Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/depCEchOEDSTxB-t7sFwEnJVYFU.roa
File: depCEchOEDSTxB-t7sFwEnJVYFU.roa (raw, json)
Hash identifier: 4VUgeeM9jgJLmxqt9ZkedCI0PpL/veNIwfgv+hW4muY=
Subject key identifier: 75:EA:42:11:C8:4E:10:34:93:C4:1F:AD:EE:C1:70:12:72:55:60:55
Certificate issuer: /CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
Certificate serial: 019422FB0A2A01E18AF3C7CDC7360AB1BBF5
Authority key identifier: 5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/depCEchOEDSTxB-t7sFwEnJVYFU.roa
Signing time: Wed 01 Jan 2025 17:47:44 +0000
ROA not before: Wed 01 Jan 2025 17:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210833
IP address blocks: 2001:67c:828::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0a:2a:01:e1:8a:f3:c7:cd:c7:36:0a:b1:bb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
Validity
Not Before: Jan 1 17:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75ea4211c84e103493c41fadeec1701272556055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:3b:99:7a:bb:53:3d:6b:1e:92:82:42:46:
9e:de:e8:85:c3:42:78:5e:93:58:72:06:33:8c:a3:
2e:93:d3:48:2e:06:45:66:51:55:e2:da:88:96:e2:
9d:f1:8d:31:a2:65:80:33:c0:e0:f0:a9:58:e9:5a:
db:8d:93:3e:ef:0e:3c:3d:23:e8:fb:1d:cb:45:d5:
90:b5:a0:30:bd:4a:a8:50:ad:c2:6c:b2:d9:31:4c:
0e:96:51:76:b2:d5:5a:d2:48:8a:93:c9:f7:f8:88:
cb:7d:b7:60:16:0f:bd:81:af:3b:a8:3f:88:16:7a:
93:69:29:b9:d3:d7:09:7d:0b:4c:1d:1b:b4:76:ea:
48:3b:83:6c:cd:74:0e:bb:bf:04:24:a7:d5:08:0d:
02:0b:da:94:ef:b3:aa:97:9e:19:c1:a3:85:1f:e1:
b3:b7:32:3a:41:bb:df:6c:a9:10:75:24:7f:11:4b:
23:37:0b:c2:85:47:ee:35:07:ba:a0:b8:4e:77:70:
06:4b:e1:28:71:b6:aa:83:2d:d0:4a:e6:e4:95:c5:
12:c9:ef:d0:f9:e0:82:32:29:72:c7:1a:11:1a:b0:
7d:8b:cb:b6:67:11:fc:e2:1f:a9:c9:4d:07:c2:4b:
e5:93:02:df:ed:a3:29:3b:58:fb:fd:41:cd:20:f2:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EA:42:11:C8:4E:10:34:93:C4:1F:AD:EE:C1:70:12:72:55:60:55
X509v3 Authority Key Identifier:
keyid:5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/depCEchOEDSTxB-t7sFwEnJVYFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:828::/48
Signature Algorithm: sha256WithRSAEncryption
9f:ad:10:4f:9a:af:83:2f:0e:ff:41:0a:35:12:30:90:a3:7c:
19:68:61:44:33:5c:ad:2b:13:71:c4:e7:58:0d:0a:70:f2:f2:
39:0e:da:93:59:ef:eb:65:48:72:6b:c6:d2:a4:67:c8:39:f0:
80:51:ee:ba:c8:70:41:98:54:75:dd:b4:58:36:b2:be:b4:74:
c5:8e:5e:a2:46:8f:3e:39:e1:98:65:34:a1:1f:a6:ac:fa:45:
23:ba:32:cb:c1:ac:45:f1:0c:2e:63:a6:8a:9f:d7:e7:1d:57:
c4:41:f9:3b:06:bc:c3:30:1b:d5:9d:e8:9b:13:1c:a2:d0:b6:
99:7b:b5:1a:3f:02:7b:e2:d5:72:b2:2f:0f:9d:c9:61:25:27:
e7:fa:91:44:5d:ea:a0:6b:d8:57:4b:95:00:d4:4e:b0:21:38:
66:d0:18:68:dd:20:93:48:af:d1:ea:8f:c9:32:c1:b5:4d:71:
7e:56:59:e4:8b:46:c1:e1:1e:29:fd:29:f9:88:27:6a:21:f1:
62:8d:73:2d:2f:6e:70:85:25:7a:09:cc:b5:ea:47:89:06:25:
8d:70:8e:38:6e:e7:d1:ca:84:2a:6c:6d:33:a5:d8:89:e1:e1:
3b:b6:0f:f7:5f:be:0a:2e:ac:81:88:26:3b:bf:b3:10:d1:20:
1e:44:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:07:32 2025 by rpki-client