Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/4bBbDJOy68tuNNG24n3yMr8ZLog.roa
File: 4bBbDJOy68tuNNG24n3yMr8ZLog.roa (raw, json)
Hash identifier: 6CCq/P9RMrSakvFqvatz29nUA1QqvoFA7GOz92KgHCI=
Subject key identifier: E1:B0:5B:0C:93:B2:EB:CB:6E:34:D1:B6:E2:7D:F2:32:BF:19:2E:88
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 01969D08EE89BED17675E115B63F7BD93F05
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/4bBbDJOy68tuNNG24n3yMr8ZLog.roa
Signing time: Sun 04 May 2025 20:42:10 +0000
ROA not before: Sun 04 May 2025 20:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a13:4a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:08:ee:89:be:d1:76:75:e1:15:b6:3f:7b:d9:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: May 4 20:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1b05b0c93b2ebcb6e34d1b6e27df232bf192e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:6c:5a:2d:b1:e1:93:b8:9f:4b:11:f6:86:
3d:95:c3:4b:65:c1:fa:a7:34:d7:c9:3f:d6:e2:a7:
85:0b:4a:ca:54:2d:b9:0e:98:0c:1d:ef:77:56:d5:
99:aa:f0:af:9b:ab:a0:1a:b5:29:2f:80:00:3d:87:
7d:e4:f8:99:ed:09:fd:25:f8:51:5d:6c:c0:f0:64:
2c:52:c3:34:b0:43:25:48:2e:7a:69:bc:21:47:a1:
af:85:e9:4c:21:7e:d9:68:2b:dd:46:05:0c:10:f2:
b5:e3:ca:0e:02:9c:6a:64:a9:88:12:2f:fb:ac:95:
dd:9f:00:71:72:71:41:bf:d4:e5:07:58:7b:64:7c:
cc:b3:5b:5a:f6:48:34:0c:d4:20:6f:28:a5:11:3f:
4c:0d:12:af:3d:a2:9a:18:59:cc:c5:6c:d0:54:41:
1f:90:5d:e6:52:c3:e1:6f:85:f6:33:e2:0b:d4:75:
b8:34:96:05:5f:95:49:e2:07:33:1f:ce:7a:33:d4:
84:3e:51:9f:33:a8:2d:e8:b7:3f:21:2b:96:0a:da:
01:00:c3:0e:7b:0d:56:d1:e4:a7:0f:73:37:55:e7:
00:da:e2:91:00:ae:13:a5:a7:50:e1:8a:7a:33:1a:
0e:e5:ad:b9:6b:f1:12:81:ce:e0:61:22:50:31:52:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:5B:0C:93:B2:EB:CB:6E:34:D1:B6:E2:7D:F2:32:BF:19:2E:88
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/4bBbDJOy68tuNNG24n3yMr8ZLog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4a80::/29
Signature Algorithm: sha256WithRSAEncryption
84:7a:35:c0:3e:47:2c:70:13:90:a6:4a:61:e1:01:cd:af:ac:
49:01:fe:c9:53:ba:76:b7:81:08:3d:ee:31:07:bb:82:a4:96:
9d:5b:ca:a2:3b:aa:1d:d7:3e:52:be:29:07:4a:b0:b3:58:9d:
6e:d1:a0:01:1a:96:04:5c:88:9b:57:2e:7b:aa:6e:00:ac:dc:
0c:3e:73:38:91:0f:51:e2:60:bd:41:4a:b3:d8:80:f8:67:5e:
8a:60:46:16:2b:11:14:d3:6f:b9:7a:f9:26:ec:b5:14:25:06:
f3:60:37:59:b1:da:6f:4d:d1:c5:74:a6:dd:a7:10:b3:a8:55:
70:2b:d7:71:af:24:7a:f1:96:0d:1f:aa:11:1b:49:40:71:90:
3b:19:61:50:fc:c9:c6:17:6d:57:b8:a4:0d:c7:34:ac:86:94:
cf:19:54:96:64:41:d6:19:ff:29:99:08:6e:18:1c:60:5e:5e:
4b:89:1d:d7:5b:fa:fa:49:3d:7c:a5:25:01:f2:be:0c:9f:fe:
9d:fc:bb:78:5f:1c:cf:e3:40:47:6a:53:51:99:04:16:85:09:
90:e6:7d:0b:14:fe:85:b1:0d:e4:5a:9d:3a:ca:53:e5:c2:54:
9d:d9:5f:27:d8:15:70:c8:d7:42:23:4b:1d:7c:d7:6d:4d:98:
04:12:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:24:30 2025 by rpki-client