Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/87EiEbuhBkMDFm619edEsUyoB7Y.roa
File: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (raw, json)
Hash identifier: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=
Subject key identifier: F3:B1:22:11:BB:A1:06:43:03:16:6E:B5:F5:E7:44:B1:4C:A8:07:B6
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 0194221FF812A73657BDD1DF13E4F248C531
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/87EiEbuhBkMDFm619edEsUyoB7Y.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214458
IP address blocks: 2a12:99c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f8:12:a7:36:57:bd:d1:df:13:e4:f2:48:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3b12211bba1064303166eb5f5e744b14ca807b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:80:13:6a:71:ae:21:1a:06:72:02:be:60:
a8:55:61:35:ca:d7:94:fa:c7:7e:66:a2:06:6e:9f:
81:60:7e:73:2f:5c:cc:96:b8:e8:f1:cd:93:91:33:
64:9b:81:7b:50:b2:19:da:4a:d4:d9:6c:a7:8f:2f:
46:a2:3f:b3:c8:cf:05:cd:d8:eb:a8:8b:80:5a:5b:
29:cc:29:21:e4:6f:65:d7:19:d3:b5:92:8a:c4:2a:
48:7e:22:b7:11:10:78:1f:58:01:53:ec:50:23:28:
5e:50:ce:e3:33:86:76:4e:54:ea:2a:c7:c9:ce:82:
22:21:16:f5:6d:d8:8a:81:aa:58:e7:0e:fa:b3:ed:
cd:4a:f2:77:7a:50:af:56:f4:56:f2:5f:2a:f1:18:
d2:57:f9:67:94:5a:d2:6e:e0:07:8c:6e:35:a1:3a:
fe:1e:47:aa:56:78:b9:0e:5e:66:75:e9:04:16:46:
50:2d:b3:e9:8d:8f:7e:f2:71:29:64:92:0e:49:f5:
1e:5c:cd:22:f1:db:a3:fe:9a:b7:89:b8:13:b0:a8:
04:be:a6:2e:10:5f:73:d9:cf:65:bc:db:0d:2d:e3:
87:d7:44:9b:fd:90:3c:ad:e7:4a:18:9a:19:61:33:
e3:23:8a:18:fb:82:34:8a:e4:ad:3e:2a:df:0c:2b:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:22:11:BB:A1:06:43:03:16:6E:B5:F5:E7:44:B1:4C:A8:07:B6
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/87EiEbuhBkMDFm619edEsUyoB7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:99c7::/32
Signature Algorithm: sha256WithRSAEncryption
57:e1:0d:8c:bf:3d:ca:ac:48:b5:5c:f0:6d:92:98:aa:bd:03:
89:69:7b:dc:b2:eb:bf:2d:f2:a9:5d:71:cb:7a:ca:d2:e2:56:
73:74:9b:39:76:84:45:59:14:a6:cf:d6:9c:5e:2a:b9:fe:b8:
31:69:43:e9:4d:9e:23:c2:c1:41:f0:93:a1:b4:75:21:21:3c:
98:67:e6:24:eb:9c:76:26:cb:58:8e:46:f8:30:4f:09:65:fd:
f1:ef:ef:3a:7c:81:30:d5:95:64:1d:7b:fb:9f:22:30:84:0d:
71:12:88:b1:ba:0c:f3:c0:0f:89:d5:dc:1f:6c:94:10:11:46:
96:40:44:88:1a:fe:6e:f7:e2:a7:8e:c5:e8:b7:fc:72:ca:80:
cb:fc:ef:43:47:88:7c:ca:2e:98:94:c8:95:4f:70:54:97:b7:
7e:de:9f:42:f6:15:61:3f:a7:0b:c6:8e:46:c5:e7:b8:aa:52:
a9:ae:6f:9e:72:b9:9a:23:c2:6a:64:d5:4a:d5:0d:a0:c9:27:
95:be:99:be:6b:5a:93:fa:6e:5d:a3:75:23:f8:2e:9e:f8:df:
ee:b5:0b:a2:20:ac:a2:43:e8:d8:6b:08:17:9f:59:14:92:3c:
42:8e:41:13:a4:e7:da:73:3c:da:aa:ae:57:cd:84:59:c0:8f:
30:6f:45:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:14 2025 by rpki-client