Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/g-RHwRA0fquP8J4Xv3uB4JqTyDE.roa
File: g-RHwRA0fquP8J4Xv3uB4JqTyDE.roa (raw, json)
Hash identifier: MB10WoakxZ7o1+tlvQJIspwDHpxPYehoZvnIOs8eSoU=
Subject key identifier: 83:E4:47:C1:10:34:7E:AB:8F:F0:9E:17:BF:7B:81:E0:9A:93:C8:31
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019473D77202EE5878362B9466E345A18E68
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/g-RHwRA0fquP8J4Xv3uB4JqTyDE.roa
Signing time: Fri 17 Jan 2025 10:38:06 +0000
ROA not before: Fri 17 Jan 2025 10:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 2a11:4b46::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:d7:72:02:ee:58:78:36:2b:94:66:e3:45:a1:8e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 17 10:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83e447c110347eab8ff09e17bf7b81e09a93c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:e3:1f:d9:5e:8f:8b:b3:1f:22:66:3d:2c:
1b:bd:20:34:79:94:5b:93:09:d3:cb:a0:e1:a6:d4:
1b:24:e5:60:cf:8e:0b:b9:95:9d:6f:55:4f:73:df:
b9:14:c7:3f:7f:f7:95:70:0f:61:f6:5c:69:42:39:
4d:b0:eb:37:aa:92:90:71:85:28:12:f4:2c:11:6b:
36:62:7d:55:50:08:91:92:e9:09:0a:49:47:02:b7:
cc:a0:2c:67:b8:27:d8:d7:00:0f:15:f9:04:36:b8:
2a:6e:e1:93:20:a7:7d:2b:0e:fa:17:d6:8d:17:26:
e2:10:37:5a:5e:29:5b:5a:65:d8:ea:36:ae:01:17:
18:b5:a7:4b:e2:cd:26:79:ea:60:d8:c9:e1:9a:86:
63:98:72:36:31:21:90:07:4b:89:dd:d0:42:90:b0:
84:77:d7:cf:9c:6b:be:25:c8:8d:9e:b8:7f:7a:c5:
21:8d:a4:ef:91:3c:d9:b0:a1:07:62:7d:d6:68:6d:
94:dc:fc:3c:02:53:89:c3:db:20:b9:ab:a6:6b:bd:
ea:b8:71:4f:0a:32:a9:eb:17:b6:a4:28:a0:12:83:
75:c0:c2:ea:1f:30:40:05:91:f6:da:f8:ae:56:1f:
44:76:e6:22:7f:d4:ca:77:66:eb:c5:5c:f2:ca:6e:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E4:47:C1:10:34:7E:AB:8F:F0:9E:17:BF:7B:81:E0:9A:93:C8:31
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/g-RHwRA0fquP8J4Xv3uB4JqTyDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b46::/32
Signature Algorithm: sha256WithRSAEncryption
ca:a2:88:ce:db:1c:4c:5f:e4:8b:74:8f:b8:98:b0:18:2a:86:
1a:39:b1:48:8d:c2:74:23:76:63:bb:14:ed:26:30:b3:0a:d2:
5e:dd:66:74:6e:0b:4b:25:5c:45:9d:9d:be:af:35:30:68:7a:
d8:2f:83:0e:02:07:90:fe:c8:e3:2b:82:a1:d9:a1:bb:77:f6:
38:c3:4b:e1:ff:53:db:80:b3:79:9e:d7:32:bc:94:d1:38:5c:
f6:20:2a:de:b9:7c:ac:3f:65:57:eb:bc:4f:ec:86:1d:60:06:
e7:ca:75:e2:ce:53:ee:29:87:13:cf:d1:22:57:05:ab:d0:aa:
28:b5:e2:46:98:73:7a:d4:64:d7:43:e0:b8:fa:98:13:02:75:
49:fb:c9:49:52:4a:eb:62:9c:ba:30:95:ac:3e:7a:9a:1e:88:
4e:ee:80:ef:05:9e:82:e9:c4:02:f2:4c:5d:88:42:f9:7b:21:
33:e4:4f:e9:0b:7b:9d:f8:33:ad:3f:90:f6:7b:ff:47:ec:26:
fe:b8:60:d1:6a:30:95:5f:0e:40:69:f9:7b:22:25:68:10:94:
66:be:10:5d:6f:05:e2:e9:f1:f9:99:0b:d1:77:f5:1c:0d:3b:
ce:87:ce:52:55:50:c9:99:2a:a3:10:0a:01:ea:f8:de:9a:1c:
28:cd:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:24 2025 by rpki-client