Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa
File: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (raw, json)
Hash identifier: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=
Subject key identifier: 1B:C8:C4:04:22:78:D1:8C:5D:79:81:E1:87:52:71:B8:EA:D6:BB:C9
Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial: 01942748804756B8EAC6F87509A062CE4921
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197895
IP address blocks: 2a02:7a00:6::/48 maxlen: 48
2a02:7a01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:80:47:56:b8:ea:c6:f8:75:09:a0:62:ce:49:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc8c4042278d18c5d7981e1875271b8ead6bbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:38:f3:27:ca:2a:44:96:5b:5c:d3:ac:34:
1f:ce:8b:1e:d5:d7:db:df:ea:9c:4a:6c:d5:70:e8:
52:01:56:59:1d:fc:f0:ff:43:c6:8a:49:2e:8f:3d:
9c:b7:0a:ad:4b:f5:51:92:06:7b:1d:91:0b:3d:85:
f1:4a:52:f6:ea:64:05:c4:3e:2d:a0:e2:df:fd:24:
1b:61:4b:ac:25:e4:61:dc:2a:de:04:82:f3:93:16:
a6:cb:de:67:54:f3:fb:2e:0d:cf:b2:30:1f:dc:a2:
8a:ea:a5:3d:cb:24:ce:e3:d2:c7:27:d6:49:bd:f6:
b5:06:d1:44:bc:4e:28:f3:02:47:41:6b:7c:71:e2:
1a:f1:a2:8d:a8:c2:dc:1b:4d:93:6c:15:72:47:9f:
b3:5a:e8:7d:d1:ed:c9:9a:21:b8:db:4e:38:b9:b2:
e9:a6:5c:91:ac:72:b9:dd:78:4d:94:97:50:af:88:
59:02:f0:7c:48:b4:2e:ac:e5:fc:79:eb:da:73:58:
f2:99:00:4e:94:c1:31:15:71:10:1a:56:54:40:90:
d6:6c:08:af:51:7a:3e:d2:23:a2:a9:a0:34:eb:85:
92:8a:a1:9d:c9:f0:72:69:0c:13:5d:26:cf:3a:d3:
f8:66:85:b9:3c:80:d6:93:7f:ca:21:a2:f6:ef:0e:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C8:C4:04:22:78:D1:8C:5D:79:81:E1:87:52:71:B8:EA:D6:BB:C9
X509v3 Authority Key Identifier:
keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7a00:6::/48
2a02:7a01::/32
Signature Algorithm: sha256WithRSAEncryption
4b:da:64:72:b4:7f:70:1d:af:af:e7:95:3e:d1:63:61:1b:ea:
75:62:f1:9e:c8:57:0a:c7:1f:b9:cc:74:a4:7a:f7:80:5b:3e:
0f:49:81:88:c3:2a:fb:fc:c4:04:c6:25:4e:3c:c1:dd:8e:97:
b7:8e:7c:47:21:0d:ca:b3:77:5b:77:4b:8a:a8:00:a4:ca:23:
4d:06:c1:62:ae:9c:cd:63:97:b0:de:d2:91:29:51:46:ab:44:
a5:40:2f:15:01:97:49:fa:62:3e:fc:59:a7:35:fb:b9:ab:fd:
56:fc:0c:46:7a:a3:dd:f1:ac:c3:a6:1f:8f:eb:0d:49:bd:79:
ff:f2:07:9b:1b:55:0e:7d:95:d9:ac:56:ec:83:dd:3e:9a:f7:
9a:3a:08:db:c2:a8:b8:45:5f:18:12:4b:a3:e8:67:42:81:ec:
cb:bf:17:65:7a:f6:25:09:d7:c8:49:17:2e:89:b4:58:77:58:
6d:88:11:07:16:66:23:07:61:bb:2b:6d:d1:55:4d:9b:4b:2c:
7f:ce:37:c2:c2:17:b7:6c:13:78:86:18:59:83:63:d0:d9:f3:
b1:d9:eb:88:cf:fa:bf:b7:14:13:3e:d0:23:1d:f8:e0:9f:dd:
4e:13:7a:25:a8:00:fc:3a:d2:a4:1b:3a:44:d5:26:76:fe:ca:
0b:ea:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:26:57 2025 by rpki-client