Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa
File: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (raw, json)
Hash identifier: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=
Subject key identifier: A0:2F:86:4C:75:C6:B6:85:88:1F:F6:A4:C4:45:CF:3B:55:22:F5:D0
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 01942520CA54DB2D41976F0B4636DEC4002D
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa
Signing time: Thu 02 Jan 2025 03:48:13 +0000
ROA not before: Thu 02 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209878
IP address blocks: 2001:678:f9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:ca:54:db:2d:41:97:6f:0b:46:36:de:c4:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Jan 2 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a02f864c75c6b685881ff6a4c445cf3b5522f5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:f6:38:2b:17:f5:56:ac:b4:df:83:43:ec:
00:9d:10:27:cc:fd:5a:b8:b8:0e:8a:3c:f8:9d:9c:
da:55:26:f8:6e:b2:7a:45:5f:59:cb:aa:dd:2a:df:
ce:35:ce:4e:37:a7:69:44:63:d0:16:fa:a1:f2:82:
71:a2:b3:3c:a7:55:25:fe:8b:c7:32:92:f7:20:0f:
65:11:f0:06:94:1a:53:e5:50:41:0a:6d:d2:6f:da:
41:c3:26:45:11:7e:19:58:1e:8f:a7:6c:60:bf:1a:
23:f4:ee:bf:28:c6:df:6c:0f:4a:16:94:f8:9a:ce:
9f:94:11:44:4c:23:d5:bd:e6:83:f3:ca:e7:5f:60:
c0:57:8d:22:95:e2:8b:71:44:4c:cd:45:cc:01:d4:
04:fa:60:94:57:c6:99:28:56:fa:ee:e0:b3:84:31:
aa:43:4a:fd:dd:75:1a:85:15:f6:9a:80:2c:60:45:
76:05:c0:01:1a:b3:da:4e:c4:7d:c3:69:3a:71:8d:
07:07:87:bc:98:a3:52:49:b6:61:f9:af:7d:b8:0f:
9a:a5:35:a3:f4:d6:81:3b:4f:71:7f:9e:f2:34:82:
a9:c0:47:44:b8:a1:14:47:c3:91:9b:bc:96:8d:da:
dc:cc:7a:c3:82:54:dd:ac:c5:06:42:a8:40:b5:8e:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:86:4C:75:C6:B6:85:88:1F:F6:A4:C4:45:CF:3B:55:22:F5:D0
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f9c::/48
Signature Algorithm: sha256WithRSAEncryption
b1:46:de:a1:67:61:ed:d4:0c:d9:5a:87:ea:ab:e9:60:5f:15:
f3:7a:df:ee:ef:90:90:26:c4:17:60:0c:8b:80:01:ce:c5:0b:
b2:f1:34:a8:72:81:6b:82:e0:b9:e7:34:de:7e:04:bf:25:ed:
ff:53:8e:5e:fb:2c:83:3e:b1:cf:fc:39:0e:98:a1:be:b5:7c:
92:45:7a:c8:6f:f4:07:e3:e5:8f:05:48:a3:4b:a2:7b:ef:47:
26:a3:bd:67:6c:ac:f2:e5:4d:eb:69:c7:1e:97:5c:c3:20:76:
0e:90:67:39:a4:9d:93:0d:7b:ef:a6:07:5b:87:df:59:91:46:
f6:d4:ed:23:71:5d:d7:90:51:ca:fb:00:2b:3c:bf:41:ff:78:
a8:da:b3:8a:79:53:4b:23:4e:fb:1a:09:3a:45:82:11:f9:fe:
1a:5c:b1:23:ce:8c:d1:2f:21:30:0c:03:66:5f:e9:02:00:ab:
9e:40:e6:9f:02:be:91:f0:b1:91:7f:4e:72:f9:ab:2f:87:1e:
a2:b9:b8:16:8c:19:2d:b5:10:17:8a:25:6c:c8:d7:d7:80:d1:
0d:20:4c:01:3a:c8:f7:2b:38:86:d9:06:d8:e1:47:75:11:14:
b8:45:c5:0a:55:e7:89:c0:87:9b:f7:f5:41:fb:98:51:30:e5:
43:6e:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:09 2025 by rpki-client