Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/jgoeY3coRJMRVNj7rT_gdCxKrt4.roa
File: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (raw, json)
Hash identifier: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=
Subject key identifier: 8E:0A:1E:63:77:28:44:93:11:54:D8:FB:AD:3F:E0:74:2C:4A:AE:DE
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 0194DCFB07DB3816EE015DCBE7366230549D
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/jgoeY3coRJMRVNj7rT_gdCxKrt4.roa
Signing time: Thu 06 Feb 2025 20:37:06 +0000
ROA not before: Thu 06 Feb 2025 20:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213514
IP address blocks: 2a14:cd00::/48 maxlen: 48
2a14:cd00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:fb:07:db:38:16:ee:01:5d:cb:e7:36:62:30:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Feb 6 20:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e0a1e63772844931154d8fbad3fe0742c4aaede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:f0:d1:24:7a:94:23:20:49:af:0b:1b:aa:
8f:34:e2:99:04:d0:53:8e:a8:8f:2f:b9:43:c7:8d:
20:97:7d:1d:36:85:1f:0a:93:dc:e9:1f:6e:9b:be:
b6:f4:bc:3e:9b:b5:f1:8d:fd:1b:35:d6:3c:ca:de:
cc:23:b8:bb:7f:08:45:47:6a:38:9c:9e:61:59:42:
e3:72:e0:07:13:05:25:3c:84:02:2f:5d:5b:bb:82:
fc:d6:ad:63:66:66:26:be:07:a7:5e:b7:dd:0f:b1:
1f:08:ad:90:48:cb:02:05:ca:75:01:b4:20:4f:12:
4b:4f:73:33:f7:00:de:fc:fe:d4:c4:91:4e:fa:e9:
91:15:4f:68:6a:08:8a:8b:ba:62:38:ee:e1:d2:f2:
be:03:cb:dd:74:15:9c:15:4b:f7:59:74:af:23:5e:
d2:2a:d3:cf:fb:f5:57:cc:ad:8d:cf:46:e6:52:3d:
74:30:2c:68:9a:0e:a2:22:ea:36:ae:04:48:13:fc:
ac:30:54:46:1f:d4:57:58:af:a9:bd:a8:d8:14:63:
08:82:ea:37:f2:e7:97:21:e0:02:92:5c:bb:23:41:
f6:ce:fb:c8:6a:75:f3:fe:1b:1e:63:10:fb:9a:e5:
6c:6e:a6:4f:91:93:54:09:6f:2d:47:a8:e8:ff:3a:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:1E:63:77:28:44:93:11:54:D8:FB:AD:3F:E0:74:2C:4A:AE:DE
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/jgoeY3coRJMRVNj7rT_gdCxKrt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:cd00::/47
Signature Algorithm: sha256WithRSAEncryption
e2:a7:a2:92:20:91:03:98:34:34:c2:1c:0d:b1:72:f6:c8:6e:
d3:de:6a:ce:4c:16:55:1c:9d:06:fe:1c:30:10:02:ea:8c:39:
db:3a:f1:00:c7:49:51:b0:ff:1a:5d:59:eb:8c:da:9f:fe:4e:
70:5a:75:e4:17:b9:42:df:33:6d:1f:d0:0c:fb:9b:04:40:69:
dc:3a:63:e6:13:2d:bf:b5:fd:08:d9:22:8a:9a:92:8f:05:1b:
05:66:28:3d:9f:72:fe:0d:ca:cd:8d:8f:0a:e7:d8:4c:9b:26:
a5:1c:54:2c:9e:22:84:15:36:63:0b:b5:65:31:a9:9c:13:61:
fa:0f:e5:f5:1d:5c:eb:1e:c9:cb:7a:a2:ff:6c:53:6b:d6:2a:
04:b9:12:4e:56:7f:8f:7c:16:63:49:a4:90:f1:4e:c6:ca:73:
35:e3:75:c0:94:b7:7e:b2:c7:82:b8:af:7b:48:9b:5e:24:4e:
35:95:94:2b:98:40:47:f9:e7:68:79:5a:5b:5a:68:e4:61:14:
f5:ec:2f:e2:32:2e:08:f4:37:21:57:db:99:1b:e6:06:06:eb:
d7:05:4d:a0:a1:02:2b:9d:48:06:95:98:02:27:9b:b1:e7:59:
21:73:4c:3a:aa:3e:b5:a7:07:e8:31:4e:fd:a8:13:a7:72:76:
b7:28:73:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:36:27 2025 by rpki-client