Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rMkAyrz-XS3EcqLVjC9VHTTpsMI.roa
File: rMkAyrz-XS3EcqLVjC9VHTTpsMI.roa (raw, json)
Hash identifier: xsMfBw1DsObmASH8cV0WrjqRzIVko3NIo3/HcyEfaTA=
Subject key identifier: AC:C9:00:CA:BC:FE:5D:2D:C4:72:A2:D5:8C:2F:55:1D:34:E9:B0:C2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196AAA2AF30E0B2FBEE77BA7C1F9742D088
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rMkAyrz-XS3EcqLVjC9VHTTpsMI.roa
Signing time: Wed 07 May 2025 12:05:10 +0000
ROA not before: Wed 07 May 2025 12:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208022
IP address blocks: 2a13:4900::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:a2:af:30:e0:b2:fb:ee:77:ba:7c:1f:97:42:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 7 12:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acc900cabcfe5d2dc472a2d58c2f551d34e9b0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:e4:2a:6c:ca:44:51:51:63:ec:cd:60:ea:
0b:80:48:48:3a:3e:8d:8c:3a:a2:3c:34:4f:b0:ff:
a4:c4:f8:32:dc:d4:97:a0:ba:77:b6:16:5b:f3:86:
89:ab:59:44:d1:e1:5b:99:04:33:15:48:c0:6b:0f:
c4:88:42:a6:b1:7b:79:01:60:25:ce:b3:4d:86:48:
ac:2e:11:76:32:4e:33:74:fb:08:8e:dd:2f:2d:b7:
11:b1:34:86:1b:f7:0c:6f:b0:14:c8:ea:2d:41:1a:
0c:b0:fc:d2:f7:22:32:25:46:0a:95:92:c3:21:15:
88:ad:fe:eb:a0:d0:9a:6a:f1:f1:7c:f0:ee:01:cd:
0e:0a:2c:38:96:5c:99:c2:29:67:0b:94:77:a7:41:
81:6a:06:4f:f1:45:1c:45:af:68:7d:70:0f:8a:36:
56:42:a0:a3:4b:a7:29:46:a0:b0:6c:88:8e:5c:b0:
b3:ca:3d:66:c6:8e:7b:c0:e1:73:0e:3a:e9:33:98:
6b:d0:25:68:e4:56:52:0b:9c:09:e6:4d:c4:da:6d:
57:7f:01:a2:56:86:a9:f1:c5:e9:26:83:ba:2e:76:
52:ea:ad:df:08:a8:3a:0b:41:13:6c:30:14:0a:d1:
60:df:5b:79:21:73:9c:b7:bc:33:65:d4:fa:3c:68:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C9:00:CA:BC:FE:5D:2D:C4:72:A2:D5:8C:2F:55:1D:34:E9:B0:C2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rMkAyrz-XS3EcqLVjC9VHTTpsMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
80:1f:a6:c2:bd:62:4a:46:8c:91:fa:ce:ef:e1:58:6c:63:cb:
de:e4:ed:9f:9d:72:64:33:a9:e3:23:71:1a:68:0c:1f:e5:ae:
6f:07:9c:90:4f:8f:dc:e9:ab:5d:26:e0:39:93:13:b8:49:48:
8c:f1:b9:26:fe:e7:20:6f:df:0c:a7:49:c5:85:91:ed:38:84:
93:d2:75:82:fe:9d:4b:88:56:32:ad:1d:c6:70:5d:31:77:a2:
8e:0e:ad:b3:1d:f1:73:87:d4:0a:9a:f3:15:32:7d:55:66:10:
cf:e4:42:4d:7d:0f:03:7e:0f:d5:49:5d:9e:45:09:bf:26:89:
a3:00:9a:c4:2f:4c:ed:33:96:0f:2b:be:e3:78:7c:63:52:83:
88:a5:30:99:f9:bc:d2:31:51:ac:7a:0e:46:d2:bb:5c:72:fc:
6a:ed:84:4b:d4:02:1f:a1:91:74:a9:08:b3:38:62:35:2f:d9:
0f:14:23:aa:6b:08:cb:7f:a6:3f:15:06:7e:d9:b6:59:9c:36:
13:88:a8:eb:8f:71:6c:93:f0:80:36:97:3a:7d:c7:4a:a4:a1:
02:8c:3a:fc:a7:ab:9d:fb:f5:28:67:b5:74:cf:ef:5a:eb:0f:
42:2a:e5:f4:a2:1a:81:d1:57:2b:d0:4d:5e:3f:47:c9:ec:29:
aa:26:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:14:27 2025 by rpki-client