Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/8Xi47DC6XLMifd_h4diEuTQqT_o.roa
File: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (raw, json)
Hash identifier: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=
Subject key identifier: F1:78:B8:EC:30:BA:5C:B3:22:7D:DF:E1:E1:D8:84:B9:34:2A:4F:FA
Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial: 019422FBE3088F15AA240C4D4E6410768673
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/8Xi47DC6XLMifd_h4diEuTQqT_o.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212416
IP address blocks: 2001:67c:f18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e3:08:8f:15:aa:24:0c:4d:4e:64:10:76:86:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f178b8ec30ba5cb3227ddfe1e1d884b9342a4ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:b2:af:c6:63:28:48:05:07:b7:ed:a0:38:
67:53:89:8b:01:1c:57:df:2c:06:ea:d3:2c:10:3b:
67:2c:4d:4e:51:fb:ad:5b:41:bb:bf:23:9c:c6:ee:
be:19:4d:d5:ab:d8:67:17:4f:3f:09:b0:55:f8:69:
e7:0d:94:a5:6a:80:4c:1b:49:98:fa:93:d8:9c:9d:
b9:b3:3f:6b:ef:18:a3:35:ae:21:aa:48:be:27:3b:
5f:4c:ac:49:cd:6e:d2:5a:5f:c8:2f:5e:d3:7b:24:
0c:76:7a:1c:12:38:cb:6a:1b:73:5f:24:ce:11:9c:
fb:c0:fe:5a:66:e9:cc:8c:53:69:4a:f9:81:4c:12:
b2:9f:60:8a:33:d2:76:92:f3:83:98:4b:3c:12:4e:
35:77:59:58:a7:69:74:f1:6e:74:81:03:51:4c:f2:
19:f7:bb:df:25:09:13:83:71:4c:5d:c5:22:e9:32:
de:2b:78:45:dc:e6:b4:ab:f5:cb:82:84:f8:f7:4e:
58:b4:4a:b2:d9:ec:df:ff:e4:95:3d:ec:90:b3:a7:
a6:35:5b:db:4e:82:0d:b3:3c:68:60:0b:0a:50:a1:
62:0c:dd:b4:55:02:12:e6:70:37:da:22:26:d1:06:
4e:28:7f:77:a5:fc:f2:15:03:68:ac:96:70:0f:3f:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:B8:EC:30:BA:5C:B3:22:7D:DF:E1:E1:D8:84:B9:34:2A:4F:FA
X509v3 Authority Key Identifier:
keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/8Xi47DC6XLMifd_h4diEuTQqT_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f18::/48
Signature Algorithm: sha256WithRSAEncryption
7a:dc:13:a0:95:dc:aa:e9:1f:61:4f:ff:8c:4d:3d:ba:4b:e8:
c2:3a:ca:06:c8:fe:55:52:65:e3:c5:c6:e3:14:c7:e4:f9:78:
2c:7c:d5:27:76:ce:e5:4f:4b:f1:2c:15:ed:a8:1e:a7:c5:58:
d5:04:67:8b:47:8f:df:91:bb:21:0b:b4:1e:3c:56:23:ea:58:
9d:f1:bd:58:bc:c2:a8:0c:d7:a5:69:8f:02:7a:11:de:52:b2:
58:b0:39:bc:35:ab:c7:3a:12:02:c5:e9:fb:03:4b:aa:e5:04:
c7:89:f1:3a:28:b7:09:94:14:76:f3:d9:96:df:d8:d6:a2:fa:
9e:58:ad:fd:37:eb:a3:87:9d:1e:e3:7d:3b:99:4d:f8:1d:89:
d4:00:22:aa:84:03:19:b9:bb:24:72:e5:6a:aa:a7:16:2d:2c:
01:9a:cb:dc:25:ad:97:82:ce:62:67:7f:b4:f6:fa:8a:33:05:
19:36:52:60:83:5d:10:a7:dc:75:fc:25:e6:a5:97:93:ac:7f:
21:95:4e:60:41:8b:4a:a9:81:3f:b6:40:81:1b:85:5d:af:63:
10:23:f2:7b:cd:fa:bd:eb:e6:4c:19:2f:2c:bf:c3:d5:92:cb:
32:b8:bf:b5:c4:80:f4:22:bc:bb:20:dd:e7:71:15:64:5f:25:
95:6e:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:32 2025 by rpki-client