Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ehNzAexKTe8SbN_WCap9ie5WdUA.roa
File: ehNzAexKTe8SbN_WCap9ie5WdUA.roa (raw, json)
Hash identifier: uk7Y68xnJdxEpkB7WhjiEvXgS6V0GZL5t5VVX8icynU=
Subject key identifier: 7A:13:73:01:EC:4A:4D:EF:12:6C:DF:D6:09:AA:7D:89:EE:56:75:40
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0196433ECA1DB17486FAF19FE06616A74EB3
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ehNzAexKTe8SbN_WCap9ie5WdUA.roa
Signing time: Thu 17 Apr 2025 10:15:10 +0000
ROA not before: Thu 17 Apr 2025 10:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a12:7301::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:3e:ca:1d:b1:74:86:fa:f1:9f:e0:66:16:a7:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Apr 17 10:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a137301ec4a4def126cdfd609aa7d89ee567540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:24:17:19:a2:0b:fb:5c:33:ba:7c:8e:63:
13:a3:c2:c7:6c:2d:a9:9e:d9:1d:ac:ef:66:d6:90:
0b:07:d6:2a:83:76:40:f3:a9:b4:b5:ec:c1:6b:e5:
45:1a:e5:87:10:ae:b0:f3:45:29:f0:aa:09:90:2e:
81:65:7e:76:bd:b2:13:4e:1c:50:8f:d3:af:36:f6:
e9:81:01:c0:4a:62:5b:85:0a:a0:01:4b:ef:44:2d:
77:4f:4c:3f:49:f2:cd:87:7b:42:f0:a4:e0:8c:74:
8b:5e:b1:f8:20:de:f8:6f:1b:a5:d6:91:71:59:a3:
3a:b9:9a:f2:78:a8:cb:10:5c:42:e6:76:87:31:7c:
05:ec:db:4e:13:d4:c9:05:03:b9:12:03:fd:64:8b:
71:b2:bd:e6:b3:a8:95:9a:82:4f:e3:aa:f5:22:4d:
21:b0:eb:2b:96:15:89:e4:02:b0:3e:bc:a4:51:db:
45:b5:c6:84:67:32:24:26:6f:68:14:43:c0:3c:32:
2c:93:ba:e3:d1:b3:71:2c:7a:c4:b5:63:86:17:af:
45:11:df:9f:88:8e:a9:e7:80:3b:7f:4b:aa:8d:aa:
d4:6c:0d:07:df:02:12:c2:ab:25:60:b6:22:6d:bf:
df:db:ff:57:e0:c4:24:c2:e0:e6:e2:8e:7b:a0:c2:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:13:73:01:EC:4A:4D:EF:12:6C:DF:D6:09:AA:7D:89:EE:56:75:40
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ehNzAexKTe8SbN_WCap9ie5WdUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7301::/32
Signature Algorithm: sha256WithRSAEncryption
6e:17:f7:25:5d:6c:07:83:b7:cf:eb:2e:05:a2:29:17:bf:a0:
7e:01:fb:94:8a:9c:da:8d:da:fa:29:11:a5:9b:8f:d8:8b:f8:
1c:9f:4c:b8:e4:2f:44:4d:0e:1d:c1:8d:35:d0:97:d3:1d:21:
7f:3d:5b:40:2e:a2:92:7e:93:62:e4:d2:f3:5f:e2:fd:32:1b:
5f:f3:a6:18:00:ce:99:b3:8a:5d:06:de:6c:92:eb:33:3a:3e:
e3:1c:de:90:38:18:b9:9a:94:82:54:8d:c8:3b:73:ad:7c:40:
10:f8:55:b8:53:8e:93:2e:2f:86:65:91:43:5e:56:19:f8:8b:
c6:34:c0:68:a1:48:fb:7a:da:23:58:c7:e3:cb:c9:2d:98:34:
fe:2b:d4:57:15:b7:f4:af:1b:de:24:6f:d7:cf:9a:7c:59:6a:
f9:d6:6b:23:fa:2b:c4:3d:51:33:2c:3e:93:df:c5:18:1f:cb:
66:ed:a1:2c:0d:cf:82:26:f4:be:e8:33:c5:ee:c0:7d:21:ba:
09:11:65:54:52:7c:24:95:04:9e:76:b9:9e:5d:0d:a8:f5:c8:
6e:0e:4f:83:04:9b:4e:79:1d:86:dd:81:0b:da:66:3e:4a:86:
68:c2:11:20:cc:52:14:36:e8:73:37:8e:d3:60:6f:be:ba:b6:
57:93:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:21 2025 by rpki-client