Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/78o_FWZJdNx8y6lqNyGyQ8K6E58.roa
File: 78o_FWZJdNx8y6lqNyGyQ8K6E58.roa (raw, json)
Hash identifier: IixtfvrQUner2Z+jcrj/ILDoom7eQRYfsR3spwo/Sp8=
Subject key identifier: EF:CA:3F:15:66:49:74:DC:7C:CB:A9:6A:37:21:B2:43:C2:BA:13:9F
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BA3609E80228FE4854BF231837C1
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/78o_FWZJdNx8y6lqNyGyQ8K6E58.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 945
IP address blocks: 2a05:b0c6:b00b::/48 maxlen: 48
2a05:b0c7:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ba:36:09:e8:02:28:fe:48:54:bf:23:18:37:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efca3f15664974dc7ccba96a3721b243c2ba139f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:be:3b:0d:3d:7e:1a:79:26:ec:25:46:ab:
a1:c9:f7:20:e3:9c:24:e4:2f:c6:18:a4:01:5f:da:
9b:1a:3b:fa:51:9d:d2:1d:ed:e1:e6:6b:85:22:55:
9c:87:f7:6d:d0:92:39:2d:ab:2d:10:a1:74:ce:33:
95:37:9f:31:9d:b8:34:2f:6a:ac:9b:24:ff:18:af:
7d:0a:5a:4b:f2:39:ae:21:ba:bd:dc:a0:17:c7:e0:
09:cf:94:ea:a3:c4:6e:60:20:08:31:62:7f:5f:4d:
87:10:73:a0:d1:1b:0f:f1:22:13:87:9e:91:7b:ce:
2f:7c:ea:8c:15:13:f7:77:68:66:32:f1:cb:06:de:
09:06:2e:81:6d:86:20:72:8d:93:5a:ad:9e:7e:78:
2c:5e:ae:c2:77:46:a3:6e:a4:12:94:ae:a4:c8:d2:
50:a6:8b:f7:16:3d:e4:dd:c6:77:ba:54:c4:21:86:
f3:e5:6e:64:cf:be:ea:a1:6f:6e:41:c3:41:b8:90:
ae:80:45:a1:a4:08:c0:37:b1:12:3e:92:0e:df:62:
13:69:3f:12:27:b4:eb:50:19:ec:c4:48:7f:ab:e9:
4a:83:1e:af:98:25:36:f9:a1:49:5b:86:7d:78:06:
14:11:fe:75:44:b2:e8:47:e0:7e:e1:69:74:95:f7:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:3F:15:66:49:74:DC:7C:CB:A9:6A:37:21:B2:43:C2:BA:13:9F
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/78o_FWZJdNx8y6lqNyGyQ8K6E58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:b00b::/48
2a05:b0c7:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
87:0a:37:41:18:d0:5f:2a:0f:f8:95:38:37:71:79:55:2a:c5:
b6:2e:d0:3f:7a:9e:52:86:4f:37:7e:b3:65:ca:cf:0d:2b:db:
d6:bf:50:c9:bd:18:9f:22:27:46:f0:f6:60:0f:50:0d:f7:4e:
95:41:53:7f:23:c6:83:32:f0:48:d8:11:c6:b1:75:f3:c3:69:
e1:b0:f6:22:5c:96:bd:a4:9a:85:ef:79:c8:f8:73:38:82:b7:
94:f5:ec:88:d8:d8:cd:c3:31:ee:c4:66:84:a3:26:16:5d:af:
f0:e9:57:17:f2:60:5f:a9:6d:1b:e0:18:fd:4e:ed:a8:a2:42:
80:e7:c6:aa:2c:bb:15:e0:82:81:ca:18:f2:18:99:2c:54:ac:
73:3d:26:59:2c:8d:4d:ab:a2:89:1b:e6:4a:9a:ce:f3:67:31:
9d:78:5f:27:ea:3d:c9:eb:af:db:76:6e:bc:f5:24:f4:01:93:
d8:26:ad:90:c6:f3:4e:4a:a6:95:41:31:ea:e2:fd:52:86:eb:
87:92:77:44:b1:56:14:88:32:03:eb:fe:34:b2:80:f9:9f:be:
a4:de:29:6a:26:3f:5c:91:5e:f5:33:51:d6:b9:3a:8e:cd:42:
24:96:17:c5:48:af:01:f3:6c:6c:74:46:87:0d:7b:c5:d3:a2:
fc:13:18:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:55:35 2025 by rpki-client