Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa
File: eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa (raw, json)
Hash identifier: BYkfcjQqotFe4I9Ab8fvUQ8zQzC2L9Hl2RpFT9l1Q4M=
Subject key identifier: 79:7A:BC:AA:A0:95:4D:4A:6E:AE:1A:F0:31:2E:FA:16:D7:E0:D9:7C
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 0194258F74A00DC51E2A7BBD02A6C5FEBC6D
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205112
IP address blocks: 2a05:400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:74:a0:0d:c5:1e:2a:7b:bd:02:a6:c5:fe:bc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=797abcaaa0954d4a6eae1af0312efa16d7e0d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:77:97:a2:92:d9:02:9e:5f:0a:16:ea:e1:
c0:aa:7a:54:cf:40:ac:61:33:fb:f9:2a:0e:b2:ea:
15:88:fd:95:b7:ad:59:ba:5e:ec:e0:ad:d7:8e:91:
01:b5:d7:6b:f8:fb:e6:b8:d2:c1:d6:e1:47:b5:e7:
53:5e:c7:15:90:4b:db:86:d8:25:ff:c7:13:e3:bd:
27:bc:f1:2e:19:c0:a9:a5:cb:99:95:cd:cf:b7:5a:
f7:6b:96:01:a7:af:96:8e:f8:25:1c:82:c0:cb:a1:
51:e4:99:dd:b1:d7:77:88:fe:e3:7b:89:44:df:d4:
30:11:85:29:d4:7b:81:65:9b:ef:36:e7:89:dc:00:
78:bf:a7:6c:b7:2d:02:ab:be:ff:06:5d:2c:2b:04:
c6:e0:5c:4c:2c:f5:98:37:c5:48:78:7a:2b:c3:2d:
fc:88:21:d3:f0:84:ef:dc:37:48:1e:a7:89:b7:54:
20:e5:b2:8b:46:b5:ba:f7:fd:6f:9c:8d:6f:ca:f3:
f8:fc:5c:f2:fd:eb:c8:e2:fa:45:8d:fc:f3:bd:25:
53:13:08:eb:ae:2c:e0:88:e2:25:49:5f:fc:b6:19:
a4:4d:3e:9c:46:b8:69:a2:46:04:4a:30:14:b1:27:
5a:b7:cc:17:47:e7:78:66:14:eb:db:cb:d6:20:a8:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:BC:AA:A0:95:4D:4A:6E:AE:1A:F0:31:2E:FA:16:D7:E0:D9:7C
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:400::/29
Signature Algorithm: sha256WithRSAEncryption
10:38:23:f2:e7:91:35:1f:36:15:ab:d8:e6:a9:59:40:ce:29:
77:ea:48:78:1e:78:a5:dc:cd:e7:a3:0b:8f:11:9b:d0:08:6d:
15:ed:78:d8:ab:8a:75:4b:ac:7d:d8:45:7f:6f:54:96:ab:8d:
ce:00:da:c8:ac:7f:3a:48:a3:13:89:d6:aa:cf:8b:96:46:d4:
78:35:b6:a8:82:4a:b2:d8:41:b9:8d:12:10:dc:e7:ca:09:53:
94:be:28:0f:9b:45:2f:7e:f6:bf:a5:09:09:07:5d:59:fe:55:
ef:1b:e7:9d:31:1f:cb:47:29:e4:7c:01:95:e3:b0:31:2c:23:
ff:a0:b5:c1:fc:23:33:7e:f8:1d:11:4f:11:47:c0:dd:62:3d:
b6:cb:bb:4d:d9:18:0a:53:40:01:70:f9:43:4b:48:e2:30:fc:
9e:fd:ed:19:69:fe:76:58:fd:e3:0d:00:ab:4b:dd:a1:92:73:
86:0c:2f:6c:2a:75:82:50:70:aa:a0:b3:ee:53:a9:17:cd:43:
d1:00:08:dc:6f:ce:62:11:a0:c1:01:49:a3:8f:70:64:8a:8f:
9d:c6:68:91:de:4a:68:53:d9:e6:b1:52:d6:d9:1f:a6:81:b6:
76:80:44:b8:7c:e4:4e:03:c2:72:43:a7:5b:21:6f:d8:b8:ec:
5c:47:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:04:14 2025 by rpki-client