Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa
File: q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa (raw, json)
Hash identifier: rnMDx8HFmMRUD1wSEEKi54fuapDGJDZJ6EgL5LNncSg=
Subject key identifier: AB:64:47:4D:89:64:70:38:02:8E:B7:D5:36:F6:18:87:C8:2D:B9:9D
Certificate issuer: /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial: 019422FC251AADE407A76AA02EEBE3A67AEC
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199659
IP address blocks: 2a02:d540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:25:1a:ad:e4:07:a7:6a:a0:2e:eb:e3:a6:7a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab64474d89647038028eb7d536f61887c82db99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:24:2a:44:a9:65:c9:a6:01:e9:23:3e:3a:
82:af:ee:84:95:7a:a3:59:c3:93:18:42:74:56:07:
41:93:ed:b3:6e:22:e2:eb:42:51:ce:9c:3b:a5:7e:
05:1d:51:77:23:74:60:57:68:4d:f8:1a:04:86:91:
63:c9:f7:c4:32:20:eb:86:15:4b:69:07:6e:dd:ed:
40:8a:36:cb:b7:c2:8d:88:c1:fd:1e:d9:38:9b:7b:
74:8d:3e:67:ed:ba:88:92:01:58:e0:84:ce:70:0d:
26:a3:42:07:75:3c:5f:8c:6b:80:9a:84:15:34:bd:
83:82:05:e2:78:fe:c5:8f:2f:46:c3:50:cc:f8:af:
92:ca:b5:5d:c2:77:8d:f5:f4:03:9c:86:18:07:d3:
9b:77:63:68:87:95:93:0b:e8:d0:03:90:e0:3e:5c:
30:9f:85:12:a5:8e:2a:cc:7f:5a:e0:e6:df:0e:77:
72:bf:9d:1d:f6:fd:b5:54:ed:7f:1d:2a:f7:07:05:
67:4a:b9:90:71:13:81:5f:55:c1:ae:5c:af:9c:9f:
43:83:50:59:71:22:48:9a:1b:b6:7e:ce:6e:65:10:
40:61:a0:12:be:8a:ce:9b:ba:f1:0a:32:dc:7f:9d:
4e:83:49:a8:0d:23:3a:a4:c8:0b:0a:b5:f1:fb:bf:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:64:47:4D:89:64:70:38:02:8E:B7:D5:36:F6:18:87:C8:2D:B9:9D
X509v3 Authority Key Identifier:
keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d540::/29
Signature Algorithm: sha256WithRSAEncryption
01:fd:ea:98:ee:0e:54:b4:29:40:07:5a:7c:07:d1:ec:11:d8:
45:10:fe:ef:f5:26:57:2f:d8:4c:3f:55:d6:74:28:b5:3b:c4:
62:1e:4f:66:bc:82:f0:18:e0:e3:49:00:e1:90:53:8b:42:df:
26:86:c0:8d:9b:f9:e9:fc:f5:2b:71:fd:50:d8:fe:0a:3d:18:
d8:6f:c0:98:9c:8e:b8:08:b0:4a:07:a4:9a:41:1b:e8:8b:f1:
a2:4b:54:23:29:cd:36:6c:3b:56:87:8a:25:16:eb:2f:e1:38:
a2:63:fc:b6:0c:68:1e:e5:94:81:6e:a1:10:f8:c3:67:59:b6:
bc:cb:77:9c:2f:fd:8e:58:40:ea:6a:4e:77:bd:ef:56:de:17:
11:88:ad:c3:1b:66:9b:3c:c6:1e:4e:d6:ce:f7:26:11:0b:43:
25:b7:fb:e2:17:70:89:2d:e3:59:17:e9:38:ac:fa:a9:e8:ea:
4c:2a:a3:eb:dd:9d:12:80:f9:ee:26:99:a2:92:15:6d:60:a1:
ba:67:b3:ee:6c:fd:5e:47:fd:59:79:19:aa:fe:ee:7c:5e:5b:
48:e6:8a:c0:2f:72:7d:43:41:96:cf:f5:fc:ee:2b:0d:96:db:
5c:07:01:3e:33:48:22:c6:a3:c0:f0:94:9e:fc:b3:0d:70:bb:
60:55:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:21:03 2025 by rpki-client