Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/9kI0xW5MbOx76ceEc1r6lL1zLqw.roa
File: 9kI0xW5MbOx76ceEc1r6lL1zLqw.roa (raw, json)
Hash identifier: EBfX8OboRteLfAyp7yvYOpYG1nnQo1fO08vfwQ0PAY0=
Subject key identifier: F6:42:34:C5:6E:4C:6C:EC:7B:E9:C7:84:73:5A:FA:94:BD:73:2E:AC
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 01967B4090855BF1A601FBB776A1F8663241
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/9kI0xW5MbOx76ceEc1r6lL1zLqw.roa
Signing time: Mon 28 Apr 2025 07:15:50 +0000
ROA not before: Mon 28 Apr 2025 07:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 2001:678:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:40:90:85:5b:f1:a6:01:fb:b7:76:a1:f8:66:32:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Apr 28 07:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f64234c56e4c6cec7be9c784735afa94bd732eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:2e:4e:b2:9e:cf:c4:fb:4d:df:78:2c:07:
b1:cf:fe:c9:d8:00:c9:3e:28:09:32:8e:2c:e0:73:
b3:36:eb:7e:ee:a4:e8:fe:bd:4a:41:3f:9e:7a:35:
f2:7c:26:9c:67:26:d1:9a:7c:6b:c9:f8:c6:7f:0e:
de:04:4c:9a:22:ac:8c:f0:37:40:c5:61:e0:7d:1a:
43:86:ca:95:38:d7:7a:f2:80:5e:38:64:fc:86:ee:
53:d0:21:2f:73:48:91:0c:73:c6:64:56:4a:a1:ed:
06:55:db:6d:57:9c:b8:39:55:80:09:e0:62:10:d0:
08:db:e3:dc:18:7b:f6:99:55:e5:15:87:58:76:68:
b2:d8:7e:70:b7:fb:b5:c1:4c:6c:12:14:b7:a2:dd:
c5:92:2f:22:be:bf:e1:a9:96:e0:11:2a:9e:c3:b8:
87:03:bc:f0:99:a2:cc:c9:83:8d:d7:f0:ca:61:db:
76:90:bd:55:a7:20:f1:12:3c:ad:1b:0a:f4:e8:8d:
5a:e9:2b:df:9f:8d:fa:31:24:ec:d9:ba:08:42:74:
65:25:0c:cc:8c:67:0c:c3:78:43:9c:42:1c:c3:d9:
c4:c5:98:da:78:c1:e6:30:7f:fa:a4:f7:e3:3d:1b:
4c:f4:9b:b5:6c:f2:e8:f1:32:86:31:a5:ab:65:55:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:34:C5:6E:4C:6C:EC:7B:E9:C7:84:73:5A:FA:94:BD:73:2E:AC
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/9kI0xW5MbOx76ceEc1r6lL1zLqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1020::/48
Signature Algorithm: sha256WithRSAEncryption
1e:2e:b7:18:1d:4b:23:41:5b:ae:76:f8:b3:75:63:de:fd:24:
10:11:7e:04:9a:4f:e3:13:38:ca:59:ba:a4:ca:47:7c:32:17:
b2:c3:c6:06:89:ce:cd:58:fa:a4:96:54:f2:4b:34:65:58:d1:
50:8f:d0:61:0c:67:99:cb:84:9f:1a:ff:02:5a:07:c0:d2:3c:
3d:c5:36:07:bd:fe:f6:d7:3b:6e:db:5f:fc:2c:8d:1e:ea:24:
97:3a:aa:65:6e:51:5d:57:44:66:cc:1b:f7:ca:1e:8b:db:a7:
a5:63:a2:ca:f3:0d:e9:8e:6e:21:53:cc:08:33:07:81:af:11:
b5:05:a4:bd:01:09:66:d2:ad:55:31:35:c1:b9:2e:e2:fe:26:
24:0b:15:8b:65:b7:3e:4e:3b:39:50:6a:1a:85:1d:a5:27:9e:
8e:3e:bc:e1:04:c7:ba:65:d0:1c:2a:6e:c8:20:63:76:b2:97:
74:56:74:7f:8f:19:ea:48:25:19:a3:51:59:f8:5c:37:2e:ab:
86:32:86:81:b1:2e:f0:2e:57:0e:79:9c:34:fd:5c:e7:a1:03:
27:95:c4:37:90:2a:6f:7c:e3:4d:dc:64:a9:bd:92:14:03:c1:
48:e4:f7:36:87:ed:f6:da:8d:fe:e7:44:3f:6f:60:61:26:1b:
d1:ab:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:30:26 2025 by rpki-client