Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/VCruuJKpBEqYRmO1DijMiFDvfUg.roa
File: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (raw, json)
Hash identifier: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=
Subject key identifier: 54:2A:EE:B8:92:A9:04:4A:98:46:63:B5:0E:28:CC:88:50:EF:7D:48
Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial: 019425221B13C6C9814CC3119E66B816266A
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/VCruuJKpBEqYRmO1DijMiFDvfUg.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57536
IP address blocks: 2001:67c:26a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1b:13:c6:c9:81:4c:c3:11:9e:66:b8:16:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=542aeeb892a9044a984663b50e28cc8850ef7d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:60:c1:58:2e:4c:3d:f4:3d:b3:4e:37:f1:
a6:d3:6e:8e:c7:38:fa:65:5d:d6:96:fe:50:84:d3:
fd:ff:b7:62:c1:56:87:43:d1:1d:e0:da:65:ce:ba:
e0:98:0e:c2:0f:46:b1:2a:e3:2f:3f:8d:03:90:21:
13:b4:cc:25:33:e1:00:af:fc:7f:3e:23:29:a6:e0:
36:3c:e1:f0:a8:9a:b7:4a:13:01:5f:c3:40:f3:79:
43:62:43:dc:46:6b:17:49:03:eb:64:94:7f:99:db:
ef:09:8f:6f:4e:d7:5b:ff:ed:d1:0a:79:8e:b1:8b:
c7:57:b0:e9:a0:94:8e:a0:d3:be:c6:6c:d5:a0:72:
d6:74:b3:6e:ac:ae:9a:43:d1:46:12:c5:bc:b6:ea:
6b:c6:b0:1c:27:f7:3e:b5:3b:17:42:a2:ea:f4:df:
e7:3c:20:6c:09:63:93:7c:22:fb:23:ad:0a:e1:25:
15:c2:35:67:1d:ac:e0:fb:b7:37:5f:27:fc:22:20:
4f:43:09:4f:66:29:3e:f7:85:09:7b:e3:1a:1a:a7:
78:71:2f:df:67:4b:25:5b:2b:70:a2:33:f2:55:b1:
a8:a1:96:21:e1:5f:7f:cd:83:b3:0f:5f:40:0b:72:
81:26:2a:24:57:cb:ce:9d:da:2d:58:23:1a:ea:69:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:EE:B8:92:A9:04:4A:98:46:63:B5:0E:28:CC:88:50:EF:7D:48
X509v3 Authority Key Identifier:
keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/VCruuJKpBEqYRmO1DijMiFDvfUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26a4::/48
Signature Algorithm: sha256WithRSAEncryption
08:03:3f:7b:f4:3b:ab:fe:34:fc:d2:c4:d5:e3:42:bd:72:ed:
02:80:ec:2c:93:c3:9a:95:8b:fc:a2:29:3d:cb:15:71:33:ab:
ea:10:cf:1f:da:6d:5b:96:0e:0e:41:5c:f9:8e:5f:8b:ea:c7:
d6:31:e0:1a:33:e7:f4:01:c7:af:00:c3:ea:e6:81:59:3c:d2:
ae:5c:3a:c3:f1:4b:f1:37:5f:a4:c5:ea:63:23:e4:a6:63:52:
68:a4:bb:f2:49:6d:c6:25:fb:f5:98:b9:ac:fd:c9:ba:eb:a8:
28:f9:44:61:4b:02:65:f2:da:d4:a5:53:86:4b:3c:5e:75:4f:
9d:d1:f0:43:40:5c:e6:89:46:9c:75:8d:66:8e:82:91:33:d7:
14:56:7f:04:cc:a8:27:7a:9d:c3:90:2b:41:31:42:9a:43:9d:
ba:08:35:27:b9:33:22:67:d7:0d:c3:b4:f3:a7:6b:a2:de:52:
c9:0f:88:19:3e:37:ca:91:5b:b6:ed:16:4e:87:f7:55:59:a3:
46:49:0d:ee:7e:88:6c:1b:52:f3:d8:e9:bf:ec:d0:d7:ff:28:
72:0f:02:63:db:38:3c:a8:0c:ca:58:45:ba:18:d6:4f:b4:c6:
80:d2:7e:56:87:ee:7b:8d:cc:24:ed:6e:c7:3b:2c:36:c8:f4:
46:99:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:43 2025 by rpki-client