Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/8VHMJKi_4dgKzUjp8Z78M6mE72o.roa
File: 8VHMJKi_4dgKzUjp8Z78M6mE72o.roa (raw, json)
Hash identifier: 8H2u7H8cTay/8uyQvxgM/2puvD63VShZwLyFWDmS8Fg=
Subject key identifier: F1:51:CC:24:A8:BF:E1:D8:0A:CD:48:E9:F1:9E:FC:33:A9:84:EF:6A
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DB66EFEAAC40AFEC70C5A6B725D5C
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/8VHMJKi_4dgKzUjp8Z78M6mE72o.roa
Signing time: Wed 01 Jan 2025 15:48:19 +0000
ROA not before: Wed 01 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a01:e285::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b6:6e:fe:aa:c4:0a:fe:c7:0c:5a:6b:72:5d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f151cc24a8bfe1d80acd48e9f19efc33a984ef6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:9b:8d:47:99:54:a9:9e:1d:79:e7:76:e5:
fe:b7:81:4d:72:a8:e2:d0:b6:77:f9:cc:6c:f7:86:
9a:e4:4e:c1:67:56:84:c8:51:b6:b8:3d:a1:02:11:
80:79:a6:1c:99:29:00:92:ad:91:6c:e9:d5:24:4d:
dd:e1:48:80:d9:9e:df:78:89:4e:94:28:b7:ae:3d:
98:86:71:a1:1e:3f:a3:e3:ac:8a:a5:39:9f:2c:c5:
ee:43:68:9d:17:7b:91:8d:11:cc:2b:c5:0c:86:7b:
cc:11:76:3d:a7:4b:13:f4:43:ac:2a:0e:a9:b6:c7:
18:45:f0:53:e3:28:60:7b:52:50:ac:2c:ae:a7:d5:
ea:2b:4b:59:12:72:97:73:e6:47:f0:b7:75:a5:69:
72:0b:b1:3f:82:89:b6:17:4b:d7:8c:7f:ab:d7:fc:
8b:bb:d8:a2:4f:0f:49:d5:22:12:a6:a9:61:0b:0a:
2d:9e:d0:58:da:74:00:0c:ae:8c:10:db:00:4a:02:
d4:10:49:cb:c2:56:91:34:96:82:7d:ef:4e:3b:f0:
50:f7:95:5a:70:1b:74:52:81:9e:99:6d:10:c0:88:
e9:69:6d:67:13:f0:81:aa:21:38:e3:c5:88:26:86:
0c:08:4f:43:ab:44:66:f0:87:ae:0f:10:56:ab:e7:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:CC:24:A8:BF:E1:D8:0A:CD:48:E9:F1:9E:FC:33:A9:84:EF:6A
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/8VHMJKi_4dgKzUjp8Z78M6mE72o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e285::/32
Signature Algorithm: sha256WithRSAEncryption
43:12:8c:be:8b:5f:a5:66:29:62:61:93:26:d9:d6:07:be:56:
10:20:83:b1:31:a4:eb:90:c1:87:99:ed:b7:45:da:e9:94:fb:
82:1b:f0:11:7c:00:d0:cc:18:29:d6:0b:3c:fb:1a:1a:f7:57:
7e:b2:f7:50:47:58:75:2d:5d:ac:b0:d5:cb:13:da:83:18:a0:
5b:9a:5f:77:1f:e2:70:cc:2a:8c:19:95:78:f8:a0:57:20:28:
a2:25:8a:89:c2:8d:1d:4c:f5:be:2d:55:af:ca:7f:00:91:f1:
c0:60:42:b9:de:4d:21:44:9e:e4:1e:fd:2e:41:68:b1:d2:ee:
0c:5e:a2:1f:2d:6e:66:0d:04:0d:97:eb:5d:9a:bf:3a:51:dd:
98:24:0b:ea:9f:37:e6:f4:75:83:d0:c3:9c:6c:b4:76:b9:2f:
46:d2:93:3f:5b:af:c7:68:da:dc:20:17:ac:64:e6:24:98:ab:
e8:6a:b2:d3:23:cb:ac:95:4b:e0:6b:7b:a8:b9:54:06:c8:0e:
d0:33:a3:11:b7:0c:84:4f:88:a4:c5:6f:31:b7:32:72:e5:09:
d3:70:d1:a9:00:e9:47:b6:fd:41:03:22:d2:4b:c9:34:2b:9d:
cc:1a:89:e4:5c:89:04:bc:cd:c6:9a:42:0c:54:a4:52:89:a3:
de:a3:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:20:12 2025 by rpki-client