Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa
File: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (raw, json)
Hash identifier: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=
Subject key identifier: B3:95:D6:D6:C3:DA:DC:B5:47:91:56:DA:1C:5F:0A:33:89:72:8B:79
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0194258FCD6CE02E81AE9678EAA8D6E1C7BD
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209090
IP address blocks: 2a10:c706::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cd:6c:e0:2e:81:ae:96:78:ea:a8:d6:e1:c7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b395d6d6c3dadcb5479156da1c5f0a3389728b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:13:ef:51:4f:d4:29:d7:9d:05:f6:0f:c6:
3b:61:78:3d:21:7b:1f:24:a7:89:7d:6a:89:12:57:
da:ce:de:80:8a:fa:59:23:e9:6e:22:17:85:16:c1:
d6:7e:34:f1:ed:7e:3e:50:32:cd:2d:7a:17:a0:a6:
28:4c:45:5c:98:d0:86:66:13:13:5d:64:15:73:39:
c3:c5:e4:99:87:4c:87:42:6d:a3:3e:9d:e9:d4:98:
68:11:60:0e:3b:4a:e5:89:7b:2e:e8:39:10:de:08:
87:07:1d:fb:68:22:dc:88:f8:67:19:8a:af:da:06:
51:44:4a:8a:8a:13:aa:d1:db:c4:cc:df:dc:7d:11:
d2:d6:d5:41:76:9f:42:56:22:9c:4f:42:d6:d0:e3:
22:70:9b:55:ad:63:d6:22:28:6f:d9:42:ff:4e:53:
cd:9e:05:55:1a:55:0b:95:e8:b1:b2:5d:4d:7f:34:
0b:83:6c:5f:21:07:27:4e:ff:a4:21:b8:0d:f4:03:
da:47:62:a1:3d:43:32:52:bb:9d:b1:51:19:1e:5c:
ba:e4:22:77:9d:70:98:72:02:a1:82:cf:c9:0b:d7:
9a:86:e4:fe:cf:dc:2d:46:84:28:ba:b7:d2:8f:0f:
f6:c0:ff:8f:b8:24:f2:ca:1a:61:25:35:9e:62:e2:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:D6:D6:C3:DA:DC:B5:47:91:56:DA:1C:5F:0A:33:89:72:8B:79
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:c706::/32
Signature Algorithm: sha256WithRSAEncryption
24:dc:f0:f2:ba:c9:f8:b1:a0:81:74:fd:b1:7b:c1:e7:fa:5b:
0a:8e:49:bd:2d:c5:18:b5:62:b9:ca:82:78:e3:1d:37:d0:45:
46:51:75:7e:6d:27:25:fc:78:39:dc:4d:a8:3e:30:d6:7f:86:
48:9e:d6:73:dd:55:fa:05:3e:4d:ea:46:f1:42:76:cf:a6:02:
67:51:aa:14:ab:c3:74:f5:d8:97:46:1b:db:44:53:03:66:73:
b7:37:5a:62:29:4a:40:be:7d:d3:57:0f:16:85:3f:6b:b6:aa:
cd:90:f1:ed:e9:bc:21:f2:50:9b:5e:ee:c5:67:1b:a0:48:bc:
ad:f1:86:54:e6:d6:2d:1a:9d:ec:cc:d9:3a:f1:c8:fb:9f:4c:
71:9f:ae:77:f7:89:07:17:95:5f:ba:29:cd:b7:9b:ac:cd:1e:
c0:6a:52:49:02:6f:5f:70:2c:59:d3:e1:1f:80:f4:4a:a3:5f:
28:99:3b:85:1d:6e:a8:c7:d4:02:41:9a:0c:bb:a2:3d:ef:5d:
2f:57:1c:66:06:4a:ac:21:72:4d:46:83:1c:a0:7f:8e:ae:b2:
b1:f1:f3:3b:ed:98:d7:59:ff:ee:b4:7f:d7:0c:44:06:9e:ea:
1f:21:53:05:34:43:3c:34:07:32:50:c0:61:5a:5b:b3:31:fd:
0f:24:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:38:21 2025 by rpki-client