Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/_el8ZaSgTztX50qWw97qyJbvYFE.roa
File: _el8ZaSgTztX50qWw97qyJbvYFE.roa (raw, json)
Hash identifier: ANvcDWw21LBLkps9iqRXw0ajrWWh6dyi9sF9yV03Qog=
Subject key identifier: FD:E9:7C:65:A4:A0:4F:3B:57:E7:4A:96:C3:DE:EA:C8:96:EF:60:51
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422203DAA34E984D5C7C748C0B87571F1
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/_el8ZaSgTztX50qWw97qyJbvYFE.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211715
IP address blocks: 2a0e:8f02:f01c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3d:aa:34:e9:84:d5:c7:c7:48:c0:b8:75:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fde97c65a4a04f3b57e74a96c3deeac896ef6051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:86:86:51:51:86:6b:d2:be:5a:b5:20:c4:
0c:49:e7:ee:25:0f:67:70:49:08:6e:d3:96:74:72:
25:63:67:18:68:3a:48:88:b8:20:99:43:b6:39:20:
fa:73:08:22:20:d3:57:f7:2e:bb:c2:e4:51:fb:5f:
d6:5d:c4:d6:c9:55:e9:5d:af:d7:7a:d9:b9:84:68:
94:59:52:7d:7c:3d:8f:b6:fa:be:0a:bf:3b:ca:2b:
b9:3b:82:a1:58:c1:97:cf:80:ae:8f:cd:2d:ba:e5:
5a:4f:1e:ec:f6:a5:af:8b:14:1f:b1:04:3c:01:d6:
42:e4:e5:6e:f2:f8:a2:fc:1a:c3:2d:f5:a1:c6:fc:
1a:76:dc:8e:ee:18:ae:6e:dc:ca:b6:5f:4d:36:27:
12:1a:d3:6c:b5:fb:29:99:5b:75:94:f5:37:97:23:
40:43:80:d3:b9:ca:db:d0:5a:a8:d7:b1:ae:1f:4c:
88:13:e3:13:13:db:73:e0:be:57:08:a5:54:e7:53:
b6:20:1e:e4:95:f8:26:e4:27:e0:66:17:9b:58:29:
bd:68:da:cb:aa:9c:23:af:7c:1f:87:36:54:b1:81:
e1:28:6a:2c:7a:8b:32:f8:0c:cb:21:a3:3c:cb:56:
5e:b5:97:33:90:bd:9c:aa:83:24:53:ec:54:ba:4a:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:7C:65:A4:A0:4F:3B:57:E7:4A:96:C3:DE:EA:C8:96:EF:60:51
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/_el8ZaSgTztX50qWw97qyJbvYFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f01c::/48
Signature Algorithm: sha256WithRSAEncryption
0a:4f:5c:31:fb:d2:35:a3:7b:30:fb:4e:94:99:81:4b:e5:7f:
e0:eb:7f:35:4a:c5:77:ad:b7:8b:00:c4:50:d8:0a:08:1f:65:
bd:20:5b:64:e6:06:34:9d:f3:c8:14:30:5d:a9:53:c6:95:db:
e9:8e:8d:c3:91:ec:5a:4e:6c:2a:12:be:0f:2d:ea:3f:a5:77:
3c:ad:6a:b8:d0:d7:52:ae:4c:10:cb:f6:2d:ee:d5:0c:23:07:
ac:75:0f:a8:78:f1:59:a3:7e:ff:48:4f:49:61:4a:a2:34:2a:
b8:fb:85:b0:3d:b0:50:24:f8:18:b1:3f:5c:04:3d:43:06:4e:
1b:fd:5e:dc:87:48:2c:f4:80:38:de:30:9d:95:91:0e:d8:cf:
ef:b4:42:17:7c:f5:6f:2a:cc:9d:62:77:e4:b5:1f:2d:ef:4b:
0b:6e:2e:4a:e9:82:58:5c:b2:3a:86:3f:ff:01:49:13:0b:14:
dd:aa:a6:e2:31:87:77:bd:9b:69:62:38:94:eb:ae:a0:24:a6:
c5:8d:b7:0f:3f:b2:e0:0c:a2:28:b2:4f:a6:35:c4:7b:96:d2:
ac:e1:f9:ae:5e:7e:76:a1:2b:5f:76:c6:dd:34:e2:99:b2:54:
bb:74:46:35:27:15:0b:cc:4e:e3:b2:e2:78:d4:9b:68:e6:be:
07:81:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:58:43 2025 by rpki-client