Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/PbIDcbaeTmzqv6S3lSLbNvURWEo.roa
File: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (raw, json)
Hash identifier: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=
Subject key identifier: 3D:B2:03:71:B6:9E:4E:6C:EA:BF:A4:B7:95:22:DB:36:F5:11:58:4A
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019420D6586A873A2AC9A1DD6F8900788310
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/PbIDcbaeTmzqv6S3lSLbNvURWEo.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208333
IP address blocks: 2001:4d78:f200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:58:6a:87:3a:2a:c9:a1:dd:6f:89:00:78:83:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3db20371b69e4e6ceabfa4b79522db36f511584a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:16:c0:04:89:79:25:7c:92:6b:f9:7e:72:
29:00:0d:7f:a6:b5:13:08:19:df:00:8a:1a:ff:f6:
67:71:9b:41:a0:01:30:c1:3b:68:70:bb:b0:d1:09:
f1:93:58:3b:9a:72:3c:d4:70:a3:69:07:d6:c7:db:
9d:7f:e7:c0:3b:d9:2f:c7:d6:e6:ba:e3:3a:83:4c:
30:ff:9d:c9:2e:e3:85:60:97:27:d1:c6:17:c4:5e:
36:44:e5:7a:f8:3b:0d:26:c1:af:2b:d5:dd:53:eb:
82:84:cd:52:56:95:32:00:7e:a3:d1:85:07:69:bc:
8e:36:5c:9a:54:47:6e:15:06:96:71:1d:fe:aa:20:
76:0a:0c:e3:0a:ac:14:ee:4d:9a:8f:56:de:e4:49:
56:27:5c:68:9b:67:52:f5:a5:a3:4c:03:7e:39:57:
10:a9:4f:41:f9:30:b0:83:33:ff:c6:e0:a8:71:e8:
1b:8b:c8:75:67:c0:2f:12:23:16:bb:90:05:dc:1f:
ac:7a:1c:c3:7e:b6:04:bd:eb:77:94:14:b8:ba:9e:
31:1c:81:64:12:70:21:8b:de:08:24:87:24:11:f7:
47:e6:12:21:1d:e3:3e:71:da:c5:ce:03:17:1c:c6:
50:0f:27:e8:99:6c:0b:31:53:fe:d4:e1:9e:44:ce:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:03:71:B6:9E:4E:6C:EA:BF:A4:B7:95:22:DB:36:F5:11:58:4A
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/PbIDcbaeTmzqv6S3lSLbNvURWEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4d78:f200::/40
Signature Algorithm: sha256WithRSAEncryption
80:df:17:9a:50:2d:82:40:5f:95:65:fd:1b:9a:01:a1:67:47:
aa:02:5c:86:e2:b5:82:56:8d:4d:12:38:7e:07:c5:fc:eb:bd:
3b:0c:9c:61:b8:13:13:63:6a:a7:d0:8d:ed:52:b5:36:76:15:
e5:ba:7a:60:9e:bc:76:8c:d0:e5:20:86:e3:e5:da:56:f4:e3:
87:41:4f:16:73:ee:5e:d0:e7:08:b1:dc:15:31:83:f2:6c:e7:
aa:59:d2:62:07:e7:f0:25:10:0e:6a:c9:ad:d3:eb:36:62:4c:
88:d6:e3:73:45:db:6c:11:36:0d:92:ab:bb:2c:c2:ac:13:ca:
76:de:d6:a5:94:f3:49:65:d3:67:2f:d0:a0:9c:fe:72:6e:33:
d7:c2:61:10:39:90:b7:88:ba:75:7b:64:49:f0:fc:6c:d3:67:
9f:18:46:3c:9f:a7:d3:12:4c:11:92:f2:93:c7:2f:29:bc:e2:
de:c8:11:10:c8:5d:65:f5:3e:8f:7c:5e:05:72:20:eb:15:67:
6a:36:05:2d:82:13:6e:f9:5d:96:16:06:99:62:c4:d6:96:97:
75:c2:dc:6a:1e:9b:01:dc:e6:57:95:9a:45:60:79:60:1f:db:
ed:98:b4:ff:43:fb:40:20:23:4f:83:45:ae:08:8d:49:f9:6f:
e0:55:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:20 2025 by rpki-client