Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/hfRFZKITz5hu-gPvGNJloOjkOMc.roa
File: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (raw, json)
Hash identifier: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=
Subject key identifier: 85:F4:45:64:A2:13:CF:98:6E:FA:03:EF:18:D2:65:A0:E8:E4:38:C7
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 01942368D876613B3BCF2A41FEA7AA375ACA
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/hfRFZKITz5hu-gPvGNJloOjkOMc.roa
Signing time: Wed 01 Jan 2025 19:47:41 +0000
ROA not before: Wed 01 Jan 2025 19:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202731
IP address blocks: 2001:678:1e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d8:76:61:3b:3b:cf:2a:41:fe:a7:aa:37:5a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Jan 1 19:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f44564a213cf986efa03ef18d265a0e8e438c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:50:f2:8b:3e:93:17:27:d7:51:f7:80:49:
fb:34:98:79:4a:a7:c6:5e:41:ca:83:66:32:19:1e:
f2:81:59:06:c9:a8:f0:1d:44:f0:e9:f0:77:a9:cf:
88:7b:20:89:5c:62:f1:92:84:f2:68:55:a2:fa:da:
d5:80:b1:11:b2:72:fd:ee:9e:fc:77:b1:2e:c9:d0:
fe:f9:65:d0:8f:94:ee:21:d8:fb:c0:7a:b4:8c:57:
0e:e1:05:c1:01:13:9f:bf:87:6a:2a:8c:69:0c:6d:
ba:54:05:62:03:2c:2d:a0:d8:ec:65:41:1c:85:d3:
16:c6:64:bc:b1:96:26:65:e7:77:8a:02:76:03:7d:
3b:8f:95:fd:77:fd:20:c3:16:86:84:f7:02:7f:ac:
f9:b7:83:88:68:90:eb:80:11:b6:0e:de:aa:e7:b3:
e6:01:bb:a8:86:3d:3b:02:51:9e:7a:14:bf:88:61:
1b:b9:80:0f:d6:70:a5:e8:a8:1a:b3:86:5b:d3:de:
b1:6e:2c:97:32:ea:66:57:19:6f:ef:50:26:b4:1c:
bf:ff:5a:3d:4d:2f:e4:38:b8:c5:d2:8c:0c:12:0e:
46:ca:a9:9d:cd:06:4d:37:a3:a8:da:6c:df:75:90:
da:6f:72:7c:3a:f0:a4:61:ab:cb:62:6d:1f:6d:aa:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F4:45:64:A2:13:CF:98:6E:FA:03:EF:18:D2:65:A0:E8:E4:38:C7
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/hfRFZKITz5hu-gPvGNJloOjkOMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1e4::/48
Signature Algorithm: sha256WithRSAEncryption
c7:97:79:0e:da:e3:f4:11:bd:47:44:b3:9c:9b:63:09:bb:86:
23:56:38:32:27:d5:6a:1c:0e:6b:4a:54:da:5d:6a:a6:62:40:
a3:e0:a6:4c:f9:17:c6:95:f0:f4:0b:9f:ad:f2:31:30:d1:0e:
b3:d2:84:22:43:56:b4:cb:c7:5a:53:48:ac:f9:e9:88:18:78:
4f:5e:f3:fe:48:09:3e:e5:ba:8d:31:3f:b1:6f:6d:f4:e4:5f:
c8:3b:8d:f9:bc:57:36:d4:64:00:5a:f2:5a:db:9e:a7:7e:f5:
cf:f5:46:08:8a:6c:41:7e:5a:ba:b3:f7:87:96:51:a5:84:a9:
2a:ea:da:92:0b:03:f9:a0:f8:08:63:0e:9c:fa:f1:dc:32:29:
7a:8d:55:23:ea:08:99:b2:cf:ed:4d:54:20:6d:73:4f:c6:0c:
83:fb:3b:e1:97:c1:32:bd:05:f4:fa:2b:49:67:60:1c:c7:83:
eb:e9:d8:3d:07:48:45:a4:ab:ee:76:22:d9:1e:17:e4:ff:48:
c7:ad:db:29:3a:6b:43:97:18:bb:cd:76:62:a9:02:dd:c7:4a:
16:8f:31:55:e6:8f:f7:ce:e3:91:e2:5a:65:ba:50:f6:89:6d:
ff:08:42:a3:b7:8c:8d:4c:bd:ce:ff:f0:7b:9d:9b:01:4f:2d:
7f:e6:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:08:11 2025 by rpki-client