Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa
File: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (raw, json)
Hash identifier: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=
Subject key identifier: 7B:54:E2:0D:4F:63:69:FF:AE:A0:F0:B4:67:1E:37:D2:9B:B5:64:23
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 01942368E813C87E85B0CE02C912C2E24A2B
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa
Signing time: Wed 01 Jan 2025 19:47:45 +0000
ROA not before: Wed 01 Jan 2025 19:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0d:9b84:ff00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e8:13:c8:7e:85:b0:ce:02:c9:12:c2:e2:4a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Jan 1 19:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b54e20d4f6369ffaea0f0b4671e37d29bb56423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:93:ac:cc:b3:c8:06:fc:4c:d9:ce:67:37:
92:e2:9e:1a:0b:af:9d:99:c1:79:1e:2f:6c:61:71:
c8:d8:af:d0:1a:1a:e8:ed:69:8d:7f:72:da:c7:aa:
47:51:5d:00:15:07:07:35:18:78:69:d4:c0:e7:dd:
4f:63:84:1b:d1:a1:18:6a:86:14:a4:9d:4b:1d:77:
bc:f0:8c:29:7b:60:a0:0e:68:5c:66:d9:de:af:66:
2a:9b:01:7a:01:68:06:70:9f:2b:72:7b:d8:9d:72:
3c:6e:83:2b:88:51:b8:79:59:46:77:62:29:43:9b:
31:8e:62:16:ec:b2:57:f6:8f:76:3d:15:09:b8:a8:
27:63:db:95:52:e6:37:3d:90:ab:25:9e:73:4e:ef:
50:3f:69:6f:0c:88:e3:4c:54:85:31:8c:4b:67:81:
8f:5b:b2:dd:1e:12:f9:3f:7c:14:ad:2b:36:cf:71:
14:a6:b9:28:c4:2d:05:51:6f:85:9b:b9:35:c0:90:
26:ba:ae:36:d7:e1:cc:77:50:ad:df:ef:1d:ee:7d:
4c:93:be:eb:65:b9:68:92:09:7b:21:e7:51:33:7b:
49:ea:93:56:87:67:42:29:19:b6:54:1a:60:c2:41:
21:8b:83:e9:c7:2c:ec:48:25:91:2e:e5:83:2f:41:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:E2:0D:4F:63:69:FF:AE:A0:F0:B4:67:1E:37:D2:9B:B5:64:23
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9b84:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
aa:f3:69:1e:de:eb:0f:87:86:73:06:06:04:ed:8b:0b:42:d4:
b7:e8:eb:17:2b:13:b9:c7:21:47:81:52:17:45:5f:ea:d6:78:
12:c8:87:4f:57:9e:e0:df:ef:1b:2a:99:96:9d:3e:8b:12:e5:
dd:75:78:f3:ec:a2:cb:f3:cc:de:20:43:e8:4c:5d:f7:bb:9b:
c9:ff:f5:cf:80:48:65:2c:61:81:a4:3d:da:f1:03:c7:f7:4d:
7b:ad:6f:3f:0c:6b:60:41:48:5e:15:32:34:08:ab:7f:38:c0:
3f:a8:07:75:fa:fe:4d:55:67:f7:53:23:b0:1d:6b:b6:8d:df:
b3:c1:2b:0e:c6:87:64:06:3a:98:e9:48:69:35:a8:88:d3:20:
94:49:a2:1a:7d:26:9a:16:8a:ab:0a:63:e5:3f:19:11:ec:27:
b7:60:85:82:e5:d7:a9:09:cd:0a:63:27:c1:86:d6:52:6c:c3:
6f:85:79:2e:32:25:f4:24:d0:40:98:2a:1d:c2:1b:c5:b8:c2:
9d:03:21:f7:e1:39:e5:46:32:28:87:9e:cf:1e:05:57:97:14:
13:1a:e5:5a:54:46:3c:c1:71:b6:f1:2e:d1:38:fd:10:39:09:
e2:bb:13:1b:ae:78:77:4a:06:08:0b:11:db:2e:fd:5e:94:19:
80:1c:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:03 2025 by rpki-client