Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa
File: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (raw, json)
Hash identifier: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=
Subject key identifier: FA:3E:9F:07:12:5D:66:39:49:1C:11:76:89:B0:8D:79:B4:61:A8:43
Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial: 01942143EBFAB08D342F4D5F9AFD07A17892
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2a14:2ec0:586::/48 maxlen: 48
2a14:2ec0:edea::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:eb:fa:b0:8d:34:2f:4d:5f:9a:fd:07:a1:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa3e9f07125d6639491c117689b08d79b461a843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:fb:88:cc:fe:9e:16:dd:2d:fe:52:59:fe:
61:b1:bb:bd:34:64:14:c3:9f:bc:62:fb:4d:b5:ae:
71:9e:5c:35:f7:33:61:13:38:34:52:bd:16:1e:29:
e5:75:7c:b1:c1:de:ce:4a:5f:50:2e:76:d5:30:07:
cd:d9:be:73:4f:6c:05:5d:3d:9b:13:a7:b3:71:61:
8c:4e:0a:d4:76:54:b5:de:94:98:bd:44:a0:bc:93:
2d:ab:4e:d1:bb:8a:0e:65:16:4b:93:7c:0e:e3:0f:
8b:42:5c:c6:c6:ba:54:9d:9e:8e:7f:67:da:a5:04:
28:59:86:dd:87:38:96:ba:77:db:a1:9c:55:0b:05:
d3:77:01:a5:00:ff:20:e9:81:de:9a:03:19:fb:4c:
83:f2:7e:04:b2:8b:a6:3e:14:97:4a:9e:39:3f:43:
57:96:06:cb:c6:54:93:17:89:1c:35:ce:d4:2a:77:
58:93:2d:a1:10:fe:41:78:ff:66:b9:b3:b4:15:6d:
f9:fb:61:f3:f9:94:a2:d6:3d:73:b8:45:82:19:35:
2d:1c:6d:0e:d4:9f:bb:13:ee:3c:aa:ce:dc:08:59:
f6:78:2d:46:39:12:8e:81:7e:1c:f3:56:2c:11:24:
bb:91:a5:62:71:1f:54:37:c9:07:04:2c:6f:80:d9:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3E:9F:07:12:5D:66:39:49:1C:11:76:89:B0:8D:79:B4:61:A8:43
X509v3 Authority Key Identifier:
keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2ec0:586::/48
2a14:2ec0:edea::/48
Signature Algorithm: sha256WithRSAEncryption
b5:2e:96:ea:9f:c3:b3:20:a3:de:39:4b:76:e1:66:24:ca:8a:
ad:4b:cb:d9:1c:36:bf:9a:5a:d1:f8:4e:b8:88:5c:ce:13:05:
28:d8:8f:a6:b1:2c:9b:70:87:c4:17:66:5e:53:d3:f7:20:41:
ef:1b:ef:05:54:b5:af:01:66:80:c7:1d:a1:dd:34:e3:bc:55:
4c:91:6b:b4:3d:31:20:23:ad:c8:68:18:e6:80:e5:a8:61:7c:
a7:71:da:b4:e0:b7:e7:95:21:5d:a8:9b:e5:2e:e7:03:ad:22:
aa:b2:2f:90:75:14:d7:20:a5:0e:2c:dc:a4:11:ec:3d:45:a3:
44:f0:b5:ec:33:11:12:2a:22:b6:68:16:96:05:3e:ab:ed:d2:
c5:d7:c8:7e:5f:ef:37:11:94:e9:70:f4:24:3d:1b:4d:d6:bf:
7d:be:4a:ed:46:d2:64:ff:35:0b:21:23:d4:d8:34:a3:1d:e3:
39:4f:5d:8c:90:11:88:8a:77:40:35:29:90:48:fe:a3:84:31:
d4:b3:48:14:cb:51:4a:f7:c2:24:6d:d0:4f:06:33:d4:ab:87:
a6:65:ee:2a:75:54:0d:13:b9:1e:39:ff:23:59:72:ca:7f:82:
a7:f3:6c:06:de:9d:23:3b:e4:7a:ec:e6:1a:76:eb:b8:28:4d:
69:ac:9c:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:39 2025 by rpki-client