Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/iDjdph5PLZc9UolFIQRqVji6vII.roa
File: iDjdph5PLZc9UolFIQRqVji6vII.roa (raw, json)
Hash identifier: iBRRjrv+DLQQpa8QabPAetjWPrtLGlWJ6l98+13EMEw=
Subject key identifier: 88:38:DD:A6:1E:4F:2D:97:3D:52:89:45:21:04:6A:56:38:BA:BC:82
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019423D7466BE7C98DAD85E02E72BFFFA9B8
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/iDjdph5PLZc9UolFIQRqVji6vII.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62610
IP address blocks: 2a0b:21c1:600c::/46 maxlen: 46
2a0b:21c1:6013::/48 maxlen: 48
2a0b:21c1:6014::/48 maxlen: 48
2a0b:21c1:6015::/48 maxlen: 48
2a0b:21c1:6016::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:46:6b:e7:c9:8d:ad:85:e0:2e:72:bf:ff:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8838dda61e4f2d973d52894521046a5638babc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:39:15:ce:88:85:f6:1e:56:a7:b5:bd:31:bd:
d5:94:9d:9b:cf:96:62:85:f8:e5:b8:6a:63:50:4f:
0b:20:98:89:fc:f8:4d:9d:49:a9:02:8c:af:4e:6c:
5f:8c:2f:69:2d:e8:73:e0:fb:5f:95:4f:e7:29:d9:
4f:40:2a:8d:76:b8:6b:8a:c1:0e:77:bf:17:16:a7:
a1:72:8f:7d:9d:6e:de:49:25:ea:0f:fc:78:4d:bf:
15:86:d5:c6:f3:d4:ef:99:c4:0e:03:9d:c7:ad:55:
76:42:b4:e2:e1:4c:1b:cf:ef:4a:27:4e:f8:a2:a7:
ca:23:57:39:e5:46:b3:3d:7d:7b:8a:a2:0e:51:e2:
bb:38:05:21:fd:76:62:6b:67:06:64:d2:65:7f:dd:
63:26:80:76:1c:8f:ab:15:f6:c9:14:62:47:cd:d7:
52:95:6a:55:dd:3b:f2:60:d3:a9:be:ad:58:44:a9:
94:83:95:42:b4:fc:32:1f:4a:e2:42:d7:65:0d:b4:
2f:49:1f:56:0a:e7:07:99:39:b2:71:25:2a:80:62:
14:03:14:0a:aa:00:f5:ec:d8:35:97:12:4b:82:6e:
83:7d:09:24:33:75:68:07:07:f1:60:90:4e:3c:d0:
65:ac:4b:9a:7e:39:61:95:e1:cc:47:d0:d8:7a:f7:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:DD:A6:1E:4F:2D:97:3D:52:89:45:21:04:6A:56:38:BA:BC:82
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/iDjdph5PLZc9UolFIQRqVji6vII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:600c::/46
2a0b:21c1:6013::-2a0b:21c1:6016:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
88:2d:af:00:05:71:80:f4:59:62:5c:de:15:16:41:3b:0d:49:
bf:5c:0a:b5:2b:79:6b:ce:6b:25:37:55:d1:54:1d:f9:e6:96:
f1:e7:d2:d2:c2:8d:f2:93:4e:06:06:aa:15:eb:7b:14:a1:8f:
04:b6:55:41:18:67:de:01:34:b3:63:33:0c:21:3e:5c:cc:d4:
63:87:01:54:86:44:3d:e5:fa:59:b9:b1:7e:c6:a7:0b:54:6f:
e8:c2:07:75:83:d9:d5:5e:e5:1d:94:94:b3:90:b6:ad:db:cd:
df:cf:77:c3:46:0a:4a:be:7d:ba:25:bd:25:c4:5a:50:d0:48:
2a:d0:21:e6:f3:d8:8f:77:62:78:49:c3:46:51:8d:89:41:7c:
34:5d:8d:86:53:ec:dc:42:92:0a:05:63:0c:f2:8e:67:c7:98:
11:02:2d:6c:09:f2:0e:02:07:dd:ad:ce:da:b6:19:68:f1:f4:
da:de:49:fd:3c:8a:db:1e:23:73:ca:4d:ff:a9:43:0e:31:dc:
f1:5f:9e:0a:2c:58:52:3b:2d:64:7f:94:6a:40:67:11:f3:5f:
70:39:08:74:e6:20:fa:8d:85:e2:3d:9e:58:87:39:b4:0c:ed:
05:79:10:0a:00:c6:a9:c6:4a:19:45:bc:f8:f7:99:bd:79:9f:
64:a6:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:41:46 2025 by rpki-client