Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/0QIFKfV7XQ0j_NX645lYUUtY2-o.roa
File: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (raw, json)
Hash identifier: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=
Subject key identifier: D1:02:05:29:F5:7B:5D:0D:23:FC:D5:FA:E3:99:58:51:4B:58:DB:EA
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019425FC781A726FF69C533819BC5D4BBC4E
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/0QIFKfV7XQ0j_NX645lYUUtY2-o.roa
Signing time: Thu 02 Jan 2025 07:48:10 +0000
ROA not before: Thu 02 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a02:fa8:c800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:78:1a:72:6f:f6:9c:53:38:19:bc:5d:4b:bc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Jan 2 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1020529f57b5d0d23fcd5fae39958514b58dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:2c:2f:2e:d8:b7:1f:69:86:1c:f2:3e:ad:
e5:c2:c9:8e:97:91:8f:52:84:c5:d4:51:5d:d4:91:
38:42:8a:0d:19:7c:1f:a4:ec:e8:89:29:fe:e2:66:
69:a4:95:a7:fb:1e:2b:c8:79:79:f1:55:5b:32:07:
62:5d:a6:aa:e0:a5:53:5b:e7:5a:67:a3:1f:08:08:
88:2e:25:69:a8:f1:a7:d0:29:84:54:91:5a:13:08:
34:72:07:0b:ce:52:bf:ed:a0:89:12:2b:f2:a1:eb:
c1:1a:89:d1:99:88:d5:a9:4f:46:8a:4c:7f:dc:64:
6a:2e:7e:77:f6:15:08:70:0c:96:2e:23:63:e6:a3:
8b:4c:d0:39:3a:f4:2e:9e:f4:3c:73:26:dd:d4:0b:
9b:c0:18:99:9e:12:d7:4b:cc:94:01:6a:85:0a:d8:
2b:aa:87:8d:bb:3c:1f:37:74:02:c4:d7:1b:53:35:
a1:20:23:c0:cd:9e:cd:91:4d:9c:f2:6c:80:7f:1e:
c5:ac:50:6e:e7:55:d2:42:3b:a6:28:11:26:2d:48:
8f:a7:23:d4:43:1e:fb:72:3c:a2:7f:e0:16:1a:e1:
cf:57:63:c5:32:33:6a:d9:52:47:dd:3c:5d:1b:44:
05:6e:0a:28:fe:bd:56:37:4c:31:5d:50:25:66:05:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:05:29:F5:7B:5D:0D:23:FC:D5:FA:E3:99:58:51:4B:58:DB:EA
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/0QIFKfV7XQ0j_NX645lYUUtY2-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:fa8:c800::/40
Signature Algorithm: sha256WithRSAEncryption
6d:26:6d:a3:de:13:ef:cb:5b:5f:3d:7d:1c:81:62:3a:95:09:
4d:2f:e7:38:e5:a5:64:27:c5:2e:27:b2:f1:6b:ee:ee:0b:85:
9b:ce:65:da:87:f4:5e:dc:a7:f4:b9:73:62:e6:64:60:f9:c4:
d6:a0:b0:a8:ed:18:d5:0f:86:64:77:05:b5:01:3f:51:35:bf:
68:05:ae:4c:98:d3:d6:25:ee:94:a3:b0:0a:62:83:e5:eb:16:
a0:8c:ef:92:4e:86:d3:23:fd:91:9b:2a:ce:d4:31:fe:c8:8d:
9d:1e:3f:38:b8:c3:11:11:49:da:4e:76:35:12:1f:a8:41:41:
c2:81:ab:ca:06:82:25:c7:79:be:e1:05:9a:2a:61:f1:c2:4b:
b9:6e:f5:0a:cb:81:5a:b2:4d:c1:f5:9c:4f:83:b0:c4:4f:88:
41:6c:bf:88:2e:39:1d:33:cf:98:d4:72:c2:fe:b0:f1:07:11:
d1:8e:1b:17:0b:51:92:ec:6f:6c:b7:70:83:76:b2:60:57:ff:
e4:52:85:6a:ab:ab:4e:bf:5f:1d:35:01:58:0d:89:27:42:f2:
50:3b:35:3e:ba:68:6d:d4:98:70:80:ac:77:4a:97:59:70:22:
ca:b1:75:8c:39:05:63:3e:59:17:50:a9:62:e1:d4:a2:95:e5:
3b:c7:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:55 2025 by rpki-client