Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OxbzZfM6eGBMt2Htfc8iTcB4FN8.roa
File: OxbzZfM6eGBMt2Htfc8iTcB4FN8.roa (raw, json)
Hash identifier: w1BjLiiHXRTy1vzGjVBzhW5JGL5CFVx5GG/RTsxjdb8=
Subject key identifier: 3B:16:F3:65:F3:3A:78:60:4C:B7:61:ED:7D:CF:22:4D:C0:78:14:DF
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019687D69A4FD34F3C7C7786759464E0906D
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OxbzZfM6eGBMt2Htfc8iTcB4FN8.roa
Signing time: Wed 30 Apr 2025 17:55:10 +0000
ROA not before: Wed 30 Apr 2025 17:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a09:da47::/32 maxlen: 32
2a11:3d04::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:d6:9a:4f:d3:4f:3c:7c:77:86:75:94:64:e0:90:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Apr 30 17:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b16f365f33a78604cb761ed7dcf224dc07814df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:e7:d0:68:2d:37:1d:47:62:98:bd:f7:f0:
52:6c:89:6f:a2:d5:61:21:75:ce:02:dc:bb:61:af:
18:c6:26:ea:99:a6:98:2b:49:4f:1e:17:3f:d5:44:
f9:12:be:ce:74:68:c5:31:5b:33:dc:ba:2b:2b:56:
ac:73:4e:fe:44:50:79:e7:9a:55:dd:3f:b8:8c:39:
73:ac:e3:2c:fc:1c:33:ad:c8:d1:23:9e:9f:41:7f:
22:33:30:47:74:ff:be:ca:a9:5f:9b:dc:c3:0c:c4:
0a:96:6f:44:7d:5b:5e:00:3c:79:1b:55:f9:7a:7f:
bc:01:51:16:5d:cc:ca:fb:ba:22:08:d3:c8:9d:86:
eb:64:be:08:01:75:95:37:5d:ef:b3:17:18:1b:2d:
c0:58:03:65:b5:9a:3c:6e:6c:fa:ef:df:0e:56:77:
6a:09:c1:fb:eb:58:0f:0c:a8:2c:cd:94:1e:ba:38:
71:cb:b3:07:2c:80:4e:ab:a9:35:bf:1d:0c:dc:c7:
86:47:cd:69:bc:04:9b:5a:9c:17:4d:83:a8:12:cb:
61:a6:36:37:67:c8:ec:2b:b2:96:03:52:f6:c2:47:
41:9d:df:86:74:c5:9f:01:63:73:80:dd:3f:a6:49:
4d:cc:0d:5a:e9:26:14:de:56:1e:19:7f:bf:dd:db:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:F3:65:F3:3A:78:60:4C:B7:61:ED:7D:CF:22:4D:C0:78:14:DF
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OxbzZfM6eGBMt2Htfc8iTcB4FN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da47::/32
2a11:3d04::/32
Signature Algorithm: sha256WithRSAEncryption
a2:47:6b:b1:60:36:85:73:91:db:48:1e:75:29:3c:a5:fb:13:
ea:6f:c8:f7:87:ba:96:fe:3c:bd:d2:2b:a4:0c:a0:40:e0:9e:
e7:35:f1:0a:b7:dc:8c:d5:eb:c0:6a:24:04:48:a5:77:33:6d:
31:68:eb:65:55:6e:05:b5:81:ca:77:8e:34:1f:04:9b:38:ab:
1e:7e:3a:e4:a8:dc:98:ac:7c:99:79:12:ac:d2:d7:e0:0f:45:
98:ca:65:26:e9:36:99:a2:91:b9:31:bd:63:1b:7d:f2:42:99:
0a:cb:cc:90:e8:7a:81:2c:e0:72:50:e1:3d:a8:dd:97:b8:6e:
6a:79:86:99:49:f4:0a:1b:96:ac:29:14:ed:3b:b1:b9:ec:7a:
6c:1d:10:43:61:fc:52:fd:11:4c:bc:e8:60:5b:3d:0d:89:94:
98:0c:41:6a:55:f4:38:06:ec:d1:04:64:e5:cd:a7:4f:9b:7d:
41:06:eb:e8:8c:ae:b2:e4:90:89:d9:8e:13:ac:e6:a7:8f:1b:
68:b8:e3:d6:5e:47:f8:07:13:d8:82:cc:ea:c8:1f:54:4c:29:
cf:4b:e6:65:04:e6:20:9d:dd:64:c4:bd:38:92:f3:28:d9:e9:
74:0b:71:ec:01:44:80:ec:3a:4e:01:62:0c:73:f5:3e:0a:13:
f1:34:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:32:47 2025 by rpki-client