Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa
File: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (raw, json)
Hash identifier: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=
Subject key identifier: 11:1A:23:EA:46:7B:7F:4F:4B:A2:32:1B:2B:B1:7A:FA:22:10:DD:0D
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 01942445617CB9AA4DC133D0618022A910EA
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7046
IP address blocks: 2a13:84c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:61:7c:b9:aa:4d:c1:33:d0:61:80:22:a9:10:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=111a23ea467b7f4f4ba2321b2bb17afa2210dd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:01:68:43:03:48:27:ea:01:a0:b1:60:c5:
00:b0:46:1d:e0:fa:9c:26:75:2c:de:5e:00:1a:69:
c7:f1:61:30:6c:b9:c4:d5:57:e1:4e:6a:03:fe:49:
80:44:88:f4:b6:15:cf:30:35:a1:e4:90:03:42:ae:
40:83:57:6f:d3:c7:ed:a4:0f:a9:cd:ed:11:a6:79:
df:b5:92:91:1e:af:37:64:d1:11:09:7d:b2:72:80:
3e:d7:2d:68:c6:22:6a:0d:3a:be:eb:2d:ba:64:70:
a8:14:94:04:dc:75:7d:64:c8:25:cc:64:c5:0e:3b:
83:5e:e0:bc:8f:50:bc:3a:e6:d5:c6:57:d2:4a:00:
c0:5d:f8:96:18:09:89:eb:ad:a7:13:81:6e:37:66:
b2:04:81:67:fd:e6:68:7d:b4:9b:ba:79:d9:f0:1a:
61:81:cf:ac:d8:20:3a:02:54:b5:89:c1:6d:cc:28:
4d:eb:ed:1b:bc:d8:9e:bc:0e:21:4b:97:51:e6:ed:
e3:b2:4d:0c:b9:f7:c3:7b:dd:65:c0:19:fa:48:c8:
73:39:90:57:b4:42:e8:3f:49:fa:ec:e1:dd:e0:1e:
c0:79:e2:1f:01:e4:39:54:0a:19:14:5f:fa:fd:36:
43:6b:0f:48:c0:41:59:53:df:ce:d6:ef:41:da:95:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:23:EA:46:7B:7F:4F:4B:A2:32:1B:2B:B1:7A:FA:22:10:DD:0D
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:84c0::/32
Signature Algorithm: sha256WithRSAEncryption
c2:4f:ad:0b:09:28:d8:c3:54:f9:c3:99:75:0f:24:de:a8:79:
0d:e1:f1:d5:72:6d:16:0d:be:79:78:dd:9e:9c:44:25:77:b6:
d0:72:ae:ba:39:37:67:68:73:ea:43:8f:ad:38:09:79:56:1b:
26:3c:b5:29:04:78:e7:42:cc:be:64:4e:3d:df:1f:cf:94:c8:
de:2b:0e:33:d6:cd:33:d8:48:59:48:3f:25:3c:27:4d:6b:07:
dc:cd:02:cd:f0:00:e2:a6:4c:9e:d2:c6:f0:22:41:14:56:50:
f9:21:d1:61:5e:e9:0e:cb:6f:8c:fd:c1:6d:3d:de:ae:a8:e2:
b9:d3:7e:42:d4:4c:58:ae:ed:35:e0:94:9b:03:e4:15:a2:65:
a8:4b:cd:5e:ff:77:dc:fc:e2:c6:d0:fe:2d:22:d5:73:d6:d7:
37:76:d9:08:63:fd:63:fc:4f:fe:93:90:5a:50:2c:74:97:39:
75:87:d1:81:05:99:31:41:68:e7:06:a3:3c:a3:46:86:18:e8:
29:2e:d8:e0:64:ae:1e:18:fe:9b:35:ce:92:56:a9:82:25:91:
d7:17:a9:1d:d9:a0:85:9a:99:0d:b6:67:67:00:91:2d:e5:94:
08:6c:1c:a6:cd:8c:70:49:61:63:55:63:00:6b:ee:2a:20:6f:
36:a8:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:40 2025 by rpki-client