Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa
File: gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa (raw, json)
Hash identifier: 51uE4SN0evdj/LX3c8iK4ExCQ5J9huvoiaIN23Ew9+Y=
Subject key identifier: 80:A6:61:44:4E:03:D5:51:4B:E9:85:52:BE:CC:79:5C:25:16:CD:BA
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 019740F43D9D4E7984939CED3D36141A42FE
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa
Signing time: Thu 05 Jun 2025 16:37:17 +0000
ROA not before: Thu 05 Jun 2025 16:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209557
IP address blocks: 2a09:9340:1807::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:f4:3d:9d:4e:79:84:93:9c:ed:3d:36:14:1a:42:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Jun 5 16:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80a661444e03d5514be98552becc795c2516cdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:22:bc:41:25:83:12:d9:7e:62:fd:38:99:
4a:94:e8:17:70:da:d4:c6:ee:aa:ea:92:3c:e6:ef:
9f:28:a2:0c:02:7c:71:fb:e4:6f:14:dc:e3:91:67:
dc:94:a5:63:43:8e:a3:56:7b:bf:00:e6:9c:3f:eb:
c1:ab:7b:2b:5c:61:47:92:39:cf:7a:01:ec:50:db:
08:34:3f:75:6f:64:8f:b1:77:9b:e9:ee:19:1d:63:
31:fa:7e:54:fe:b5:45:c9:ed:c4:d6:9a:e8:79:10:
f9:ad:0f:72:b8:11:ab:40:47:f6:05:d4:1d:e9:06:
2e:af:94:4a:54:e6:f7:b6:9c:84:23:14:7d:62:23:
08:4a:a0:59:91:4b:d5:35:3d:99:75:0a:01:23:90:
39:49:65:47:00:0d:55:c1:c6:2b:ad:7e:8a:8f:2e:
af:45:12:ec:99:7f:61:ac:45:a8:27:69:04:92:fd:
06:8f:cf:f6:d1:a7:6e:b0:0a:3f:60:19:49:44:76:
b6:9d:ba:0b:af:2d:d0:a5:43:fe:5b:c7:60:3f:bd:
37:cd:32:b0:61:21:1e:c8:fc:bc:c9:30:70:eb:a6:
2f:f8:a7:81:aa:79:d9:17:ed:ea:84:0f:ba:e3:70:
fe:7f:cd:45:02:f8:bd:95:02:5a:a9:82:dd:dd:8a:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A6:61:44:4E:03:D5:51:4B:E9:85:52:BE:CC:79:5C:25:16:CD:BA
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9340:1807::/48
Signature Algorithm: sha256WithRSAEncryption
93:0e:2f:b9:7c:d7:d7:eb:ce:2b:26:fc:39:66:b5:47:e7:3d:
6e:7e:90:82:41:97:3b:a4:0e:bd:4a:81:38:0c:47:ae:fb:36:
53:8c:1c:68:f0:65:3a:0a:53:18:b3:9d:ff:f6:68:77:bf:e2:
9a:79:64:7e:a8:a5:93:c4:45:de:3f:c8:6e:7c:b0:b7:53:c9:
e0:79:88:30:a2:48:17:fb:8a:6c:da:6d:a5:e6:69:71:2b:39:
be:7e:49:24:2b:4e:00:c8:b4:28:89:fa:91:57:ff:c4:3a:9d:
36:b0:6c:5d:1d:a4:bb:69:1f:30:d9:2e:50:e1:18:70:6d:1f:
51:ab:35:a6:75:05:1e:0c:75:73:b3:84:f2:02:4d:a6:10:d4:
1f:30:56:26:54:c0:4f:53:62:dc:bf:40:ef:8d:c5:48:de:2a:
c7:14:a1:4b:35:1b:3b:74:3f:7c:e8:77:29:f1:91:32:ee:0a:
0d:75:0d:b4:a1:9c:95:cc:72:d3:dc:2b:4f:36:1a:d1:6c:28:
e5:66:d9:a5:cb:5d:5b:a6:b8:37:7f:a4:ec:59:1d:2f:a8:b9:
69:02:51:6b:a8:b8:2b:f7:3a:54:c8:5d:0a:76:8f:97:4b:de:
c8:78:7f:7a:20:ad:e3:15:f5:9f:fe:64:b1:fc:07:e3:5a:ff:
b5:68:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:01:25 2025 by rpki-client