Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/6sYUJgHMNdzO6paPv5kT75LFzMc.roa
File: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (raw, json)
Hash identifier: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=
Subject key identifier: EA:C6:14:26:01:CC:35:DC:CE:EA:96:8F:BF:99:13:EF:92:C5:CC:C7
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 019420D610CDC8591DF1C92E7F1FC0A5D022
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/6sYUJgHMNdzO6paPv5kT75LFzMc.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212834
IP address blocks: 2001:678:de8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:10:cd:c8:59:1d:f1:c9:2e:7f:1f:c0:a5:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eac6142601cc35dcceea968fbf9913ef92c5ccc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5e:b5:2f:bf:28:f1:27:de:7b:d4:50:49:0a:
03:91:22:c7:af:ce:60:09:9a:9d:81:a8:8a:50:1b:
0a:5a:fb:04:11:d4:43:2d:39:4d:50:c2:89:be:3c:
dc:5f:89:2a:fe:8e:19:ec:e8:7c:1a:ed:10:56:45:
d6:4a:8b:d7:69:93:cc:79:05:d3:5a:d8:59:73:9f:
6f:29:07:1e:a5:5d:4c:ef:6e:0b:28:31:50:e6:a1:
34:e9:cc:9a:da:e0:a5:6d:2e:65:83:10:81:3f:66:
dc:dd:7d:1b:fd:94:f2:54:19:79:52:96:ec:93:e8:
70:b8:69:56:d7:00:1b:08:39:7d:3d:7b:52:60:79:
cf:f1:83:ec:b5:5a:da:74:76:f8:7c:fb:b7:45:bf:
c2:dd:99:f3:7e:8a:25:a1:f9:26:07:fd:27:29:b1:
8f:24:d0:ec:23:13:90:c5:49:1b:2b:e8:cd:46:a4:
14:3e:ed:b3:66:28:81:85:bc:55:4a:d5:83:c5:76:
d3:61:00:c0:37:ac:ab:8c:0b:87:40:5d:28:64:51:
7f:b7:ba:1d:06:8b:9b:cf:74:a8:27:49:e5:33:fe:
11:71:90:e7:63:7c:93:c2:61:31:11:bd:6c:f8:8b:
44:3d:bf:4d:a9:a9:a8:d7:3c:1f:43:bc:99:01:bf:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:14:26:01:CC:35:DC:CE:EA:96:8F:BF:99:13:EF:92:C5:CC:C7
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/6sYUJgHMNdzO6paPv5kT75LFzMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:de8::/48
Signature Algorithm: sha256WithRSAEncryption
38:e3:fa:9c:ab:7a:03:f4:23:73:73:4e:c7:c8:ea:88:d4:25:
fc:22:50:c2:4e:f9:d6:9b:7a:9f:ff:49:f9:7d:ca:78:5c:50:
fe:3d:69:15:30:c9:e4:a4:4d:cb:7a:3d:47:4d:24:38:21:9e:
33:0f:4e:fa:f6:d6:95:40:76:7a:08:a7:7b:44:9a:66:95:d4:
e9:54:4a:b7:c7:18:ec:16:b0:a0:4d:3c:bc:0c:e9:57:3d:22:
4c:6a:91:13:7c:d0:76:3f:c4:92:c7:ad:15:1f:9b:3b:a0:03:
49:14:3c:54:0f:6a:cc:74:13:b5:d4:a0:88:ef:ae:70:80:52:
ec:b5:2e:ea:13:2c:95:2d:b8:31:f9:fd:bb:23:a4:f8:c2:0f:
26:37:ed:f1:26:ec:c5:b7:92:89:ee:5a:7a:c0:05:fa:99:a6:
b4:07:20:41:50:2c:83:66:77:d0:07:aa:1c:8b:a1:88:1b:74:
9e:fb:6c:d4:0a:90:7d:5a:d5:2b:03:9f:d3:f1:83:f5:eb:c1:
2d:dd:67:45:4a:a5:e8:e8:a6:a6:ff:dc:9f:d4:fb:d0:6f:1d:
90:38:37:c8:73:d4:83:d3:dd:c9:61:ee:3b:5a:57:dd:d1:e2:
65:15:e3:e7:b2:d8:70:8d:3b:15:3e:96:ac:85:2d:5f:d8:d1:
d3:5a:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:37:09 2025 by rpki-client