Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/eL6yX2gKmuR54LoAuIUZEONKX3g.roa
File: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (raw, json)
Hash identifier: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=
Subject key identifier: 78:BE:B2:5F:68:0A:9A:E4:79:E0:BA:00:B8:85:19:10:E3:4A:5F:78
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 019424B394D9CBEA5B7175F1C918BD7AD33C
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/eL6yX2gKmuR54LoAuIUZEONKX3g.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211481
IP address blocks: 2a0f:ca81:6960::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:94:d9:cb:ea:5b:71:75:f1:c9:18:bd:7a:d3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78beb25f680a9ae479e0ba00b8851910e34a5f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:e2:df:37:f6:ce:60:87:2b:0f:37:73:a6:
71:9f:81:4b:1d:c6:0a:22:ad:8e:04:58:87:14:2a:
51:60:67:f7:68:5f:10:34:9c:e2:10:65:83:d6:00:
e6:16:36:52:08:c2:f1:4d:9a:f5:da:4f:94:c3:c5:
b2:4b:ed:ec:64:08:c7:be:0a:8a:50:a8:98:b0:cc:
3f:c7:c7:ee:46:d9:5a:80:93:40:af:a8:02:2c:6a:
be:9a:1d:46:8e:5f:55:b5:a5:cb:ab:85:54:17:78:
b2:1c:9f:6c:f3:5c:6f:04:0b:fe:41:83:f5:88:6c:
93:13:f5:c4:b9:42:42:5c:a8:27:1a:5c:cc:93:02:
90:69:f5:28:44:d9:4c:4d:40:37:50:2a:8a:3b:f3:
1a:9d:a4:5e:ed:7a:d8:ba:81:a8:56:2e:04:56:9d:
8b:0a:e0:7f:49:d1:5d:57:11:05:10:07:23:5c:82:
31:92:5a:60:fb:5e:4a:b2:e8:3e:56:5d:dd:9d:e0:
2e:f6:dc:6d:36:55:dd:ee:55:eb:fc:4e:ad:7e:0d:
dc:92:fd:0c:06:df:f7:27:c8:32:14:7c:65:a7:49:
ae:d0:de:9a:86:ac:e2:45:7b:f7:f0:49:62:97:15:
3a:83:7c:f6:23:9b:19:e5:80:97:b7:d8:41:6a:13:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BE:B2:5F:68:0A:9A:E4:79:E0:BA:00:B8:85:19:10:E3:4A:5F:78
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/eL6yX2gKmuR54LoAuIUZEONKX3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca81:6960::/44
Signature Algorithm: sha256WithRSAEncryption
5b:cd:df:48:d4:da:4d:a3:4a:d9:41:21:b4:a7:16:d8:9f:9d:
86:af:e3:84:5f:99:27:ea:64:0a:08:9b:74:58:91:5a:4d:45:
68:fd:b6:67:70:e1:cc:cc:83:a2:3b:1b:a7:cf:2e:c4:88:d5:
3f:78:2e:f0:d1:23:01:8b:af:ef:cb:55:36:97:04:55:d1:f5:
56:fb:e7:58:e3:f9:a7:bb:d3:b7:90:c6:77:c5:24:a0:63:d3:
b6:48:e2:d1:b6:d4:db:15:49:af:ab:24:8a:e0:ab:f6:42:cf:
ec:ca:79:d6:e3:db:df:e7:c3:be:9f:d0:36:08:73:bb:5b:fe:
df:08:ba:18:75:f2:80:77:1a:2e:31:3a:75:2d:bc:9d:19:57:
44:0b:13:c8:0b:bb:bd:a6:06:fa:3a:6e:bd:06:5b:3e:d8:23:
96:79:fe:cc:c7:70:d7:a3:d1:f3:ad:1b:96:97:41:be:1e:b6:
dc:cf:d3:1c:26:0d:b7:76:f5:7b:6d:ad:ef:08:05:46:d8:7b:
dc:cc:d3:a8:67:9b:ec:a3:ee:70:4f:23:a4:63:8c:8b:2e:8a:
8e:d1:75:94:8c:c5:84:2a:4a:8f:e9:97:8c:f4:29:7c:ee:0b:
7b:59:da:ba:fc:97:35:1d:e1:57:18:db:82:11:a9:b3:e2:b1:
5b:e5:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:19 2025 by rpki-client