Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/jcrTKRLVafxbmhoPzjEKfBszAmk.roa
File: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (raw, json)
Hash identifier: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=
Subject key identifier: 8D:CA:D3:29:12:D5:69:FC:5B:9A:1A:0F:CE:31:0A:7C:1B:33:02:69
Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial: 019421B2538702E1856E30881A44929832F9
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/jcrTKRLVafxbmhoPzjEKfBszAmk.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38974
IP address blocks: 2001:678:cf8::/48 maxlen: 48
2001:67c:1708::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:53:87:02:e1:85:6e:30:88:1a:44:92:98:32:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dcad32912d569fc5b9a1a0fce310a7c1b330269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:00:5b:17:dd:db:fa:2b:61:e4:3b:9c:fb:
6c:d9:cc:f9:55:48:a2:1c:30:28:f7:f5:3b:ce:13:
7b:ea:d1:71:8b:b4:4b:3a:df:9a:4b:d8:02:f8:60:
f1:56:6e:1c:c9:01:4e:f7:86:67:43:cd:e3:91:bc:
a4:a3:9e:53:b4:34:07:e2:9b:be:de:2b:e7:69:be:
32:e1:b8:48:12:65:18:e8:e0:92:64:91:45:57:02:
cb:22:b3:2e:41:83:ad:20:b8:4a:21:3e:ce:ed:72:
6d:89:11:92:ca:22:d5:7a:4d:5a:be:3f:f5:fe:78:
cf:f5:01:a8:cf:0e:60:92:c4:50:68:dd:0b:da:00:
d7:a8:01:d3:be:6c:da:dc:c1:ea:fb:5b:bc:88:14:
e4:b7:75:b8:dc:72:56:98:6d:cd:18:d5:8a:82:ce:
00:fd:1b:20:ea:f8:d3:7a:62:b8:66:a5:7e:40:d9:
9f:31:18:bb:94:26:92:20:22:60:b1:b3:5b:a0:6d:
41:9c:41:3a:14:bc:a8:89:ba:26:e2:75:4c:18:f4:
84:b6:7b:c5:09:b0:d8:8e:ec:b9:4f:3a:03:0d:54:
69:92:c9:ac:40:eb:8f:6c:0c:87:17:fb:69:8a:b3:
9e:1e:8e:6d:b8:e3:42:20:78:23:c8:6f:91:62:65:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CA:D3:29:12:D5:69:FC:5B:9A:1A:0F:CE:31:0A:7C:1B:33:02:69
X509v3 Authority Key Identifier:
keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/jcrTKRLVafxbmhoPzjEKfBszAmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cf8::/48
2001:67c:1708::/48
Signature Algorithm: sha256WithRSAEncryption
2d:f5:f9:1b:be:ab:9a:0c:e0:d0:25:50:15:f7:ae:97:0d:e5:
be:c8:9e:45:1c:57:a7:c8:d6:18:c5:51:32:61:ed:fa:08:5b:
c1:c5:10:cc:d6:15:2f:41:7c:8a:59:ea:1f:b4:6e:3c:82:f0:
73:72:8f:21:77:ed:9d:82:8c:18:80:b8:9c:a5:be:fc:4f:6b:
4f:b1:63:c0:ce:7f:6d:f9:0c:63:77:0d:11:fc:bc:30:1b:38:
93:f8:14:55:61:c7:fa:ca:9a:04:27:52:09:45:bb:b8:85:e7:
8b:69:db:b2:62:8b:4f:53:68:d0:af:60:20:09:e2:9a:c2:e5:
55:81:61:85:0d:78:79:6d:5e:0a:ec:54:e5:22:4d:49:e9:b2:
f2:dc:29:83:cf:35:18:19:d4:78:71:07:46:25:d5:2a:b1:b2:
e7:ab:50:c0:96:3c:e3:b5:35:61:e1:05:40:91:1d:b7:37:06:
9f:c9:51:cc:b2:68:fb:77:d7:3f:1c:a4:41:dc:b1:66:5a:4e:
96:35:9c:aa:33:39:5a:b9:e1:9a:fd:f2:74:24:de:aa:fa:a7:
e0:1b:89:a9:5e:20:1e:20:dc:2d:b0:99:c5:81:fc:b5:9e:2e:
55:c1:03:1b:3d:74:de:86:12:27:08:14:6d:0a:ef:ba:e7:d9:
0b:3b:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:39:38 2025 by rpki-client