Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/8SOVzbdZRi1TiXuPdQBPQag2b1I.roa
File: 8SOVzbdZRi1TiXuPdQBPQag2b1I.roa (raw, json)
Hash identifier: 4UxgH1Bm5rLISlPUt1abtwizcDNcCBaAAK4mH1Wxzxk=
Subject key identifier: F1:23:95:CD:B7:59:46:2D:53:89:7B:8F:75:00:4F:41:A8:36:6F:52
Certificate issuer: /CN=843cf5bb876b772b7ade432905cb696f134caa39
Certificate serial: 019427B5534244B1E27D1F3DC768CD3BCAAA
Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/8SOVzbdZRi1TiXuPdQBPQag2b1I.roa
Signing time: Thu 02 Jan 2025 15:49:42 +0000
ROA not before: Thu 02 Jan 2025 15:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207901
IP address blocks: 2a09:5a00::/29 maxlen: 48
2a09:5a00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:53:42:44:b1:e2:7d:1f:3d:c7:68:cd:3b:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f12395cdb759462d53897b8f75004f41a8366f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:26:5b:f6:c1:f1:78:2a:59:4e:d6:29:c8:
92:6d:7b:60:4e:8f:cc:30:e5:1c:23:00:bf:26:9e:
71:ce:c4:ca:1c:87:08:08:65:2d:46:f4:f9:10:dc:
99:2d:28:29:7e:79:4b:6e:22:b5:4b:92:81:d9:07:
97:a7:4b:0f:ef:f1:d2:b3:5a:bc:31:e8:fd:1d:a8:
a3:6c:74:ec:cc:5d:8a:14:74:b3:eb:0d:f1:7e:24:
2b:6c:26:3f:18:e9:59:86:f4:71:db:dc:42:28:3e:
1d:e0:98:da:d3:7d:8a:98:eb:69:89:e7:55:96:c3:
4d:1f:ea:cb:33:6a:64:b0:1f:40:92:b6:4f:72:31:
50:27:db:c9:e0:66:a3:aa:cd:19:fc:59:f3:02:04:
e7:44:b5:56:90:1b:88:31:93:6e:ae:2d:24:97:e2:
e7:51:04:d7:4f:76:dd:48:27:ed:12:b5:75:42:5a:
29:20:2b:3d:b4:f2:a1:c0:61:0b:ac:1c:eb:4e:ed:
db:2f:ee:0e:dc:8b:fb:1d:6f:59:e8:9d:e9:00:df:
fd:22:ad:e4:60:1c:8b:e8:5a:c4:16:cf:85:62:28:
37:09:8d:4f:d2:0e:f5:6e:f1:ab:4c:6a:8a:29:b3:
49:10:49:f4:e8:dd:5d:7f:0b:ab:51:10:28:bc:93:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:95:CD:B7:59:46:2D:53:89:7B:8F:75:00:4F:41:A8:36:6F:52
X509v3 Authority Key Identifier:
keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/8SOVzbdZRi1TiXuPdQBPQag2b1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
2c:d4:95:b4:5b:01:95:d7:85:54:a9:87:6e:34:6e:64:09:95:
56:fb:5f:92:e0:63:66:cc:2c:f6:0a:d1:a0:b6:c3:0b:3d:af:
cc:ac:ea:71:d5:2d:e8:f4:a8:aa:06:df:3b:b9:8d:1c:9b:21:
c1:d8:d8:9d:b9:b9:b8:8f:5e:84:39:6e:42:fa:a5:b9:a0:4a:
d0:7a:1d:d2:4e:37:13:33:25:9a:69:69:60:5c:56:f4:dc:5a:
67:d0:0b:f5:10:86:6a:13:56:fb:9e:5e:45:1b:12:d5:57:e5:
65:4e:13:84:98:08:e7:9f:d7:fb:5f:e3:7d:78:f5:75:d1:78:
86:91:58:a3:90:29:9d:48:9d:0d:ac:6d:5d:7e:06:07:97:f6:
0f:74:a8:ff:08:d2:63:82:ca:0b:bc:d0:7d:0f:6f:0a:ea:94:
e7:9d:3d:98:b9:be:4d:5c:40:4f:3e:35:42:58:d4:e3:5a:24:
7c:e9:52:7a:44:aa:a8:17:ba:82:ff:e5:18:09:21:f7:f8:73:
f9:44:99:17:16:61:22:90:7a:3f:9a:b9:7e:11:c6:2b:90:b6:
b2:27:06:0e:f8:66:8b:fc:9b:e7:a4:59:80:fd:36:81:0b:e2:
74:59:c8:0b:73:23:1a:37:49:7d:36:d3:f1:18:9d:97:bf:5a:
81:68:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:55 2025 by rpki-client