Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/xz8xILYuPCJsOo5-xxPZe0m8iY0.roa
File: xz8xILYuPCJsOo5-xxPZe0m8iY0.roa (raw, json)
Hash identifier: Nym9WSsF7iPFJyaeeaq8rTQr459/3AIDriLd5s5IRiI=
Subject key identifier: C7:3F:31:20:B6:2E:3C:22:6C:3A:8E:7E:C7:13:D9:7B:49:BC:89:8D
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0194258F980D0775B0EBB8925051E47D3C71
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/xz8xILYuPCJsOo5-xxPZe0m8iY0.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212025
IP address blocks: 2a0d:2406:11ea::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:98:0d:07:75:b0:eb:b8:92:50:51:e4:7d:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c73f3120b62e3c226c3a8e7ec713d97b49bc898d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7b:a2:03:4a:d8:5a:1e:23:af:b1:b1:a6:95:
ec:08:75:e2:b9:3c:52:3d:70:81:1f:10:cc:92:93:
7e:bc:2d:c5:7b:3d:39:32:4d:2e:f2:ff:b3:ee:61:
96:11:d0:9d:42:01:b1:83:a5:45:79:ac:11:3a:19:
59:66:a5:b5:41:fa:4b:ba:3d:80:c6:f2:1a:da:7a:
53:76:3e:07:34:93:2a:57:6e:37:71:95:d4:89:98:
70:99:c9:f9:cd:9d:4e:e5:d4:b0:3c:5b:6f:68:44:
33:b5:85:cc:57:44:fc:68:ac:6f:75:85:4e:69:58:
e0:47:8b:3a:3f:94:fa:6b:bc:e6:5f:e5:77:b8:95:
b0:32:5a:ba:78:0c:3e:a9:f2:ea:2c:08:0b:6b:36:
a4:76:61:35:07:24:1a:f2:60:2e:9f:2c:b0:a1:93:
67:84:d6:d5:05:d0:79:02:4c:a2:5b:bb:62:c8:65:
54:da:48:a1:32:2d:6e:32:97:f7:6d:95:67:a3:17:
04:fd:6c:a3:db:95:4e:3a:86:0a:b8:66:b3:35:22:
bb:f3:5a:90:6b:3e:90:a2:4d:98:2a:e7:59:5d:db:
23:0f:b1:10:48:fc:09:9b:89:11:8d:cb:b0:a0:e5:
1c:d1:41:49:47:41:83:aa:8c:89:66:d2:6d:e2:de:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:31:20:B6:2E:3C:22:6C:3A:8E:7E:C7:13:D9:7B:49:BC:89:8D
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/xz8xILYuPCJsOo5-xxPZe0m8iY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:11ea::/48
Signature Algorithm: sha256WithRSAEncryption
55:e3:4f:ef:87:ac:e7:d8:39:d6:19:79:43:ad:4e:d0:97:c9:
a7:82:cb:c8:b6:8a:ce:45:1b:f6:7e:e0:dd:3c:79:28:e5:e2:
fc:15:f7:8e:dc:5f:ea:27:9e:ec:6d:a2:81:14:1e:fc:05:7e:
1a:39:55:23:4c:0b:2a:f9:e9:a3:bb:a7:b4:bf:90:f3:99:fe:
4d:30:74:cf:c0:e2:e1:0b:a3:5c:fb:a3:90:9d:df:ad:0c:ee:
54:5f:e7:43:e6:16:9b:47:b6:03:8b:10:89:f3:38:ef:ff:a3:
24:1f:5d:c8:55:da:d4:55:9a:85:d0:cc:9a:e0:ac:e0:33:3f:
56:7b:d9:6a:66:45:51:3b:69:09:f5:3c:aa:55:ab:1f:a2:12:
48:7f:54:0e:13:b1:9c:1f:4e:19:94:c4:4b:28:51:ed:6c:ab:
37:a3:96:80:a5:0e:24:55:dc:62:18:bd:bd:c6:1b:98:c4:56:
92:a5:59:3c:e1:b2:7d:44:1c:c9:97:c5:4d:54:42:78:05:ac:
b9:60:4c:84:bd:fd:de:33:3d:c9:ae:26:f7:55:18:71:60:bd:
a8:60:be:6f:d4:dc:48:5d:d4:e1:3e:ac:7f:d6:12:3a:6d:d8:
3d:65:53:49:56:4a:05:74:ed:fb:1d:72:ad:7b:98:3b:79:aa:
a3:83:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:11:19 2025 by rpki-client