Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/4h30bA-3Y1NPkPR74l_37u6rDuA.roa
File: 4h30bA-3Y1NPkPR74l_37u6rDuA.roa (raw, json)
Hash identifier: 15ZRW34VHGvAg6aqavimaSzixrDnJDwBfZWzEHDaSjs=
Subject key identifier: E2:1D:F4:6C:0F:B7:63:53:4F:90:F4:7B:E2:5F:F7:EE:EE:AB:0E:E0
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019658C2991A6C4FE2D71DDAA4500469F458
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/4h30bA-3Y1NPkPR74l_37u6rDuA.roa
Signing time: Mon 21 Apr 2025 14:31:10 +0000
ROA not before: Mon 21 Apr 2025 14:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215849
IP address blocks: 2a13:ccc5:f000::/36 maxlen: 36
2a13:ccc5:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:c2:99:1a:6c:4f:e2:d7:1d:da:a4:50:04:69:f4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Apr 21 14:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e21df46c0fb763534f90f47be25ff7eeeeab0ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:4f:b6:00:13:87:e7:96:54:20:a1:11:3f:
ea:8e:60:2d:a1:ee:c9:57:21:05:f0:d6:a2:b4:9e:
fe:02:2f:a4:a9:94:48:a4:66:8a:58:3c:f7:6e:31:
06:ea:c5:f2:9f:82:ae:0c:b5:66:dc:06:8b:a0:e5:
23:f7:1f:d9:30:9d:54:32:22:bf:97:79:e4:02:5d:
f8:a3:92:07:45:92:66:09:42:bc:6c:be:23:8d:18:
c8:27:80:29:cd:85:65:9d:0c:ce:ff:c3:e2:6f:fd:
4f:6c:e1:00:a3:0d:3c:9b:2f:fe:a4:bd:06:0f:50:
38:e1:7e:19:42:03:fa:20:2b:23:fd:d0:63:28:dc:
4d:0b:bf:09:45:f9:2f:b0:78:1f:c7:ee:ad:38:d0:
25:2e:80:ee:65:ad:d2:d0:86:6b:96:08:02:48:d4:
fe:26:fc:90:84:a6:a3:d0:a5:2f:f7:45:2e:0a:73:
76:eb:0c:e9:13:b0:42:5b:89:40:3c:14:d1:38:73:
e6:6f:2d:4b:39:32:02:76:ea:b9:f6:d1:e7:3d:e9:
af:83:fd:49:fc:5a:a6:b3:bc:fe:fa:70:de:6f:9b:
96:0c:5c:0a:d2:72:e9:4a:e0:06:e7:88:f6:72:1a:
47:15:fa:55:d4:b4:58:ef:66:7c:fd:57:e2:0f:87:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:F4:6C:0F:B7:63:53:4F:90:F4:7B:E2:5F:F7:EE:EE:AB:0E:E0
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/4h30bA-3Y1NPkPR74l_37u6rDuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ccc5:f000::/36
Signature Algorithm: sha256WithRSAEncryption
a6:a7:bf:e9:35:e8:ae:ff:a1:c2:30:f9:88:f5:74:f0:3f:02:
0e:6d:e2:70:55:03:65:ff:63:e4:12:b6:d2:44:e8:dd:b0:34:
73:d9:eb:3a:7a:a1:d1:43:b1:5b:f0:cb:15:56:d5:8a:6b:e0:
5c:a3:68:9a:53:40:fc:c0:e4:41:b6:f0:dd:89:53:f3:40:52:
5c:4c:d4:40:a6:4a:36:ec:be:87:c5:20:32:86:fc:d3:02:bb:
b1:f0:01:72:e7:ab:8f:c5:88:c4:e8:5c:db:e7:8b:b9:3d:9d:
2f:e5:61:8e:3b:c2:e4:67:56:be:5d:9a:98:77:3a:7a:c2:1d:
e3:fd:02:a8:b0:ea:90:22:35:77:91:6a:71:8d:09:53:0d:99:
dd:74:db:64:87:3b:f4:81:38:67:51:c2:e8:66:e6:5e:27:f5:
99:f3:f6:8e:61:e0:8a:2f:19:c7:0c:46:39:f2:0d:60:33:f9:
b8:ef:b5:7e:88:ef:21:38:1f:f6:4e:53:78:67:9d:42:3d:fb:
62:d3:ae:6c:5a:9f:ee:e9:06:11:4f:27:d2:5d:dc:05:d2:18:
79:2d:90:96:fc:46:4a:08:f1:a3:08:2e:54:5c:32:10:11:26:
a6:d9:a0:61:02:9e:c5:ab:84:ff:cc:6f:2d:7a:5d:da:8e:fa:
8b:97:d9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:18:17 2025 by rpki-client