Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/psb7_FoF9tBnDB6tY5GqWOvVJFk.roa
File: psb7_FoF9tBnDB6tY5GqWOvVJFk.roa (raw, json)
Hash identifier: VNe9Mli14Tvo817wNnFl35Vg2+YLvG6cgRRigjOYMS0=
Subject key identifier: A6:C6:FB:FC:5A:05:F6:D0:67:0C:1E:AD:63:91:AA:58:EB:D5:24:59
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 019421444DBB37CE16CCE841738710C8DCAB
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/psb7_FoF9tBnDB6tY5GqWOvVJFk.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 2001:67c:4f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4d:bb:37:ce:16:cc:e8:41:73:87:10:c8:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6c6fbfc5a05f6d0670c1ead6391aa58ebd52459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:67:ff:30:01:26:e7:45:86:ea:c7:7b:04:
70:02:57:af:eb:d4:76:ff:33:76:d4:7a:52:35:9d:
ab:15:90:0d:9d:38:ef:0b:50:fb:5b:bb:40:8d:99:
53:ed:45:0c:c8:83:70:37:80:34:14:2e:76:5b:40:
13:83:e1:ae:ce:c2:e4:1f:c5:08:b1:98:e5:e5:a3:
43:f2:dc:60:95:85:9f:3b:9a:57:cf:81:83:c0:e2:
81:8d:a1:67:38:7d:05:65:d7:8e:f5:b1:d5:f6:28:
fe:05:bf:9f:d7:6a:2d:01:c4:b4:65:0b:6a:d0:4a:
95:ca:6b:b5:0a:7c:32:74:d4:47:0c:68:36:0c:da:
60:b3:b9:f8:21:22:6c:a3:e7:92:6a:7d:d2:c0:9d:
c3:55:86:15:7e:b1:09:14:84:11:b0:e8:04:17:06:
4b:b6:c8:30:7e:45:61:66:21:54:49:a9:86:c6:8e:
94:ad:30:fa:fc:e5:a5:74:04:1e:01:f6:6f:0f:39:
1f:7f:31:08:e1:9c:7b:4e:b2:13:9c:b5:e3:fe:d3:
dc:8e:ec:1c:da:52:ac:1a:42:cd:de:41:ed:f3:c1:
db:c9:8c:ac:04:76:31:de:5b:4b:10:93:57:64:eb:
44:8b:09:40:c0:54:a5:49:3c:28:e1:ae:04:d7:a8:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C6:FB:FC:5A:05:F6:D0:67:0C:1E:AD:63:91:AA:58:EB:D5:24:59
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/psb7_FoF9tBnDB6tY5GqWOvVJFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4f0::/48
Signature Algorithm: sha256WithRSAEncryption
88:ac:36:e6:d1:5a:d3:d5:53:f8:bc:87:4f:4a:54:cd:d3:0b:
2d:cc:98:ee:5a:f0:3f:64:5b:0d:70:ee:33:5c:bc:1b:6e:43:
9e:e9:82:ec:a6:53:65:70:93:90:e5:3e:b8:5c:39:92:aa:22:
06:b0:2a:01:e8:3a:b9:ec:e8:4b:62:5c:bd:f7:05:dc:4b:ee:
d0:e9:66:78:0a:d7:05:60:de:1d:b4:d7:62:a4:3f:99:ee:a7:
b9:fc:ba:f1:33:f5:43:ae:27:f8:81:44:43:2e:37:5c:05:bf:
a9:a9:5f:2e:7a:40:9c:d1:d8:49:ca:56:e1:a7:24:f5:16:b9:
c8:f0:1e:dc:27:6d:89:08:4e:60:79:b9:64:38:c5:b6:9b:11:
f0:13:3f:13:2e:9c:85:c2:cc:46:4a:b5:c6:58:3f:b3:00:be:
05:20:c5:8b:81:51:38:af:e4:aa:da:85:d7:5b:d1:0f:7c:fb:
60:36:23:5d:35:ca:52:06:96:20:2d:14:57:11:84:b6:e2:40:
b4:40:8c:1d:43:0f:ed:7d:84:42:6c:e2:8b:94:21:e8:79:af:
65:9d:a3:8d:bc:6f:9f:f3:7d:72:44:19:83:68:90:c0:29:9f:
af:e2:21:eb:ba:33:76:07:8b:64:f8:0e:06:0a:a7:73:9b:3a:
a9:83:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:36 2025 by rpki-client