Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/79F6Y208nVPLjoQlLn300eKWKvA.roa
File: 79F6Y208nVPLjoQlLn300eKWKvA.roa (raw, json)
Hash identifier: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=
Subject key identifier: EF:D1:7A:63:6D:3C:9D:53:CB:8E:84:25:2E:7D:F4:D1:E2:96:2A:F0
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 01942445A5A6DCB563B74A47578F191C6E69
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/79F6Y208nVPLjoQlLn300eKWKvA.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56624
IP address blocks: 31.133.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a5:a6:dc:b5:63:b7:4a:47:57:8f:19:1c:6e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efd17a636d3c9d53cb8e84252e7df4d1e2962af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:49:8e:5f:c2:c7:7c:35:e3:e9:bd:43:3e:
e6:3d:b5:a4:b6:b6:d0:30:98:cf:29:cf:5a:72:89:
cc:3a:2a:2a:8f:da:ef:cd:cf:5f:cd:f6:f9:c9:9f:
e3:49:3f:7a:e2:9d:32:81:b6:24:aa:c9:c6:f0:0b:
3a:30:58:9f:25:e6:ad:66:1e:eb:ca:b1:c2:d2:90:
d6:21:99:b0:ea:bc:b0:e7:6d:bf:35:e2:df:3b:4a:
99:d4:e4:e5:56:eb:09:49:83:27:a3:a2:8b:a2:91:
d6:f7:9e:74:b9:1b:ef:f8:b3:0d:fc:76:95:26:a4:
fb:9d:19:f4:3e:c0:8b:34:fe:89:88:3c:36:e7:f0:
de:ef:e4:06:5e:ed:c0:66:d2:ae:7e:b6:a3:57:72:
a6:48:2e:99:dc:1c:d8:c8:03:35:92:a7:5b:9f:c1:
36:6b:bf:92:18:17:87:f8:03:75:ad:ce:30:91:bc:
f9:31:d5:17:bb:ff:40:f7:73:6e:fa:0f:93:68:c1:
18:93:64:10:56:c9:09:b7:e5:2e:05:09:51:7e:4f:
84:20:cf:2f:4d:5e:9b:f3:9e:1c:8b:d4:2e:a0:50:
20:9a:0a:5c:35:21:36:3b:bc:79:8a:40:5f:48:5d:
d7:54:06:cd:a6:70:5d:25:6d:ff:be:39:54:c6:dd:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D1:7A:63:6D:3C:9D:53:CB:8E:84:25:2E:7D:F4:D1:E2:96:2A:F0
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/79F6Y208nVPLjoQlLn300eKWKvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:98:00:21:fa:d9:49:a5:43:30:a9:83:b0:df:29:aa:8e:79:
09:a2:60:a9:69:af:f6:75:e6:e4:f7:57:f3:d4:62:6f:bd:da:
1e:62:b9:d0:d3:4e:1d:59:0c:f6:d4:30:44:b6:c6:22:aa:7e:
01:d5:6a:ec:98:bd:0f:f9:a1:cf:aa:fc:1b:ca:a6:7e:74:9d:
d5:af:68:09:94:78:44:b4:26:b0:e8:22:9a:d4:24:e2:af:e2:
f3:d7:ff:e6:ab:bd:fb:25:c7:a8:3d:1d:0d:0d:49:3a:af:bd:
1b:51:59:42:7f:73:0f:9e:37:dc:90:a1:67:60:90:c9:1d:07:
a7:9d:70:1f:83:9a:18:39:e8:a3:f8:39:1c:fa:43:29:f8:a8:
07:cd:d0:bb:d6:23:35:ef:21:a8:12:52:49:24:6b:55:1e:88:
1a:b1:fb:c8:68:46:97:1b:49:ad:d7:c0:0e:0e:f7:0d:60:dc:
0e:39:3d:33:30:f5:fb:a2:2b:b1:62:00:cb:fe:00:7b:ce:57:
7f:24:56:65:cc:b6:69:68:b4:83:38:4d:49:85:0b:47:9e:7a:
f3:fe:ba:dc:b9:65:59:19:19:99:e6:55:14:86:6a:e0:88:15:
c8:53:55:91:79:54:3e:da:29:b6:a3:1f:0f:28:77:44:b5:85:
7c:82:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 16:19:51 2025 by rpki-client