Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/RHTgJJC8qpvMfj8eUatfxfhezWA.roa
File: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (raw, json)
Hash identifier: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=
Subject key identifier: 44:74:E0:24:90:BC:AA:9B:CC:7E:3F:1E:51:AB:5F:C5:F8:5E:CD:60
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 0194228DCAA9164906991CA06EADC5B8F309
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/RHTgJJC8qpvMfj8eUatfxfhezWA.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208806
IP address blocks: 2a10:4741:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ca:a9:16:49:06:99:1c:a0:6e:ad:c5:b8:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4474e02490bcaa9bcc7e3f1e51ab5fc5f85ecd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:f0:fc:7a:e4:de:db:47:4c:b9:a9:2c:c7:
0e:c5:6e:31:9e:bf:24:f3:0c:69:fc:90:8f:7c:d0:
b2:ac:3a:87:31:83:a9:a8:40:5b:d1:3d:ec:26:27:
fe:00:e5:9f:a1:82:91:39:51:df:9e:a6:1a:a3:23:
db:fb:3e:e8:c6:79:b6:b0:35:c8:3d:87:1e:38:8b:
9b:d0:10:40:50:10:de:9e:d1:00:69:0b:49:be:86:
f7:70:48:62:85:96:fd:b2:19:03:9b:cb:c0:9a:27:
08:18:e0:96:66:74:f9:49:6d:04:14:5e:5e:1b:c8:
b2:84:5b:5c:84:21:5a:be:18:3d:e8:64:7f:a7:af:
8a:ab:53:a6:65:50:dc:84:5e:62:a5:2a:5f:d6:69:
37:61:53:e6:66:7c:ad:24:07:79:a3:f9:a5:d4:20:
24:3f:f5:42:3e:03:4c:28:01:f3:b9:2a:50:c7:4f:
87:52:6c:88:40:01:42:54:3b:c7:14:1f:01:96:1d:
66:71:83:7c:8c:ca:f0:3d:06:39:9a:6a:3b:42:be:
eb:81:4b:e3:d0:7f:28:76:b0:5b:a0:10:d5:05:dc:
52:7d:cc:f2:c1:37:cb:11:90:7d:67:f1:71:6e:72:
de:79:24:79:2a:cd:d7:21:25:66:3f:d2:4e:87:ca:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:74:E0:24:90:BC:AA:9B:CC:7E:3F:1E:51:AB:5F:C5:F8:5E:CD:60
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/RHTgJJC8qpvMfj8eUatfxfhezWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4741:20::/48
Signature Algorithm: sha256WithRSAEncryption
38:8e:8f:5f:d1:3c:a1:99:22:b7:fa:f6:b5:33:c9:0d:7a:ef:
24:32:81:c3:fe:b7:5b:e2:f0:69:7b:f2:48:bd:2c:ac:a0:f6:
bc:bb:21:2d:b9:2e:af:aa:e0:2a:d8:60:25:57:4b:9d:9e:1e:
78:65:23:c2:d5:5d:9c:c5:d3:68:b1:0f:97:86:47:80:48:ae:
08:fe:78:45:b4:0d:a5:85:e5:b3:72:a3:c5:f3:35:e2:53:0d:
d0:2c:d9:37:c7:19:37:98:2e:49:c8:6b:a1:9a:b8:18:f0:d3:
0c:a6:8b:3a:06:69:c5:43:a0:c9:1f:9c:67:ae:58:1f:4b:eb:
53:48:0e:fc:0c:f3:84:44:f9:fe:b7:b1:9e:c9:eb:8a:89:54:
b2:a9:32:d2:14:de:a9:49:28:29:8f:45:20:be:f3:11:fd:de:
65:60:f8:f3:80:be:65:be:08:34:3f:82:0b:af:aa:b9:fe:bc:
f9:94:4d:f6:ad:c5:27:c7:4e:7a:31:ea:4d:3d:e0:62:2d:1b:
f8:b1:c9:3e:78:ff:7a:53:82:df:20:fa:52:ca:31:50:a0:0d:
63:f3:05:e7:a8:66:70:c4:e6:68:55:9c:f7:94:d2:ff:03:e7:
8f:87:26:b2:2d:62:aa:8e:36:82:6d:f0:9a:1b:f1:13:a3:b5:
0a:64:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:11:21 2025 by rpki-client