Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/fMMGd3zJDjytcmyhyCVTpEhw1kU.roa
File: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (raw, json)
Hash identifier: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=
Subject key identifier: 7C:C3:06:77:7C:C9:0E:3C:AD:72:6C:A1:C8:25:53:A4:48:70:D6:45
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 0194252209A97E9EB3820C5B45FC2E01357D
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/fMMGd3zJDjytcmyhyCVTpEhw1kU.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50321
IP address blocks: 2a05:541:130::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:09:a9:7e:9e:b3:82:0c:5b:45:fc:2e:01:35:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cc306777cc90e3cad726ca1c82553a44870d645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:48:3d:f5:52:61:14:69:cd:7a:fb:bc:15:
fa:44:a5:d6:2e:13:1c:df:e9:30:31:f1:62:90:c6:
e2:46:bc:b6:36:b3:70:72:56:05:8d:b8:f7:a7:15:
b1:8d:a8:ef:cb:e3:cd:2a:99:3d:69:04:4f:24:be:
23:0e:bd:62:45:30:9a:61:46:6f:6f:f5:1d:14:46:
94:f5:7d:c2:2e:c9:59:ac:c3:80:43:b3:2d:66:59:
db:a9:f4:47:4e:0f:d3:8d:2a:fe:9a:0f:51:54:be:
56:75:ae:73:e3:0c:e6:ae:76:3e:c4:cf:34:f6:27:
a4:a5:77:ec:63:1b:ac:ef:69:09:d2:4e:43:99:17:
3f:50:e2:42:4d:74:1f:27:2e:0a:e9:e6:06:d4:67:
08:55:cf:d3:34:16:b5:28:97:92:29:24:a5:e4:54:
3b:0e:48:43:b0:87:c0:cf:d5:07:eb:41:63:f5:f6:
0a:a2:b2:1f:e2:ab:7d:60:22:61:cf:1b:2b:d9:43:
08:56:7d:90:3e:e6:cd:ff:87:8d:81:7a:f4:09:8f:
a7:7b:dd:c2:d8:42:00:cf:56:f4:04:99:24:a3:15:
14:4f:0f:48:d9:28:7b:63:64:84:31:e4:f2:f6:9a:
c0:83:d5:3f:a5:3a:99:39:7a:c2:12:e5:e9:a6:e4:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:06:77:7C:C9:0E:3C:AD:72:6C:A1:C8:25:53:A4:48:70:D6:45
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/fMMGd3zJDjytcmyhyCVTpEhw1kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:541:130::/48
Signature Algorithm: sha256WithRSAEncryption
14:74:af:88:e8:a7:33:8d:cc:39:a1:e1:53:02:87:09:57:77:
81:15:16:5d:70:34:9d:87:a7:05:84:6d:16:32:4f:90:dc:91:
92:ae:c6:1b:07:6f:45:92:63:83:e1:95:7c:bf:28:74:05:9c:
3e:f7:b4:83:6c:e9:36:8e:6b:a0:46:47:06:e0:17:c7:88:2c:
e5:6f:7c:06:19:bb:6d:14:3b:f5:48:21:98:46:ee:fa:38:ce:
68:26:13:8b:33:ad:71:67:9a:30:bf:34:cd:eb:dc:8b:75:fd:
d5:0d:a4:0c:ad:03:39:83:ad:e0:db:2e:f5:09:28:f0:da:4c:
4a:3e:f3:17:72:11:20:42:2e:1d:83:f4:c1:4f:5f:3e:5b:75:
27:62:33:39:f0:7c:0f:2e:cd:73:a4:d4:75:81:83:6c:e0:e0:
60:46:c6:7c:fd:47:6f:bd:49:54:04:5d:5d:29:1e:62:e6:a6:
16:9a:3a:ae:6c:06:38:0d:ff:70:84:b1:21:20:7d:b8:52:61:
37:ec:f1:bf:5c:07:f4:80:de:0c:69:cb:c8:88:a1:61:cc:86:
0f:2d:7a:21:b3:b5:eb:d8:2f:65:db:14:4a:b0:ca:48:00:36:
e3:4d:fd:ad:2f:18:d5:6f:8b:a8:22:50:de:75:d7:e2:7e:23:
e7:26:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:24 2025 by rpki-client