Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/j84LLRjxqovhQ1f-Vo1W8Ggomrg.roa
File: j84LLRjxqovhQ1f-Vo1W8Ggomrg.roa (raw, json)
Hash identifier: lE8VSDD6OngPZMSO0N6X5XYw09YDfgl2syZ7P/y5Ujc=
Subject key identifier: 8F:CE:0B:2D:18:F1:AA:8B:E1:43:57:FE:56:8D:56:F0:68:28:9A:B8
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0194244525ABAC94A3F281D3866369806EF5
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/j84LLRjxqovhQ1f-Vo1W8Ggomrg.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60602
IP address blocks: 80.66.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:25:ab:ac:94:a3:f2:81:d3:86:63:69:80:6e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fce0b2d18f1aa8be14357fe568d56f068289ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:d9:16:b7:6b:5c:e8:63:c2:d1:99:60:6c:
a3:1b:66:42:c5:60:dc:56:e9:61:7e:00:a2:1a:cd:
59:b2:7e:49:86:ff:37:ca:27:85:9c:c6:86:a3:12:
40:7a:88:27:7e:06:d8:1c:aa:b1:f4:38:4b:c6:e9:
cc:d4:42:23:63:c5:d8:10:e1:77:28:1b:e8:b3:f8:
75:12:d2:92:21:55:36:9c:f2:aa:fc:cb:f9:e4:4d:
45:0c:42:cf:78:03:e8:38:44:10:37:cb:ab:c5:20:
fc:a1:85:ce:ac:44:83:7d:a7:b6:39:a5:9f:a7:f3:
1d:c2:c2:7a:2e:49:26:3e:b5:7d:d4:0b:4e:92:3a:
da:39:93:73:f7:7a:75:a4:80:69:85:7b:1c:bc:23:
57:9c:2f:ff:f0:5a:ec:55:69:8d:8a:98:0d:65:dc:
e6:1e:a8:fe:7f:80:eb:ed:60:69:77:6f:17:23:b2:
73:27:a5:81:1c:04:ee:47:53:01:63:46:55:5d:ea:
12:e6:72:5f:46:54:e9:d5:17:e3:84:df:68:6d:d7:
58:51:ab:7a:ad:86:94:34:dd:4c:09:f7:2e:3c:b7:
5a:24:fa:63:b6:56:62:11:68:9e:4d:6d:2e:46:ca:
ef:64:5f:ff:ea:35:3b:47:fc:29:a2:4a:6c:8f:81:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CE:0B:2D:18:F1:AA:8B:E1:43:57:FE:56:8D:56:F0:68:28:9A:B8
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/j84LLRjxqovhQ1f-Vo1W8Ggomrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:30:02:f9:bc:1a:20:05:53:a0:fe:94:66:10:0c:f2:e7:db:
a3:96:68:4f:6c:d4:a2:7e:2d:0c:be:f6:3a:e0:ad:73:1f:5f:
14:90:6c:43:30:12:ba:bb:5d:f6:79:fe:bd:a9:04:48:12:1a:
7d:8f:3f:0d:fd:14:3d:c5:26:71:50:7b:ab:7a:19:45:05:f2:
01:73:24:1b:d3:4f:31:86:f4:66:bd:11:01:a7:50:8b:d2:c3:
7e:4f:a2:47:b2:13:42:75:ec:fc:32:23:62:29:7c:61:91:f3:
e7:f7:17:17:2e:8e:2f:b0:a7:95:58:41:96:39:bf:8b:92:28:
2f:39:78:ba:3b:57:e9:b6:fa:d1:28:c5:dd:93:e2:84:07:1b:
22:13:d8:ba:ca:4f:c4:58:07:0a:5e:43:33:96:3c:7b:54:54:
ee:6d:90:cb:7b:f9:97:97:69:70:9b:21:a9:7c:08:20:6a:9a:
f8:e4:53:73:4a:4a:9c:fc:f4:b7:9e:20:56:a3:d2:d5:d6:90:
c7:08:2c:ed:6d:86:fe:7b:fd:b2:f7:b4:0c:a4:78:05:88:3e:
7b:d4:c4:94:f2:31:70:e0:cd:13:1b:5f:9d:86:9e:69:8f:05:
2d:20:f2:09:ad:1a:38:93:6f:4c:3f:5a:27:f1:fe:3a:98:8c:
d7:c9:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:08:45 2025 by rpki-client