Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/knSytMRDBBEnCJmSSPDhHWtHg0c.roa
File: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (raw, json)
Hash identifier: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=
Subject key identifier: 92:74:B2:B4:C4:43:04:11:27:08:99:92:48:F0:E1:1D:6B:47:83:47
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01942521FECBEA7E27639C3225614D61A1B2
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/knSytMRDBBEnCJmSSPDhHWtHg0c.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46516
IP address blocks: 2a06:2700::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fe:cb:ea:7e:27:63:9c:32:25:61:4d:61:a1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9274b2b4c44304112708999248f0e11d6b478347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:ef:b4:10:fd:cd:6f:db:9f:96:e7:d0:c7:
48:5a:ec:6f:3c:8d:db:f6:4e:57:8b:e9:95:db:b8:
c5:00:2f:ec:c2:97:54:ed:df:7e:23:e4:3c:05:9c:
f0:c1:a8:28:d8:b7:02:a3:36:ae:d5:77:f2:47:42:
4b:86:ed:f6:7c:e4:20:5e:4e:f8:3b:3f:db:c6:72:
e0:0a:ad:1e:7a:bf:25:2d:ed:d0:3c:91:04:9c:e1:
c9:d1:80:09:da:5b:86:b9:6c:30:d1:ac:8e:e5:57:
6a:d7:03:bf:6f:13:e0:0b:fa:de:26:81:47:03:a8:
a9:76:92:22:8c:5f:b7:fa:fb:8e:61:d0:e2:4b:25:
37:aa:66:21:84:94:56:19:bf:99:16:35:f1:c1:fe:
d5:4d:12:d8:a3:92:e2:e3:dd:03:5c:be:e1:92:2b:
18:e8:fe:cf:87:18:f4:5a:9e:f4:79:d6:d2:84:9c:
ce:a4:5e:ca:a0:a9:58:b8:0b:d5:1e:a8:99:a3:60:
f2:67:e8:d4:9f:81:4c:cb:65:fc:8c:ef:5c:21:4f:
e3:7b:0b:2a:9d:a4:7c:ce:f0:3e:bf:6b:ab:a0:81:
8c:99:60:52:83:37:78:85:8a:13:d2:0d:ee:3f:fd:
fa:4f:0a:38:95:22:89:75:3d:a9:55:6e:23:75:6e:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:B2:B4:C4:43:04:11:27:08:99:92:48:F0:E1:1D:6B:47:83:47
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/knSytMRDBBEnCJmSSPDhHWtHg0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2700::/29
Signature Algorithm: sha256WithRSAEncryption
53:bd:7d:72:5e:8f:65:2a:b0:f8:6c:fe:43:8e:76:da:36:b3:
49:6e:66:23:d5:81:e3:7b:eb:08:db:26:cc:b2:9d:17:ad:0b:
c8:05:15:16:78:d7:42:60:38:92:29:3a:0e:49:f3:1e:98:6b:
0b:39:0b:cb:26:74:cd:64:7c:10:03:80:7a:d4:69:78:0e:a3:
aa:9a:55:5d:f2:83:d4:4a:19:a3:b0:4d:4d:b5:f2:dd:d4:d5:
14:77:e8:0f:86:d1:18:46:59:54:10:9c:23:d1:97:b0:4b:86:
dc:b6:b0:c6:c9:5a:ff:15:8e:e1:71:8b:d5:a0:f5:6e:70:83:
52:5f:51:dd:7b:5a:b3:53:71:71:dd:89:3a:33:65:34:3e:c4:
be:3f:27:4a:5a:b9:b0:34:02:2d:0f:14:4e:71:87:6d:85:85:
a1:19:86:bc:d3:c9:5e:3f:19:25:c0:6e:e3:24:16:08:af:e5:
b1:60:c5:b4:be:c4:80:0b:45:c8:5e:87:22:b2:23:bd:7e:8a:
1e:13:cd:75:4c:cc:bd:8d:38:4e:8a:f3:6e:fd:f5:a6:ed:ce:
f6:ba:f9:66:35:70:81:42:38:09:0e:dd:ab:c3:6e:03:12:aa:
9b:ae:5d:e4:86:1c:34:cb:8b:de:ef:0d:2d:0b:fa:92:38:43:
0d:c5:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:43:39 2025 by rpki-client