Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/jBg4c1TddaMZ79OO2ACO6rgKQkE.roa
File: jBg4c1TddaMZ79OO2ACO6rgKQkE.roa (raw, json)
Hash identifier: vxMjeBuQHvoGxQ3EbvzgsnvZ7fj/adVRxxvAS0tcfsE=
Subject key identifier: 8C:18:38:73:54:DD:75:A3:19:EF:D3:8E:D8:00:8E:EA:B8:0A:42:41
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01942067B7BCB3466C5791AE1D9281959E6C
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/jBg4c1TddaMZ79OO2ACO6rgKQkE.roa
Signing time: Wed 01 Jan 2025 05:47:35 +0000
ROA not before: Wed 01 Jan 2025 05:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12897
IP address blocks: 2001:678:804::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b7:bc:b3:46:6c:57:91:ae:1d:92:81:95:9e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c18387354dd75a319efd38ed8008eeab80a4241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:7e:10:ee:d5:a6:9f:68:b1:27:cc:ee:e9:
33:e2:90:83:67:9b:e1:98:c8:65:01:da:76:36:c9:
83:13:47:5a:ad:c5:a6:6a:9c:16:e3:d7:9a:f1:ff:
1f:df:df:79:f5:bd:71:ed:a1:ec:a8:e6:28:8e:06:
b7:24:ca:a1:2b:cb:8a:15:d9:7f:58:36:5e:a5:44:
28:98:d4:bf:e6:51:bd:e7:e2:64:29:d6:68:e4:56:
97:e1:1f:a1:69:35:a0:17:b4:e2:ee:d4:0b:a3:a7:
13:5c:3a:07:58:50:89:69:d9:17:87:79:36:89:61:
17:89:9a:9f:03:f3:66:2b:e0:f6:bd:3a:a0:50:5a:
25:fe:49:dd:c8:4c:25:0f:6f:4f:2a:f5:d6:8f:85:
a5:fd:9c:95:68:a3:d5:e9:50:d2:4b:0a:0c:9e:43:
e5:55:29:45:fa:e6:61:4d:86:12:21:c9:3f:4c:79:
6f:af:a3:01:73:4c:6e:d3:66:5b:c5:d6:2a:8c:40:
0c:87:b7:3b:df:51:8b:3d:b3:b9:76:57:7f:e3:27:
6e:17:8a:46:df:77:1f:49:21:e4:58:d3:81:95:21:
7b:05:1d:3c:dc:1c:96:44:c4:a7:a1:3e:be:5f:ea:
69:1a:18:05:e0:e5:c5:ba:54:80:f1:0a:0b:d0:d9:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:38:73:54:DD:75:A3:19:EF:D3:8E:D8:00:8E:EA:B8:0A:42:41
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/jBg4c1TddaMZ79OO2ACO6rgKQkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:804::/48
Signature Algorithm: sha256WithRSAEncryption
28:0c:d6:ad:f5:c3:c2:24:aa:96:ea:80:aa:75:a5:f1:10:04:
2b:5e:41:d9:0f:a3:48:35:d3:db:02:0b:1f:c3:14:c1:3e:4b:
67:f5:b4:e7:ea:9c:c3:1f:71:57:2e:d0:a9:da:c7:ea:4b:08:
3e:7f:4c:d7:24:04:05:6f:99:44:3c:b8:a4:6d:73:59:ad:94:
9c:e0:14:ce:80:bc:0f:ed:0c:25:1b:11:4d:0a:e2:8e:d5:cd:
ca:14:72:51:de:c5:c0:d2:2e:de:e2:0c:fa:75:ef:0e:cf:32:
15:97:e7:fa:df:f3:ae:20:8a:4f:a3:01:21:f1:48:67:7b:c0:
9e:e3:4e:b3:2f:e5:8f:27:1b:04:19:bc:85:cb:8c:e2:04:04:
35:ce:f7:d0:7c:73:20:81:fb:75:84:f7:28:e2:c1:99:54:f8:
73:0b:c8:87:3d:2d:fa:c5:53:89:a1:77:2b:3c:75:06:71:a3:
95:47:24:de:ec:a2:af:4e:71:c7:b1:d3:05:64:fc:e7:16:e2:
a6:62:12:f3:8a:4a:2a:82:86:ef:d6:74:74:2f:c6:fd:d8:93:
6f:94:66:f9:f0:c7:04:cd:c8:8f:b7:6a:70:40:88:28:ed:16:
26:6f:5b:1a:f7:c4:1c:94:21:c4:0e:4c:39:91:df:a0:1d:1e:
22:77:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:38:26 2025 by rpki-client