Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa
File: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (raw, json)
Hash identifier: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=
Subject key identifier: B7:DB:0D:73:4B:90:23:A8:07:68:70:CC:4D:47:96:ED:7F:1C:E6:92
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 0194266C0429CA60924E15A2321A68F4E379
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a05:e9c0:4400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:04:29:ca:60:92:4e:15:a2:32:1a:68:f4:e3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7db0d734b9023a8076870cc4d4796ed7f1ce692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:f1:54:b0:7b:b5:e5:6d:7a:3b:7f:d9:c7:
ee:6a:9b:d4:21:c7:d2:b2:8e:9c:e5:26:e0:c5:39:
3f:15:01:d9:8c:45:db:d7:42:1f:4c:56:01:fe:f6:
66:58:e3:ac:53:39:70:bc:2c:cc:8f:3b:8f:5b:06:
9e:f4:bd:05:c9:d8:75:13:26:85:fd:b0:e6:3f:1a:
c1:58:07:29:1f:64:f3:47:59:bb:03:cf:eb:5c:82:
57:5b:cd:21:a2:1f:0f:63:ff:f2:8e:33:91:40:f4:
8b:27:86:c2:8f:4e:08:d1:9e:70:e2:43:c7:52:78:
38:c0:02:48:8c:4a:20:96:53:00:c9:ba:b5:fc:48:
98:88:07:eb:ca:17:d4:c8:dd:48:0e:2a:90:8e:40:
ec:4b:c6:48:3e:16:1c:58:8b:3d:69:f0:b2:bd:49:
5d:88:38:a7:15:15:14:24:4b:ce:c1:b4:7f:d5:f1:
45:c8:46:57:33:c7:e2:2a:4e:28:96:49:81:6d:2b:
fd:f8:c9:f6:6c:db:f3:fd:48:3d:07:76:cc:68:60:
3f:8d:95:2a:93:13:8d:01:4b:fb:10:67:51:d9:38:
91:06:c4:77:a6:55:66:5a:0c:6e:42:a9:b6:d2:c7:
13:59:71:dc:36:18:f9:4d:6a:d7:31:f3:fb:65:06:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DB:0D:73:4B:90:23:A8:07:68:70:CC:4D:47:96:ED:7F:1C:E6:92
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e9c0:4400::/40
Signature Algorithm: sha256WithRSAEncryption
5d:a0:2c:07:7b:f3:f3:84:e3:fd:c1:a6:f2:49:c2:fb:2f:02:
37:8e:dd:a1:c1:33:f0:9b:49:50:7b:5c:03:33:3b:91:34:3e:
2b:5a:72:c2:c3:f7:86:33:db:12:74:83:e8:3e:97:26:56:95:
e5:67:9c:49:13:fb:df:4a:de:51:be:56:a7:04:2b:b4:8e:21:
06:32:0d:3c:ca:d3:d9:88:15:dc:21:59:6c:29:18:14:0a:68:
82:c8:04:9b:fc:7c:f9:d9:2d:37:70:b5:9c:90:24:a2:14:21:
ca:2f:ec:d9:77:21:78:97:96:8c:3e:6d:03:54:b0:cf:13:00:
cf:fa:f0:a7:fb:59:52:1f:78:02:f3:62:05:31:10:91:99:3b:
0f:d7:4e:5c:70:68:c0:91:f4:98:41:ee:46:6d:70:ff:ae:eb:
fc:4b:5d:0a:e3:a9:7f:b3:ce:9c:96:ec:21:92:fc:8b:96:49:
df:1f:b4:52:89:a8:7f:17:4e:a1:20:89:34:8c:f9:92:5f:da:
c9:ab:81:0e:19:cc:67:6f:23:5f:ef:74:95:c2:a7:e9:a2:3e:
64:ee:1a:8d:b9:32:71:94:5e:ac:f0:ba:5f:73:4e:9f:a7:c6:
fa:b3:97:6c:de:88:f3:fc:c6:09:87:20:a5:34:3a:78:c8:37:
25:4b:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:33 2025 by rpki-client