU.roa (raw, json)
Hash identifier: pUFz2xldxjhrYZJSx6acSw+dw/vauygsJMfm2bULKuw=
Subject key identifier: 6F:D6:04:9A:97:CF:9E:29:CC:93:46:AC:28:13:4F:72:88:B2:69:55
Certificate issuer: /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial: 01942521A6DF800F6A74D2776C85C78FBD8E
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/b9YEmpfPninMk0asKBNPcoiyaVU.roa
Signing time: Thu 02 Jan 2025 03:49:09 +0000
ROA not before: Thu 02 Jan 2025 03:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214113
IP address blocks: 2a01:e2c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a6:df:80:0f:6a:74:d2:77:6c:85:c7:8f:bd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Validity
Not Before: Jan 2 03:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd6049a97cf9e29cc9346ac28134f7288b26955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:d1:c9:0d:25:97:0e:ec:fd:00:ba:b4:c4:
b8:db:2c:47:99:2f:fe:ba:87:df:b7:81:36:68:4c:
21:3e:1d:4f:ab:ac:50:b4:a8:8c:5b:93:8e:39:b0:
f6:78:f6:a2:e6:a7:aa:b7:ee:8d:e2:5b:77:0e:9d:
2d:b7:d7:7a:91:f6:4e:5c:0b:a2:c6:c1:fc:0d:6d:
03:76:98:bd:ba:61:ec:0b:7e:57:97:5c:26:e0:ea:
24:ed:5a:67:a0:05:df:ad:48:70:03:54:e0:9f:ab:
15:27:8d:c6:f4:50:ea:b6:68:1a:f8:4b:a2:ff:a4:
3c:94:d9:09:eb:16:c4:26:d2:6c:b5:29:cd:f0:d7:
6c:c9:d8:16:40:f2:fe:67:f7:1b:01:eb:78:06:bf:
77:0e:6d:26:c6:9e:15:96:44:7c:b2:1e:a7:9e:fa:
8d:bd:de:ef:77:92:2c:85:fb:a1:4f:5a:5e:5b:23:
ed:52:b4:04:a2:ab:6d:56:9c:8e:ae:fc:d5:15:c3:
df:08:a7:46:73:8c:61:d3:9e:55:15:97:71:49:47:
73:3b:22:ae:90:72:d0:d4:cc:17:3c:d2:b5:df:dc:
d6:e6:06:ea:8c:1a:3f:40:f0:18:e0:cf:2a:38:c2:
12:6a:7b:d3:81:64:11:df:76:78:8c:6b:b0:67:88:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D6:04:9A:97:CF:9E:29:CC:93:46:AC:28:13:4F:72:88:B2:69:55
X509v3 Authority Key Identifier:
keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/b9YEmpfPninMk0asKBNPcoiyaVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e2c0::/32
Signature Algorithm: sha256WithRSAEncryption
08:a7:b8:48:bf:4b:09:b9:b3:74:e1:a7:08:d5:77:38:8b:84:
bb:0b:fa:c0:37:79:27:cf:26:a0:09:30:0f:6e:be:fe:2b:4a:
6c:8d:3c:a3:e9:ec:10:75:ae:ad:dc:1e:4c:55:2b:31:1e:95:
18:8c:89:92:70:e8:90:32:1a:f4:fd:7f:5f:80:61:61:37:a2:
e9:db:54:3f:b6:db:67:a2:c9:d1:c7:a9:3f:ee:fe:aa:98:26:
c8:db:13:22:4e:ea:3b:17:f4:6b:fe:33:28:07:be:6c:0f:eb:
f6:9c:5c:6e:37:3f:fd:44:ec:47:43:ba:e7:fc:b2:cf:12:ec:
e9:63:7b:26:e9:b9:38:49:0c:ba:43:e7:ba:fb:d3:c4:dc:f5:
c8:cb:67:2d:ce:32:65:cb:30:76:af:00:aa:9a:36:ad:ca:de:
6a:c7:da:4b:a6:26:15:86:49:c5:08:45:31:72:d4:7a:5d:e8:
46:97:bf:0c:bf:24:7a:ee:e8:04:c1:35:bc:47:cf:b0:75:bb:
ab:14:95:8a:a0:8a:b5:43:7d:03:58:da:13:1f:38:1a:1e:46:
99:35:1d:3b:91:20:a1:45:1f:13:34:33:b4:cf:d0:b0:fc:37:
9f:97:7b:76:ca:e7:dc:a5:e1:81:0e:50:9d:aa:01:ba:85:fb:
1f:53:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:20 2025 by rpki-client