Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/8Ea-ECQ4nO9Jjj-bMNDkrko4PoI.roa
File: 8Ea-ECQ4nO9Jjj-bMNDkrko4PoI.roa (raw, json)
Hash identifier: 5s3ZUOqG9C8dDa/J6xo03C1zVsvaDCu2fOUW+68glug=
Subject key identifier: F0:46:BE:10:24:38:9C:EF:49:8E:3F:9B:30:D0:E4:AE:4A:38:3E:82
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019674A32294A5329DB66559847E47F6A76C
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/8Ea-ECQ4nO9Jjj-bMNDkrko4PoI.roa
Signing time: Sun 27 Apr 2025 00:26:10 +0000
ROA not before: Sun 27 Apr 2025 00:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 2a0d:d940:11::/48 maxlen: 48
2a0d:d940:100::/40 maxlen: 40
2a0d:d940:9002::/48 maxlen: 48
2a0d:d940:9007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:a3:22:94:a5:32:9d:b6:65:59:84:7e:47:f6:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Apr 27 00:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f046be1024389cef498e3f9b30d0e4ae4a383e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:bd:e7:33:87:6d:4d:a6:b7:76:f5:80:6a:
76:50:46:c0:5e:08:00:5b:d2:e5:ce:d7:d7:12:c4:
00:a6:22:a7:1a:61:1d:c2:1e:6d:90:3c:1e:6f:af:
e3:de:82:bb:16:da:a3:82:6a:7a:b1:2c:4c:f1:b8:
da:9a:2f:35:45:ed:f4:8b:3c:41:dd:a2:f2:c2:bf:
fe:01:49:a5:2d:82:94:49:5c:62:75:ed:c6:75:f0:
2a:55:0a:b6:a6:e9:d7:1c:c1:41:4e:19:d4:51:21:
ef:6b:75:de:be:50:c2:f3:87:7a:15:71:52:de:20:
8d:a9:83:77:8a:cb:71:e3:5e:4c:61:d7:36:dd:d9:
44:27:3b:fb:7c:27:fc:f3:86:9c:9e:6e:61:68:ac:
28:90:c8:1c:f3:aa:c1:2b:b9:06:1c:fd:f7:de:6c:
80:7b:7b:d4:5a:6f:b8:75:09:50:b8:bc:6d:7d:a6:
6c:04:a9:1c:a9:9d:e7:2c:26:4b:56:4d:62:a4:98:
76:8b:a0:ef:b6:bf:2d:d6:41:af:91:16:a4:11:d8:
25:05:e0:61:42:4d:58:68:64:9f:2e:26:7a:4b:26:
c1:06:a6:b9:3b:48:19:2c:d9:9e:6c:94:42:1c:be:
5d:42:32:0b:fb:88:c9:e3:fa:f9:4c:29:63:26:7b:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:46:BE:10:24:38:9C:EF:49:8E:3F:9B:30:D0:E4:AE:4A:38:3E:82
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/8Ea-ECQ4nO9Jjj-bMNDkrko4PoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:11::/48
2a0d:d940:100::/40
2a0d:d940:9002::/48
2a0d:d940:9007::/48
Signature Algorithm: sha256WithRSAEncryption
2f:9c:1e:aa:27:1f:75:a1:0a:fa:91:64:f0:62:d0:42:27:c8:
12:7a:33:af:52:5d:d4:fa:c3:a3:63:5a:28:ee:21:6d:ce:2f:
0a:be:7d:a2:13:5b:b5:1e:b1:66:24:d8:1a:e5:d1:1d:5a:fd:
6d:72:3c:ad:e4:37:a0:5e:52:0f:70:81:71:3d:37:d9:e9:85:
80:e7:d0:e7:7c:b5:d3:f5:66:af:cb:5f:9b:90:43:c3:e6:01:
74:51:ad:a1:18:84:69:70:e7:ac:3f:9a:33:aa:80:aa:77:9e:
77:e2:4e:2f:93:17:d3:90:bc:32:0d:af:96:75:e2:3d:91:cc:
45:34:31:8a:fc:98:a4:72:11:2e:23:27:fa:bc:17:32:70:31:
08:d3:59:7d:9e:ec:14:0e:72:cd:2b:97:8f:df:68:03:44:b0:
ff:02:16:b2:4e:32:24:c9:6c:9c:7d:52:92:da:51:ef:9b:6a:
9a:3b:76:42:15:e0:80:22:78:dd:98:60:7b:22:54:85:26:33:
48:8a:04:c4:1c:dc:3c:fc:6e:e7:cf:cf:0a:87:7e:4e:fe:e5:
00:5a:c1:01:3d:1f:05:77:e0:e9:9a:f4:ff:cb:58:43:15:79:
15:9b:69:80:82:26:6b:e7:8c:4e:43:67:9f:fd:bb:1f:16:0a:
85:fa:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:34:34 2025 by rpki-client