Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/9xCRY7VEPmKHf0lyxzNpSutTsGY.roa
File: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (raw, json)
Hash identifier: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=
Subject key identifier: F7:10:91:63:B5:44:3E:62:87:7F:49:72:C7:33:69:4A:EB:53:B0:66
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019423D729EAC3265998BA83FBE68FCA9365
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/9xCRY7VEPmKHf0lyxzNpSutTsGY.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a10:6640:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:29:ea:c3:26:59:98:ba:83:fb:e6:8f:ca:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7109163b5443e62877f4972c733694aeb53b066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:0b:52:29:09:36:55:b4:e3:2b:98:af:f0:
ba:51:66:44:7d:94:53:21:f1:1e:87:36:25:4c:7c:
68:81:cc:54:b7:27:f8:2e:00:e4:58:8c:ae:a0:41:
f3:a3:1c:ed:42:99:e3:59:5f:03:26:a1:90:44:dd:
e3:6d:32:a7:fe:13:1d:c7:16:6f:8c:28:90:73:3c:
65:bc:35:0c:4c:db:5a:ee:18:38:92:40:c5:67:34:
f0:d2:71:d4:b4:62:0b:ab:19:f5:50:13:50:05:78:
ea:09:ca:1b:35:4c:1b:0f:00:28:fb:c6:8d:92:72:
57:f7:27:fc:8e:4c:9d:7f:97:6c:54:3d:be:a9:a7:
bd:63:38:93:b6:b6:ce:b2:26:49:b6:39:1f:69:d1:
18:5a:e8:ab:0a:39:b6:27:06:15:6f:d1:7c:2f:74:
d2:97:5c:a3:a0:cf:93:6c:53:96:24:bc:6e:fe:d4:
74:76:68:b8:06:f4:57:a6:f8:42:e4:95:3a:d5:00:
8b:2d:d7:c5:04:93:d3:d8:7b:de:65:c2:9f:52:bd:
9b:de:f6:f0:44:b7:76:32:42:1a:5d:cf:72:f3:41:
92:c7:64:d4:4e:e8:06:6f:26:48:d2:9b:37:48:65:
9a:2c:5e:91:9a:f0:d1:ca:dd:f7:d1:99:22:3c:8c:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:10:91:63:B5:44:3E:62:87:7F:49:72:C7:33:69:4A:EB:53:B0:66
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/9xCRY7VEPmKHf0lyxzNpSutTsGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:6640:1::/48
Signature Algorithm: sha256WithRSAEncryption
79:22:a9:a0:63:06:29:f2:05:1e:2b:ab:46:bb:97:7f:9b:22:
35:a7:37:a8:eb:1f:8b:84:bd:91:6f:5a:3a:44:35:bc:16:c5:
45:63:92:d5:69:58:74:13:b0:9b:06:ed:f0:2f:ad:ba:2b:d6:
ee:f7:a8:fc:c8:c7:9a:a8:95:06:a4:77:99:44:64:d7:f0:60:
6c:46:7f:2f:3c:19:ec:95:58:ed:4e:5f:b5:ec:df:a6:86:1c:
15:8c:69:90:2d:93:14:4a:15:b2:93:fb:2e:60:a5:ae:26:42:
2a:65:7d:96:64:2d:86:ab:b1:fd:41:ac:77:a6:c5:d6:67:6f:
ab:81:df:db:2c:bc:16:ff:9a:16:17:09:38:bb:81:61:29:e1:
f2:5a:90:4b:f8:23:4b:0d:54:43:4f:41:85:17:a8:49:95:25:
b1:ae:ae:e3:b1:f1:fe:bb:00:d4:5f:f3:09:95:30:ae:8f:6e:
52:d8:3c:2d:89:48:9c:2c:98:f7:73:ac:25:e6:c4:fe:72:d4:
99:13:e3:a4:c1:0a:a9:f4:29:51:25:3c:c1:30:b4:f8:d4:d0:
e2:df:07:52:75:25:1f:f3:6e:5f:72:cd:0c:62:c4:15:ae:03:
e9:92:76:c8:b2:59:49:6b:28:bb:98:da:66:b7:a0:c4:8a:d8:
ad:a3:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:02 2025 by rpki-client