Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/rAhzT50KCRQXm8quXsR6iK9F-Rg.roa
File: rAhzT50KCRQXm8quXsR6iK9F-Rg.roa (raw, json)
Hash identifier: pRGswQTrkuiatSd34ijEQOzQk4+5VNyaCOncCW0Hp2g=
Subject key identifier: AC:08:73:4F:9D:0A:09:14:17:9B:CA:AE:5E:C4:7A:88:AF:45:F9:18
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 0196644ED5F5CBDBC7FC9FBE4161282E1737
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/rAhzT50KCRQXm8quXsR6iK9F-Rg.roa
Signing time: Wed 23 Apr 2025 20:20:10 +0000
ROA not before: Wed 23 Apr 2025 20:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a11:5884::/32 maxlen: 32
2a11:c104::/32 maxlen: 32
2a11:f184::/32 maxlen: 32
2a12:1802::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:64:4e:d5:f5:cb:db:c7:fc:9f:be:41:61:28:2e:17:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: Apr 23 20:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac08734f9d0a0914179bcaae5ec47a88af45f918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:50:c1:97:06:45:fb:85:ec:5e:dd:8a:ff:
e3:6c:51:cc:18:0a:55:1c:d9:c2:93:81:70:26:4e:
c0:c4:2f:f7:d6:8a:13:05:49:34:51:d1:96:bb:ad:
1f:c8:61:dc:32:17:96:5c:45:ac:6b:bb:0b:49:e8:
04:9c:b4:53:62:90:fc:c8:8d:70:8b:ea:bb:e7:93:
b2:34:6f:47:81:d6:1d:14:f4:5e:2d:05:8b:9a:9a:
79:b6:d2:03:b1:9b:be:bb:1c:1f:40:8c:39:7a:1f:
e8:47:a7:19:0e:8c:18:0e:17:c6:33:21:27:75:97:
6d:dc:82:65:82:b1:7e:de:6a:d7:6d:ef:62:cf:67:
c1:ef:4d:7e:dd:97:04:cf:a9:0b:7c:01:24:85:b3:
e4:cf:7f:04:2d:93:e0:76:7a:fa:54:67:99:7b:4b:
bc:8a:61:a5:ed:ba:25:ef:b4:0a:88:33:ad:46:13:
66:d7:39:a3:c9:b3:9e:a2:ae:d3:a5:07:cb:91:f7:
e9:7b:2f:3d:92:f7:9b:13:a7:de:fd:73:e0:ec:b1:
ca:f4:4b:84:db:a3:d3:ba:52:c7:66:8d:de:59:bf:
cd:d2:31:9d:2a:72:db:4a:33:ed:b2:8d:dc:1f:90:
00:a7:19:99:36:c3:51:1f:70:59:f8:90:2e:94:50:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:08:73:4F:9D:0A:09:14:17:9B:CA:AE:5E:C4:7A:88:AF:45:F9:18
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/rAhzT50KCRQXm8quXsR6iK9F-Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5884::/32
2a11:c104::/32
2a11:f184::/32
2a12:1802::/32
Signature Algorithm: sha256WithRSAEncryption
21:3d:09:b3:3c:1a:82:e5:af:26:5d:42:84:a0:24:33:14:4a:
16:d3:89:1b:52:d9:7d:0b:86:b8:ff:c0:d1:68:e0:88:2a:81:
86:12:e8:ae:a5:1d:a5:30:de:4f:2c:6d:e1:dd:71:3c:f6:82:
7b:3f:60:38:a3:a9:5d:57:da:33:95:1e:8a:fd:d2:0c:a5:e0:
34:7d:7f:18:a7:1d:eb:ce:05:af:b2:75:b4:c3:85:09:82:60:
1e:ee:31:cd:40:8e:56:ce:dc:a6:36:a4:e2:98:39:b6:61:9e:
a6:80:a7:ae:2a:6a:68:c7:85:c8:ee:41:b6:3c:a4:2e:91:69:
1c:49:a7:00:8d:64:ff:67:43:ce:8e:93:f0:39:38:09:63:a7:
d9:11:94:38:c0:c7:17:5f:0f:72:06:6c:f9:d5:5a:f2:b4:48:
7a:db:f4:cc:2e:fb:6f:44:f5:3b:a0:97:0c:e6:fe:d5:34:88:
6a:83:bf:f9:b3:68:8b:e4:31:07:47:65:67:c7:b8:78:58:83:
d0:5a:a3:43:5a:27:4e:b5:c2:64:82:f2:8b:a1:3b:ae:5e:7a:
93:29:3d:b5:50:f8:dc:82:03:e3:06:f0:85:ed:df:cf:aa:20:
5b:74:d2:f4:a0:9d:10:68:d7:80:c2:3e:1d:23:f1:24:94:43:
58:d4:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:00:50 2025 by rpki-client