Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa
File: Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa (raw, json)
Hash identifier: 1LM6MDYaE6Y/jo/PARMtexnN79ZdrRCB7ndwYT67l/g=
Subject key identifier: 06:5F:7F:BD:62:29:46:C5:68:D5:08:71:61:C1:4A:73:42:2A:0F:A9
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B033FE0066E55613E028FBAAADDEA
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa
Signing time: Thu 02 Jan 2025 09:48:54 +0000
ROA not before: Thu 02 Jan 2025 09:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:e380::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:03:3f:e0:06:6e:55:61:3e:02:8f:ba:aa:dd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=065f7fbd622946c568d5087161c14a73422a0fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:ce:29:1a:da:f2:f5:ad:80:bb:05:19:ee:
42:8b:61:40:a6:58:aa:2a:91:da:d8:bf:84:bc:1a:
80:46:5f:43:5e:04:1d:9b:83:c0:5f:39:d0:45:84:
72:e3:15:b1:10:40:9f:e3:b2:ee:65:7a:c0:cc:9a:
90:8d:93:8f:06:4d:68:3c:9c:d4:3f:d7:8d:8b:7c:
63:b4:88:9b:20:cd:48:f0:49:13:4b:08:7a:71:8d:
13:45:28:2e:e6:0a:1c:c0:d7:89:ea:ec:79:24:b1:
6f:93:95:e4:0e:8a:16:f6:d2:5d:16:d0:78:dc:63:
df:00:33:47:9b:26:a2:a7:5e:e6:5c:9f:ea:f1:61:
fd:b8:60:7d:11:07:ac:c5:d4:64:51:68:c3:ad:35:
12:7f:61:81:07:49:db:60:1c:f8:c1:82:61:45:36:
c8:5e:de:d0:2d:8e:b2:d4:80:60:93:b6:20:b2:23:
1d:ca:e5:0c:07:48:e6:95:c0:54:76:14:83:3b:af:
e5:59:63:a4:a8:42:7c:01:9f:0c:f5:7b:a6:91:d6:
fa:05:f8:3d:fd:cc:88:06:79:d2:fc:15:33:7a:3b:
8e:ac:f0:ce:54:00:58:15:43:df:9a:1a:c0:aa:61:
4c:b2:d2:12:46:32:d8:d0:60:82:32:8b:7c:61:4f:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:7F:BD:62:29:46:C5:68:D5:08:71:61:C1:4A:73:42:2A:0F:A9
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e380::/29
Signature Algorithm: sha256WithRSAEncryption
7b:52:5a:f6:d8:e7:42:5c:0c:a7:fe:08:3b:93:88:6d:7e:80:
ee:10:bc:85:1a:09:67:be:e4:1e:4f:d9:f8:13:98:8a:8f:ab:
00:14:5e:1e:30:88:00:41:d5:3f:56:4a:9d:db:46:27:37:39:
44:30:14:25:ad:1e:9a:85:ae:11:04:04:9e:ef:b9:29:4b:4e:
c5:c2:75:cb:9b:60:d5:c6:95:ea:76:12:8d:d1:92:8e:61:70:
d4:37:9a:57:d1:df:46:fa:00:ae:38:d7:83:02:89:8f:60:4c:
17:69:02:11:59:ba:c5:09:32:1d:3d:3b:c1:a6:ef:91:90:4d:
fd:2a:73:ec:be:34:e8:01:16:c7:ec:0e:a4:f9:9f:65:23:77:
c4:0a:1b:a6:ef:85:52:9e:f3:b5:64:ff:be:4c:eb:a5:a4:03:
9f:eb:bd:2c:11:d8:6b:cd:a0:9e:f1:a3:44:7d:06:61:c2:da:
f0:83:81:94:6b:53:9c:d3:f7:42:df:b3:34:6e:81:bc:60:cf:
c3:86:24:a9:b6:5e:56:d2:ba:ab:93:7f:cc:9e:6c:02:56:a5:
1b:79:08:94:4f:d6:e7:bd:1f:a5:69:76:9c:4e:eb:a0:a9:4d:
5f:68:20:6b:67:11:90:da:e7:27:f9:ca:cf:19:1f:04:76:fc:
b7:a9:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:37 2025 by rpki-client