Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/fP15MMvd9ak_QDhgJvekkT6SsBQ.roa
File: fP15MMvd9ak_QDhgJvekkT6SsBQ.roa (raw, json)
Hash identifier: WP8/ZYUou2/ZYtjcAkhwBnUMYxZ7w+ZiHvEVSN9PANs=
Subject key identifier: 7C:FD:79:30:CB:DD:F5:A9:3F:40:38:60:26:F7:A4:91:3E:92:B0:14
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222053B1A5DEB64E1887AC1827D9717A
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/fP15MMvd9ak_QDhgJvekkT6SsBQ.roa
Signing time: Wed 01 Jan 2025 13:48:51 +0000
ROA not before: Wed 01 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215829
IP address blocks: 2a0e:8f02:f062::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:53:b1:a5:de:b6:4e:18:87:ac:18:27:d9:71:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cfd7930cbddf5a93f40386026f7a4913e92b014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:8a:69:74:0e:cb:34:07:71:da:d9:28:48:
3d:81:4c:a6:8a:31:ff:1b:19:a5:b0:c2:d9:e5:59:
ef:c2:36:b6:a0:1e:21:ae:86:9f:c2:a8:70:16:52:
95:09:55:f1:5b:60:87:74:bb:00:30:72:b3:1f:7b:
2d:af:9e:fe:fa:47:4b:9e:c1:60:b1:91:14:52:2c:
ea:ef:6a:05:3b:c8:90:ee:02:73:ea:87:d2:aa:fc:
97:d8:ff:24:b0:3d:4b:85:19:d8:71:12:e4:44:b9:
26:f5:8c:30:3f:42:70:27:e5:60:38:b9:0a:f2:77:
de:a5:ae:5b:f2:ca:69:22:f7:6c:ce:8d:cb:9f:db:
aa:0a:dd:d7:e1:6c:96:5d:66:03:91:a1:a4:f8:ab:
d1:2f:67:a4:f3:de:0b:36:35:1a:cd:9a:f9:bb:cc:
7a:8a:01:5b:3e:3d:d3:16:ce:d5:67:23:02:7e:a8:
11:32:dc:62:ab:bf:e9:c5:14:3b:5c:60:4e:5c:d3:
d0:14:0d:3b:b2:36:9d:6d:ab:bf:32:b5:c3:4b:26:
d4:ef:09:da:69:e3:e2:bc:71:58:03:71:60:2e:72:
b5:e8:96:0c:b0:0d:2d:51:e5:7d:d0:91:5a:f6:fb:
fe:9a:2f:5f:84:18:90:b7:49:95:2c:f7:16:26:0c:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:79:30:CB:DD:F5:A9:3F:40:38:60:26:F7:A4:91:3E:92:B0:14
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/fP15MMvd9ak_QDhgJvekkT6SsBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f062::/48
Signature Algorithm: sha256WithRSAEncryption
27:78:5d:f8:6f:48:f0:4c:e0:62:b8:0e:e7:0b:72:60:a9:a3:
1e:1f:29:25:c5:93:a6:98:5d:80:67:d9:b9:c5:51:62:0a:5c:
7c:83:72:4d:3a:ee:48:2f:77:78:f4:79:86:02:44:f8:90:ea:
5a:70:68:bd:6a:ac:a3:cc:1a:4f:ad:4c:ec:b5:2a:bd:8d:b2:
17:e3:19:59:c6:4f:53:93:20:4a:a7:c4:f5:cf:6a:ef:da:27:
96:b6:5f:3c:79:33:b7:cc:5e:51:a5:ce:e6:cb:21:2e:7e:0b:
f9:c3:c9:6d:c0:ac:1d:15:12:98:ac:4e:f0:ef:8d:3b:16:87:
9c:a5:36:9b:c1:07:b4:a5:3c:ac:73:5e:8e:c1:2e:a8:95:52:
2a:36:a5:ca:d1:5c:33:9d:f5:a6:f3:a1:9b:51:f4:18:7d:6a:
dd:5f:f1:dd:5e:9f:77:86:60:5a:8c:41:3e:f2:b8:2d:d0:cd:
f2:41:8c:61:a8:b3:0e:79:57:3f:ca:ec:e5:7b:43:7a:df:16:
ba:2a:8c:eb:a7:3a:d4:00:4d:cb:65:5e:06:33:e3:ef:49:1e:
e7:95:e0:2b:95:6b:a5:5b:03:95:98:20:15:6c:25:66:68:cc:
7a:8b:3c:60:a4:4e:b1:cc:b5:45:b4:3a:e4:58:87:10:dd:ec:
4e:a0:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:17 2025 by rpki-client