Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ghlEwsQZQs2UcsGEnGv2GYmqozE.roa
File: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (raw, json)
Hash identifier: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=
Subject key identifier: 82:19:44:C2:C4:19:42:CD:94:72:C1:84:9C:6B:F6:19:89:AA:A3:31
Certificate issuer: /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial: 01942823882702B5F62D083941151C2F563B
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ghlEwsQZQs2UcsGEnGv2GYmqozE.roa
Signing time: Thu 02 Jan 2025 17:50:04 +0000
ROA not before: Thu 02 Jan 2025 17:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213808
IP address blocks: 2a0a:8f80:4150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:88:27:02:b5:f6:2d:08:39:41:15:1c:2f:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Validity
Not Before: Jan 2 17:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=821944c2c41942cd9472c1849c6bf61989aaa331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:13:ec:82:e5:fa:3c:ac:4b:77:6a:dd:2a:
87:bc:60:1e:56:5a:ac:2b:53:84:04:61:a0:41:ef:
a1:f3:53:34:8f:22:cd:ce:c9:ce:c9:bb:6e:0f:09:
29:ed:84:cf:e4:82:4e:9d:ec:2f:af:34:cb:cc:b7:
61:db:13:12:ca:0a:34:03:be:c5:99:ec:21:de:33:
e1:50:8e:26:e2:47:0a:69:67:00:03:72:a4:57:8d:
e0:f8:0d:c7:7d:2a:9f:e4:48:6d:bc:a7:df:12:b7:
0d:3c:b1:61:72:7f:f4:a2:42:a3:f8:1f:36:97:ff:
63:3a:87:c2:0b:3a:1b:75:f1:5d:67:c2:86:49:83:
84:75:54:60:0b:fa:14:ba:18:4f:7b:57:bf:f6:ac:
1f:51:81:ef:22:5b:98:4a:e8:07:a0:d2:f5:17:12:
27:3a:2c:6f:a5:68:ae:22:5c:df:39:cd:e0:89:97:
7d:cc:6b:c0:8e:b5:33:30:46:70:46:8b:0d:0a:30:
34:1a:7e:fb:eb:9c:44:97:45:ef:83:58:57:ad:f0:
4e:25:ef:b0:fd:2a:3f:2f:55:78:48:e5:e3:da:1f:
48:a9:9c:05:9e:0f:4a:fe:a9:73:f2:41:36:a2:b3:
fd:41:a8:bb:47:cf:30:bd:b2:57:98:8a:e7:32:70:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:44:C2:C4:19:42:CD:94:72:C1:84:9C:6B:F6:19:89:AA:A3:31
X509v3 Authority Key Identifier:
keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ghlEwsQZQs2UcsGEnGv2GYmqozE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:8f80:4150::/48
Signature Algorithm: sha256WithRSAEncryption
1e:44:3e:6a:7f:e1:2d:43:f2:a7:3a:df:a4:d9:24:e7:e1:a4:
2a:91:4b:cf:23:2f:c0:d7:19:fa:52:eb:93:00:5c:23:49:5b:
03:48:4b:b8:f7:16:c6:d6:92:70:2d:3d:46:3a:95:96:ec:c0:
9f:47:1c:aa:a9:74:b4:aa:08:6c:b9:13:00:a6:c6:06:23:5a:
2e:31:43:30:1d:c7:53:cf:14:1f:db:b8:4b:0a:6e:65:00:0f:
10:b4:56:a7:a8:64:8b:50:09:b2:c2:55:4c:cf:ea:b0:7d:46:
ef:c4:9e:ae:cd:7a:c7:ac:30:db:04:f8:81:55:e7:c5:2e:db:
9c:40:49:ab:16:6f:34:07:e1:e0:a9:68:75:e5:c3:67:29:9d:
b5:65:1b:ec:95:d7:38:68:e9:c2:ff:19:e6:5c:33:8a:07:9c:
3b:c8:30:a4:60:08:82:6d:02:6a:90:ef:87:bc:76:f9:4c:30:
a7:73:cf:44:dc:f4:b8:cf:83:40:5e:1d:09:42:52:36:c2:c7:
c8:c8:38:5c:d3:45:aa:f4:c4:5f:b3:9e:25:3b:90:f4:d6:79:
4c:98:e8:5c:ab:73:a8:3f:88:13:2c:1d:bd:35:15:83:8b:96:
e2:d5:e2:cc:07:cb:3f:51:7e:a1:d4:d7:0a:ee:42:81:85:94:
d9:68:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:23:43 2025 by rpki-client