Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa
File: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (raw, json)
Hash identifier: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=
Subject key identifier: 2B:91:FD:27:E3:80:73:C9:65:E1:CE:AF:80:4F:22:3E:59:97:14:60
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019641B115EBBD8826FD73E8C801FEC32135
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa
Signing time: Thu 17 Apr 2025 03:00:46 +0000
ROA not before: Thu 17 Apr 2025 03:00:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210457
IP address blocks: 2a01:ecc0:5c0::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:b1:15:eb:bd:88:26:fd:73:e8:c8:01:fe:c3:21:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Apr 17 03:00:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b91fd27e38073c965e1ceaf804f223e59971460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:c4:93:60:76:34:0f:1f:5a:c8:a5:78:20:
4e:15:1f:3a:c6:dc:32:12:48:39:1f:a6:e7:14:c0:
fb:6d:54:e4:e0:5c:2d:50:b9:26:05:b2:f1:1b:24:
1e:a8:a3:9c:58:0e:a6:17:8c:fa:3a:15:64:c8:a1:
c5:6d:c8:71:71:bf:cc:72:26:56:6b:19:73:c7:1f:
97:50:92:6a:a2:20:36:ff:14:c9:39:b6:1c:6e:bb:
80:91:2d:97:44:42:7b:85:9f:cc:4c:d7:fd:1d:53:
26:f2:79:f2:29:d5:ac:23:a0:60:e9:15:b4:4d:4a:
c7:43:bc:19:ce:5c:24:dd:55:72:c9:48:0f:45:23:
c5:24:52:d7:84:80:b5:4e:9f:44:48:89:21:fc:39:
f5:2f:b4:26:68:4b:07:ed:fd:21:d4:02:bd:bd:13:
41:3f:0f:62:55:c7:f0:f5:a5:ce:59:b2:a4:1a:90:
46:7e:e3:f2:53:c0:ec:95:2f:a5:cf:dd:0c:61:61:
11:34:63:05:93:6d:6b:4f:fa:b0:e8:57:79:32:2b:
92:fe:0d:07:8b:8f:ea:36:31:20:46:8b:a0:7d:4b:
62:e8:b2:a0:37:8d:2b:3d:3f:27:ac:21:40:37:74:
5f:f7:c7:ac:08:8b:fc:98:7a:4c:51:05:d1:d4:05:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:FD:27:E3:80:73:C9:65:E1:CE:AF:80:4F:22:3E:59:97:14:60
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:5c0::/42
Signature Algorithm: sha256WithRSAEncryption
89:80:87:9a:1e:75:94:0d:97:85:1b:ba:41:9d:fd:9f:f5:9c:
45:40:78:84:34:61:00:a7:e9:2a:32:09:b1:c6:2f:df:94:ec:
79:b2:04:cd:c9:0f:f5:5b:01:64:ae:7c:8e:9f:a0:11:5b:f5:
a9:04:3e:52:c8:69:01:5d:fa:ba:48:31:05:6d:5b:8e:96:60:
3a:eb:9d:e8:fd:61:8b:4d:ce:d9:96:73:58:da:e0:ed:2d:ad:
4a:bd:6a:ed:88:e7:f3:a3:9d:b6:e2:a7:f6:fb:f1:74:8e:78:
b7:aa:01:36:aa:6a:4e:c3:90:95:75:c5:16:bf:e4:42:75:eb:
36:9f:f9:49:40:c1:e1:fc:a4:b7:dd:4f:d4:fd:f9:17:15:0d:
28:7c:e9:2b:ab:b0:f7:72:ff:72:5e:c9:5c:6a:1a:f0:5b:80:
22:f6:56:4c:39:d2:c1:48:79:e0:92:63:71:6c:59:c7:cd:b6:
ab:ec:73:9a:e2:75:b8:e1:92:bd:de:f7:3d:ef:0b:b0:3f:d9:
46:66:d1:cd:8a:1b:dc:b0:19:c0:8c:d0:d1:74:c4:f1:14:f5:
1b:cb:0c:4e:20:e9:e6:4a:c2:39:af:d6:fa:b1:0d:7f:39:f7:
05:b1:72:12:1d:8a:a8:4d:5e:94:b7:3b:04:30:f0:4f:5f:a5:
be:d8:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:29:52 2025 by rpki-client