Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/IWU0yN5lxfh4aUxaRA-DioY_p9A.roa
File: IWU0yN5lxfh4aUxaRA-DioY_p9A.roa (raw, json)
Hash identifier: lro7824MfGW0EN5ZSTnDw/XV8uUIgOJ725CTgVE4t40=
Subject key identifier: 21:65:34:C8:DE:65:C5:F8:78:69:4C:5A:44:0F:83:8A:86:3F:A7:D0
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B57505BFA619783778518A909D36FA
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/IWU0yN5lxfh4aUxaRA-DioY_p9A.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216157
IP address blocks: 2a10:4104::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:75:05:bf:a6:19:78:37:78:51:8a:90:9d:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=216534c8de65c5f878694c5a440f838a863fa7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:de:cd:9d:1c:f3:67:51:e5:9a:1c:c7:5d:
66:07:21:49:b6:41:bd:34:51:a6:24:72:48:4e:49:
87:65:2e:e9:4c:c1:31:22:85:f9:44:55:63:7d:04:
ec:b3:a9:69:fa:7c:20:61:5d:f4:6a:9c:6d:09:7d:
2d:b3:f6:f8:a6:f2:dc:1d:e9:e2:cc:e4:8a:fd:43:
8c:87:34:f4:0f:de:19:8c:ca:d5:83:db:56:42:9c:
aa:bc:30:7b:ad:ae:9f:88:e4:cf:83:62:df:5b:f4:
ef:58:76:5e:57:6d:c8:be:9f:8b:2b:2b:b1:91:0e:
fe:a7:a9:95:6b:4c:c2:5e:89:73:12:f3:dd:6a:b5:
d4:94:25:b9:3e:cf:52:96:a1:b8:42:95:e2:2a:e6:
42:52:41:0e:82:95:83:c9:24:46:b2:be:4a:61:e4:
7c:18:9a:66:c4:ba:46:94:5a:d5:73:0e:9c:60:12:
66:cd:65:f7:6c:2e:4a:25:10:42:a5:ae:cc:d6:e4:
b3:45:eb:2e:52:e3:e6:ee:83:8e:92:c8:ff:ed:6e:
81:cc:a4:1b:43:37:5e:f6:18:a2:ea:e7:05:aa:f8:
26:28:3c:11:51:b9:7c:8b:f1:75:80:fd:af:a3:f3:
78:94:17:b5:63:e8:93:7b:48:ff:aa:90:b8:cf:70:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:34:C8:DE:65:C5:F8:78:69:4C:5A:44:0F:83:8A:86:3F:A7:D0
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/IWU0yN5lxfh4aUxaRA-DioY_p9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4104::/32
Signature Algorithm: sha256WithRSAEncryption
c8:96:6d:e7:e0:45:fc:50:97:75:d2:02:e4:aa:87:20:1e:ac:
60:ea:b7:07:bf:24:60:07:9b:ed:b0:56:30:85:9b:c5:32:f6:
90:fd:ee:2b:c2:7f:b6:99:f9:b9:18:24:5c:77:12:3c:97:87:
6d:36:4b:28:0a:38:d1:9f:28:82:09:b4:8c:32:53:db:81:f3:
8c:45:30:12:4a:db:06:7b:fc:43:b2:f8:4a:35:b7:a4:6d:6f:
54:ce:ec:ea:5a:f0:5b:dc:c4:bc:9e:7a:a8:2a:73:37:05:69:
01:e0:7e:1d:8f:fc:8b:03:55:67:5e:3b:b4:d3:a8:6d:66:82:
c5:94:27:d3:e2:f1:48:dd:aa:49:7a:74:7a:cf:89:7d:48:c0:
fc:dc:1e:1a:6e:ac:26:4f:d7:2a:dc:ae:1c:26:1b:18:ab:58:
fb:88:68:54:6f:fa:18:3e:2e:61:15:c4:60:19:d6:6d:29:21:
ac:8a:f0:d0:21:fd:ca:49:0d:6e:ba:d5:e8:5a:27:55:08:9f:
c2:d0:ca:ac:56:76:f2:73:d3:99:d8:40:81:84:84:d7:ef:13:
ac:ca:48:e8:83:18:b9:22:9f:ee:29:06:4f:3a:32:21:d4:eb:
e1:e2:c4:bd:c8:f3:8b:4e:6c:bd:10:9f:22:6f:86:af:97:ed:
40:1b:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:03 2025 by rpki-client