Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/FURjaUQ0FEbchTkhcxeSRtrU1s4.roa
File: FURjaUQ0FEbchTkhcxeSRtrU1s4.roa (raw, json)
Hash identifier: jQVRJAAAyS8YQn84udlC/TaV1qdxFSfvYs7sBZO1tP0=
Subject key identifier: 15:44:63:69:44:34:14:46:DC:85:39:21:73:17:92:46:DA:D4:D6:CE
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 019421B22015CD89B105B3E89DC53B07A55D
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/FURjaUQ0FEbchTkhcxeSRtrU1s4.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46997
IP address blocks: 2a02:7080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:20:15:cd:89:b1:05:b3:e8:9d:c5:3b:07:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1544636944341446dc85392173179246dad4d6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:29:10:c3:0b:78:ed:06:38:1f:58:3a:9c:61:
f5:04:64:3a:ff:dc:1f:25:ae:aa:64:bc:24:fb:b4:
94:a5:3c:6f:7a:f6:23:8b:c1:66:c5:ca:12:75:14:
44:b2:33:da:00:16:62:05:1b:f7:50:41:d3:e6:11:
3f:16:43:cd:4c:80:8f:5c:ae:d0:f6:10:ff:f7:29:
ab:b8:1e:de:11:6d:82:43:7d:cc:be:57:97:e1:25:
a4:ba:25:84:91:81:8a:2c:29:af:3c:5b:9f:29:98:
bc:73:d3:55:86:7b:9c:9f:1b:17:20:38:8b:cc:29:
81:4f:5a:ec:28:b1:24:f9:1f:d2:29:a6:88:01:cb:
f0:02:bc:b1:9d:3f:74:d0:06:80:48:70:9e:40:fc:
0a:db:1c:a9:d4:a6:ce:a1:ae:8b:d0:cb:dd:af:36:
bd:43:0e:ca:c2:7d:1b:cc:0b:c6:1b:70:e1:b6:d8:
2e:23:e2:fa:c9:61:c1:44:56:0b:f1:c2:39:87:80:
17:1b:94:18:e3:b1:13:ae:2b:33:cb:7e:03:57:eb:
20:69:76:6d:ee:d7:4f:92:f3:12:84:59:3b:4f:58:
54:45:52:a6:7f:45:9e:f5:95:b8:9a:e4:87:4a:db:
61:07:35:6b:81:1c:ed:55:c3:4d:3d:22:2c:5b:5e:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:44:63:69:44:34:14:46:DC:85:39:21:73:17:92:46:DA:D4:D6:CE
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/FURjaUQ0FEbchTkhcxeSRtrU1s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7080::/48
Signature Algorithm: sha256WithRSAEncryption
d0:0d:ed:77:24:36:c1:b7:ab:16:0d:5c:91:56:a7:82:f4:20:
c2:85:79:22:13:ad:84:e0:f8:80:cf:81:ce:1a:68:66:26:9d:
d3:22:44:1c:02:ef:a2:fe:68:1a:44:77:43:49:35:a1:19:b2:
ad:40:22:d4:5d:7b:2b:32:3e:13:02:c0:61:13:72:64:4d:d4:
3c:16:db:32:9b:0e:1c:e0:66:57:81:a3:7f:9b:72:12:b0:b6:
6c:d6:5b:09:b9:6f:dd:e0:3d:a8:9f:0d:85:e4:88:b7:e7:27:
8e:c3:29:fe:05:74:e5:10:3a:cb:b4:a4:3d:61:91:d9:b6:a8:
a6:f4:be:79:dc:6b:29:95:b2:11:d7:91:0a:c6:61:b6:61:8a:
1f:91:b5:29:b3:66:bf:04:08:72:6f:30:0f:d2:b1:4f:4d:22:
42:98:e1:b3:0e:a1:20:25:ce:ec:53:3e:5d:94:93:28:cf:28:
58:a7:ec:92:42:4f:b6:fc:97:bb:65:d0:ff:ff:e2:76:29:30:
9d:42:17:7f:27:dc:f8:2a:c9:3a:b5:33:f2:97:cf:e2:f3:a9:
41:8d:67:03:c6:ad:de:b3:86:dd:9e:87:55:11:49:e5:c1:0e:
a7:e8:01:74:76:9f:d5:d1:7f:9e:64:d2:57:31:94:56:2e:ec:
40:1f:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:58:33 2025 by rpki-client