Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa
File: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (raw, json)
Hash identifier: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=
Subject key identifier: 8C:F1:EC:42:51:B1:FD:94:C4:E1:88:01:88:76:57:C3:35:21:85:A0
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 019426D9BF6B8A8D28BF1B684EF08914584B
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa
Signing time: Thu 02 Jan 2025 11:49:51 +0000
ROA not before: Thu 02 Jan 2025 11:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205692
IP address blocks: 2a09:f040::/29 maxlen: 29
2a0b:2fc0::/29 maxlen: 29
2a0d:c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:bf:6b:8a:8d:28:bf:1b:68:4e:f0:89:14:58:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Jan 2 11:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf1ec4251b1fd94c4e18801887657c3352185a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:b1:0e:95:36:57:65:d9:66:96:62:06:04:
32:3d:e9:d1:50:1e:ec:3d:1e:27:41:1d:6e:88:3f:
9e:71:ec:d4:58:be:c9:da:aa:bd:bf:bc:ef:98:71:
b8:66:c8:86:43:7b:d6:ba:67:fb:91:6b:ed:72:d9:
06:b1:84:53:d2:03:e9:c5:02:30:c5:d3:4d:ca:50:
12:39:94:0e:09:0e:9b:47:df:bf:0f:88:24:bd:d0:
95:8c:eb:46:a4:28:8b:6e:39:25:49:6a:ef:8b:32:
6b:94:37:b7:b6:d0:a4:3e:84:f0:34:b1:d0:1f:53:
d6:c0:86:4e:2f:c5:69:b6:a5:2e:13:60:d8:ec:35:
e9:d3:5a:0f:d5:c4:d0:76:dc:09:83:51:8a:d0:05:
5f:65:fe:0b:5e:fd:77:c2:5d:f0:ab:44:3c:dd:25:
be:07:e4:52:a6:30:4d:b6:5e:58:fc:f8:3e:b2:2c:
c1:14:6c:8e:2a:c1:41:7d:3d:d5:ed:e9:17:49:59:
b4:99:c4:f0:af:65:c7:ea:19:0e:2f:62:dd:db:52:
da:e3:87:9c:40:46:25:77:67:66:1f:95:52:4f:6b:
74:b4:5b:b0:ce:53:04:dd:e3:de:0c:e4:fd:12:43:
74:9d:a4:ba:1c:e9:79:60:3c:2a:ca:42:9e:9b:f2:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:EC:42:51:B1:FD:94:C4:E1:88:01:88:76:57:C3:35:21:85:A0
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f040::/29
2a0b:2fc0::/29
2a0d:c00::/29
Signature Algorithm: sha256WithRSAEncryption
aa:4b:c8:c2:3c:81:e6:50:25:ab:dc:69:22:51:58:ed:82:e1:
54:bf:f1:ec:16:62:64:05:ed:c4:26:b7:57:b7:c0:65:e7:f9:
45:71:1d:db:94:0d:94:36:91:09:f1:e5:66:b9:fa:51:1f:41:
32:5a:c3:c5:2f:94:5c:41:ff:bb:df:19:45:32:90:ac:bf:c5:
3e:9c:ff:f6:b4:89:12:1a:62:53:5a:50:62:8a:dc:74:4d:63:
e9:cc:bb:4c:2a:a9:e2:a4:25:35:b4:b2:61:66:63:e3:05:c8:
7c:aa:90:82:45:37:1e:2f:e9:3d:4e:4a:18:5c:b0:07:cd:98:
e2:bd:53:ac:94:46:6d:88:89:56:06:75:71:cc:20:38:90:23:
13:25:2e:7a:df:c3:de:11:6d:79:f7:87:e0:1d:cd:98:47:74:
e4:df:41:1a:5c:1e:c4:ac:d4:99:6f:87:04:03:37:b4:00:a0:
86:75:15:7b:eb:6c:6f:33:88:c4:f8:1f:63:fa:dc:1a:f3:e8:
75:66:08:fb:71:e2:57:7d:0c:8d:28:7e:fd:43:bf:d2:18:dc:
df:58:55:18:04:3b:e1:1a:f1:62:a9:0b:f6:b2:1b:f2:31:b1:
ef:93:af:86:ee:2f:1b:ef:61:91:31:99:bb:9c:83:68:0c:dd:
f2:9c:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 17:58:10 2025 by rpki-client