Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/j1BO9Furs7_Q3tvlbetVSRlAckY.roa
File: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (raw, json)
Hash identifier: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=
Subject key identifier: 8F:50:4E:F4:5B:AB:B3:BF:D0:DE:DB:E5:6D:EB:55:49:19:40:72:46
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 0194258ED16150F4D3BC7616C2764B68F5EC
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/j1BO9Furs7_Q3tvlbetVSRlAckY.roa
Signing time: Thu 02 Jan 2025 05:48:24 +0000
ROA not before: Thu 02 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212430
IP address blocks: 2001:67c:209c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d1:61:50:f4:d3:bc:76:16:c2:76:4b:68:f5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Jan 2 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f504ef45babb3bfd0dedbe56deb554919407246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:ba:35:31:b7:50:35:f4:c0:60:f7:ef:f2:
93:ca:ae:11:4a:61:29:a5:82:39:0b:18:8e:30:ea:
4e:28:d0:5d:73:f7:fb:92:34:a2:8b:d9:a9:95:1f:
5e:8d:51:8c:60:bf:e5:3d:d4:51:d8:27:fe:8a:dc:
e3:ea:bb:6f:47:f5:d1:ae:b2:22:1b:9d:53:8a:9f:
37:80:80:10:ac:69:ff:bb:cb:16:b3:56:d2:90:ad:
8d:99:4b:55:19:cc:47:d5:14:15:ed:2f:4c:a4:30:
53:0a:d0:97:76:1b:cc:12:43:3a:b8:de:bc:60:eb:
5d:be:98:32:6b:de:59:ab:03:1f:56:e2:e9:fb:51:
c1:a3:21:37:e9:bf:fd:c0:0f:ef:0b:34:2d:11:15:
a2:0d:9a:11:74:6b:03:64:e6:0d:60:3d:a3:62:56:
31:fb:c7:ca:be:df:81:7f:48:21:e8:4a:98:d5:c0:
d1:02:7f:34:1a:12:d0:eb:9b:d2:66:47:7a:8d:4c:
0f:47:db:b8:53:88:a1:a7:7a:1f:d5:dc:bd:e1:6e:
be:bc:73:b5:c2:39:38:76:0c:a7:13:5e:12:86:80:
41:7f:b8:ff:e3:4d:d3:f0:67:41:01:cd:64:ce:20:
e2:8a:8d:fb:2a:b4:fd:35:d4:8c:86:3e:b1:21:7e:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:4E:F4:5B:AB:B3:BF:D0:DE:DB:E5:6D:EB:55:49:19:40:72:46
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/j1BO9Furs7_Q3tvlbetVSRlAckY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:209c::/48
Signature Algorithm: sha256WithRSAEncryption
69:be:d1:e7:fe:22:50:18:d3:2f:b0:1a:05:67:63:9e:63:6c:
c4:cf:14:6e:d8:17:67:96:62:ad:8c:30:9b:f6:16:b1:0b:3b:
1c:4d:3f:2b:6b:e0:02:b2:f2:5b:64:c9:2d:a4:3e:ad:45:99:
f5:09:d3:a4:86:6b:50:36:7f:47:c9:d3:e5:58:c5:2d:2c:48:
58:97:5a:21:30:6d:cf:1b:80:bc:9d:e8:13:fd:07:b9:bd:c2:
5d:f5:2a:18:63:c1:26:a5:e2:13:b6:1a:39:8b:04:73:d6:c0:
25:b9:20:5b:c3:01:7f:cc:57:7c:78:56:8a:0e:85:b7:c9:0e:
b4:5b:bb:f2:0a:c4:3c:8c:cc:2f:be:67:13:26:3b:f6:86:3d:
69:2e:1b:46:ea:15:b1:7a:0e:83:0e:b6:b3:e7:23:e5:f4:53:
db:dc:2e:27:9d:2b:d2:0c:ca:7b:71:f8:d8:ff:eb:d7:03:ae:
ec:c3:1f:4a:1a:59:ea:97:35:24:c6:df:7c:1f:15:34:ee:93:
c4:9c:46:df:b0:ab:ec:f4:22:fb:41:34:67:f1:4a:00:2f:df:
3c:d3:8b:4c:81:eb:be:98:14:00:94:53:df:3a:88:75:9e:9e:
2b:4f:41:ad:fd:40:d7:e2:e5:43:ce:2b:66:1b:90:7b:f7:22:
44:90:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:10 2025 by rpki-client