Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XmlEpJYUWq_QrVOk0RdML9gVWww.roa
File: XmlEpJYUWq_QrVOk0RdML9gVWww.roa (raw, json)
Hash identifier: 7r5koviYViN5/t5r+b3MEFyApg9vss/v67GKdcp0I5M=
Subject key identifier: 5E:69:44:A4:96:14:5A:AF:D0:AD:53:A4:D1:17:4C:2F:D8:15:5B:0C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01965CC3139232C98636CC321E6F85165770
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XmlEpJYUWq_QrVOk0RdML9gVWww.roa
Signing time: Tue 22 Apr 2025 09:10:10 +0000
ROA not before: Tue 22 Apr 2025 09:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 2a09:7500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:c3:13:92:32:c9:86:36:cc:32:1e:6f:85:16:57:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 22 09:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e6944a496145aafd0ad53a4d1174c2fd8155b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:67:c0:94:3a:c0:9c:99:5a:84:38:99:d1:
86:f5:dd:fb:a1:11:ec:1d:3a:92:26:78:28:f3:8d:
4c:f9:5b:c9:b0:f1:f9:bd:8a:03:de:95:4a:ca:9a:
d7:2c:f5:3e:fb:11:4a:44:b9:cc:c2:83:80:62:85:
25:33:68:70:2c:ea:6e:8b:b2:ab:db:e9:a3:a8:13:
b4:2d:b7:96:1f:e4:b6:b6:8a:93:7a:ea:0c:5c:fe:
3f:f0:90:bd:ce:20:d0:80:a6:e7:a6:b3:af:f4:dc:
ad:1b:8a:95:22:14:4e:49:5d:21:73:8d:56:a8:19:
a9:48:66:ca:63:9e:ff:ff:f6:3f:50:8c:fe:b6:49:
5b:d2:77:c2:0b:14:29:23:5c:06:b1:5e:2b:e2:74:
49:1c:ce:5e:e2:7f:bf:42:38:1c:5c:1f:b3:15:92:
1c:61:35:c4:55:7b:ba:c6:90:19:df:90:38:e5:7d:
80:f7:c0:80:51:2f:b0:4e:e0:f0:98:d6:ad:48:d7:
47:25:3a:e5:fa:c4:5e:2a:a1:6e:87:78:42:2f:f0:
fa:b2:71:50:d1:8f:ae:a1:96:8b:d4:7a:c4:33:a0:
6f:4f:03:34:f7:0b:e2:b7:a7:29:8f:ae:f6:93:b6:
d9:0c:14:e8:1c:b2:be:e2:30:77:15:ec:7a:71:1f:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:44:A4:96:14:5A:AF:D0:AD:53:A4:D1:17:4C:2F:D8:15:5B:0C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XmlEpJYUWq_QrVOk0RdML9gVWww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7500::/29
Signature Algorithm: sha256WithRSAEncryption
12:f9:c3:76:bf:36:76:f2:2a:ee:d6:2b:d9:74:66:14:32:8f:
03:74:16:53:7f:73:91:26:20:29:25:02:0b:90:ce:53:dd:82:
34:40:5f:2a:02:59:7f:5e:71:50:5e:75:4c:9c:8f:02:0b:c5:
3a:95:71:a3:9c:41:ad:1e:83:86:36:4d:5a:5b:4a:0f:7d:77:
ff:d0:89:69:ae:01:9a:ee:d9:6e:2d:4f:4f:70:fd:6a:3b:89:
7a:a5:4d:50:9a:ca:3f:80:aa:be:59:b2:b2:1c:98:6e:cd:de:
3e:15:0b:23:ed:1c:10:f1:d5:29:03:3f:05:b6:0c:77:a6:c1:
10:29:01:03:6a:d4:41:ab:c4:f6:06:2b:90:f1:e6:21:c6:de:
a2:2c:18:28:7f:83:68:43:8f:5f:14:12:c4:b0:80:38:9e:40:
1f:0e:6b:87:80:d5:6e:46:5c:b9:36:13:d8:cc:bf:e0:b7:dc:
60:05:ad:d2:19:91:41:4e:63:93:58:52:d5:18:99:fc:c1:c6:
79:d2:0b:09:15:6b:3a:a4:b2:42:b8:51:40:62:4a:d5:57:68:
86:8c:39:17:0d:66:80:ac:e2:c3:06:1c:84:aa:e1:f2:01:a0:
c0:ad:cf:28:8a:58:58:d1:55:6b:80:85:63:96:f7:ff:9d:4c:
bf:c7:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:12:32 2025 by rpki-client