Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/lRDpcMs9bdL5LekISXn8HOYdt5w.roa
File: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (raw, json)
Hash identifier: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=
Subject key identifier: 95:10:E9:70:CB:3D:6D:D2:F9:2D:E9:08:49:79:FC:1C:E6:1D:B7:9C
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0194266B5B3ACAE4A66A41B01B70D5457CEE
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/lRDpcMs9bdL5LekISXn8HOYdt5w.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208386
IP address blocks: 2a0e:c640::/29 maxlen: 29
2a0f:9700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5b:3a:ca:e4:a6:6a:41:b0:1b:70:d5:45:7c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9510e970cb3d6dd2f92de9084979fc1ce61db79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:1e:4d:0c:8a:53:5b:72:cf:70:a5:2d:c8:
d9:d4:c2:47:8d:8c:2a:00:c4:02:fc:3b:1d:60:b1:
c5:23:fa:b5:18:cf:49:7f:f9:35:fe:b8:69:da:92:
40:1a:8e:91:dc:90:ae:6a:63:8c:92:f9:9c:57:25:
0e:cf:a3:47:76:dd:c0:75:56:34:85:9d:90:ee:ad:
b4:24:9b:6e:55:a5:75:0a:25:28:9f:99:ae:e7:2f:
94:1e:1f:5e:c3:7b:67:3d:c3:05:33:37:06:e8:f0:
a0:b5:06:ef:ca:9c:97:2e:b5:d5:b3:3e:79:19:a5:
c0:e3:8d:1b:e2:81:c0:90:64:62:25:4b:37:21:79:
2f:27:6f:76:90:ee:5b:35:e5:6e:5c:a6:24:c9:ed:
23:d9:e7:82:61:dc:f5:fc:a4:a1:98:d3:b8:0b:69:
7c:2b:0d:ae:ea:5c:4d:bf:4e:30:03:62:b2:eb:f7:
4e:13:5a:e2:bd:da:3e:56:2b:00:30:c6:a9:9c:9e:
a8:0d:db:f8:9a:a5:9c:24:53:cb:ae:ae:25:e0:0a:
8e:d3:21:9a:e4:b9:3a:ab:02:9e:6e:63:ad:3e:48:
67:25:8b:b5:48:d3:40:03:f6:50:76:00:f4:e7:87:
33:e6:c9:83:5a:c2:5b:6a:5b:ac:ae:e2:65:10:ad:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:10:E9:70:CB:3D:6D:D2:F9:2D:E9:08:49:79:FC:1C:E6:1D:B7:9C
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/lRDpcMs9bdL5LekISXn8HOYdt5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c640::/29
2a0f:9700::/29
Signature Algorithm: sha256WithRSAEncryption
08:d4:e0:d9:82:a7:6d:a2:ae:7d:e8:bd:56:60:a6:2a:fa:84:
5e:cf:30:a4:14:3c:2a:a4:45:8f:96:01:b7:aa:6c:7b:f8:48:
80:54:45:d7:19:c1:2a:6f:d2:f6:22:01:26:04:b2:37:a3:15:
f0:df:7d:15:3f:bc:26:a5:e6:c3:16:45:96:b4:de:43:6c:7b:
8f:09:b7:56:fa:25:e9:49:70:ae:6f:af:9a:45:2b:ab:8b:50:
f8:5c:1f:66:37:cf:b8:c3:76:34:f4:59:73:c4:b6:43:0a:5d:
2a:c8:86:1d:cc:20:79:3c:80:f9:e0:f2:76:c2:ba:a6:0c:56:
04:c6:b1:e2:ca:1f:59:60:85:2e:e8:a8:2c:78:99:0d:de:d6:
28:92:84:d7:b0:36:9a:a8:69:93:7f:cf:d9:1e:65:40:48:dd:
95:f8:be:49:2c:3f:70:7e:59:af:b2:92:79:e6:1e:16:0e:46:
27:7f:82:2c:66:e2:6b:ee:d8:59:99:af:76:9b:fb:4d:08:84:
03:b7:d1:43:cf:23:cb:32:a0:aa:c6:44:6d:37:0d:0d:1c:ab:
56:6f:fa:17:d6:91:2a:81:29:92:3d:32:ee:dd:9d:84:18:62:
af:dd:a8:6b:9b:87:a7:fb:9d:0a:ee:13:0d:7f:af:bc:6e:88:
2b:19:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:25:16 2025 by rpki-client