Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/fOL2wn0hbjiBWIHSHx0ol-_V10g.roa
File: fOL2wn0hbjiBWIHSHx0ol-_V10g.roa (raw, json)
Hash identifier: /gFNmPhq1jkVbBwjHrnp2B3jWhZTHQ03KV2Xr4G2VBk=
Subject key identifier: 7C:E2:F6:C2:7D:21:6E:38:81:58:81:D2:1F:1D:28:97:EF:D5:D7:48
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 019424457ADF73311D9DD8B5B31E5070F604
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/fOL2wn0hbjiBWIHSHx0ol-_V10g.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215568
IP address blocks: 2a13:cd40::/29 maxlen: 30
2a13:d840::/29 maxlen: 29
2a13:e140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7a:df:73:31:1d:9d:d8:b5:b3:1e:50:70:f6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ce2f6c27d216e38815881d21f1d2897efd5d748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:43:af:91:25:be:40:0a:b8:3c:5f:1c:be:
24:58:5f:9e:8c:3f:b6:f2:1c:6d:06:2c:01:a5:47:
47:26:61:c4:52:b4:3b:b0:9a:a8:2f:99:8d:86:99:
7e:2b:db:b2:70:f0:1a:ef:1e:1e:43:78:5a:58:0d:
b8:c3:d3:81:f9:58:8c:3e:c3:00:b1:61:ff:1e:fa:
f5:ee:7b:1b:bf:64:51:82:f7:ec:a9:d6:5b:82:01:
fd:1f:c3:ea:03:25:f3:e5:e5:2a:b7:c9:f8:f6:36:
35:d3:e1:2e:e0:c0:9e:6e:99:69:87:99:68:ac:ed:
b9:5e:d0:15:59:db:9b:e6:ed:95:23:8a:2c:4a:5d:
32:8b:7e:78:29:7f:ee:5c:01:94:24:79:24:86:54:
5b:d1:13:bf:af:36:0f:99:cd:2c:8d:a8:c3:3a:10:
aa:cc:d6:53:c9:01:ff:e3:38:ef:ff:a4:af:3c:ee:
be:ef:2c:b3:c1:e5:9e:6e:01:b8:6c:d4:da:d9:c2:
1b:ee:ed:a4:91:67:7c:99:4f:0f:b9:06:d7:ed:8d:
c5:67:a0:03:1d:76:5d:ff:df:4d:3b:c4:5c:7a:16:
c6:b2:3a:6a:e7:b7:4e:0b:c3:7c:79:ec:b2:df:32:
ba:0f:ef:a3:4b:25:4a:26:fe:59:b0:0b:37:f2:55:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:F6:C2:7D:21:6E:38:81:58:81:D2:1F:1D:28:97:EF:D5:D7:48
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/fOL2wn0hbjiBWIHSHx0ol-_V10g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cd40::/29
2a13:d840::/29
2a13:e140::/29
Signature Algorithm: sha256WithRSAEncryption
33:d3:d6:86:31:75:7b:e6:6e:c6:c4:27:e2:03:8a:bb:d7:48:
ee:56:ba:fa:3d:81:30:a8:94:72:33:17:67:a3:ed:35:52:fc:
8e:3a:b8:0c:5a:06:f4:96:ad:06:b9:22:ae:c6:22:29:c5:23:
b5:49:1a:24:84:2f:ad:66:67:db:4a:a0:fd:e4:1f:93:37:1d:
b2:92:73:60:62:88:e8:a9:1d:28:6f:1f:74:76:23:4a:f5:64:
22:4a:24:ea:1a:9f:33:69:23:3a:fc:de:0c:22:32:20:cf:98:
95:0e:82:ce:d2:d9:e0:79:ed:2d:9a:78:29:cb:60:14:98:8f:
d9:3d:eb:89:04:dd:ac:98:5e:4a:ce:f3:cc:db:38:f1:f0:ac:
15:09:2e:00:51:da:e9:c6:01:05:4e:8b:57:99:1f:c2:1c:dd:
73:30:63:bb:fd:56:0d:72:ae:e7:45:31:ca:66:d7:fe:ed:c6:
38:15:1c:45:0e:5a:45:d6:b2:4a:51:dd:b0:aa:7f:63:af:4a:
17:e9:45:be:09:d0:f0:fd:33:04:7e:5e:c4:3e:0b:73:98:7f:
f0:e0:d0:0a:e2:cf:2a:3e:d1:89:9e:f9:77:6e:32:db:fc:02:
01:eb:73:23:23:ae:cd:4e:0b:10:5e:e4:f5:9f:fd:ae:37:10:
bc:6a:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:17 2025 by rpki-client