Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/dkbIFUT0Q5SimShUWdItYFUftjw.roa
File: dkbIFUT0Q5SimShUWdItYFUftjw.roa (raw, json)
Hash identifier: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=
Subject key identifier: 76:46:C8:15:44:F4:43:94:A2:99:28:54:59:D2:2D:60:55:1F:B6:3C
Certificate issuer: /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial: 01942826CC47CB88FDF74760BEDABD3A8E9F
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/dkbIFUT0Q5SimShUWdItYFUftjw.roa
Signing time: Thu 02 Jan 2025 17:53:38 +0000
ROA not before: Thu 02 Jan 2025 17:53:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12676
IP address blocks: 2a0b:f440:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:cc:47:cb:88:fd:f7:47:60:be:da:bd:3a:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Validity
Not Before: Jan 2 17:53:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7646c81544f44394a299285459d22d60551fb63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:7c:7c:be:fb:8c:35:25:35:39:6a:08:f1:
c6:9a:14:4c:86:67:e1:f1:da:6d:b9:18:6c:8b:a7:
95:34:45:de:22:eb:71:75:75:cc:ac:60:cd:4e:31:
0e:c4:5b:a4:3a:f1:47:8b:a2:32:65:3b:a9:9b:91:
e1:13:f1:f1:cc:f1:51:10:c8:fb:6a:4e:73:21:84:
68:32:ef:9d:e0:ab:81:76:97:d2:8f:5b:4a:42:da:
f8:83:1e:0b:0c:a4:69:53:19:28:d6:15:03:7c:bc:
35:12:7b:ad:98:85:aa:eb:eb:d0:24:62:bb:d5:ea:
2a:5f:a6:19:8a:1e:81:63:6e:31:94:67:98:bc:fc:
9f:68:b8:56:55:20:48:5c:81:85:c0:f4:ef:ca:aa:
72:be:31:ba:39:0c:9c:37:06:2e:48:aa:07:e4:43:
90:e3:74:db:fc:5c:75:b6:87:2a:80:9c:50:21:c7:
46:a4:0e:e6:e7:9e:ed:82:f5:ba:ef:4d:9d:5d:45:
b0:d1:e9:4d:2b:29:50:96:59:bf:c2:97:2a:48:39:
a2:7f:1e:b8:89:d7:e1:89:55:2e:62:4a:3a:3a:7c:
64:a3:a8:3a:bf:ba:6a:29:ff:e7:e9:97:ee:ba:11:
32:cd:62:21:87:8e:e6:82:bc:81:0f:b5:25:dc:9d:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:46:C8:15:44:F4:43:94:A2:99:28:54:59:D2:2D:60:55:1F:B6:3C
X509v3 Authority Key Identifier:
keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/dkbIFUT0Q5SimShUWdItYFUftjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:f440:11::/48
Signature Algorithm: sha256WithRSAEncryption
37:d6:98:bb:d3:10:eb:e2:2a:eb:c8:52:9e:5d:d4:b3:05:e9:
c6:e7:dc:51:88:6d:3b:10:9e:58:2e:62:92:78:3d:cd:18:d2:
f5:04:f3:37:33:56:d0:f9:b9:be:81:3c:55:a6:f9:b1:5a:a5:
71:1d:38:79:c6:3d:80:b1:29:8b:0e:c9:7f:82:cf:a0:1f:b3:
9e:d0:3d:0c:6c:2d:62:73:15:fb:84:6c:a8:07:7c:26:79:33:
7a:ba:41:dd:26:a1:02:6c:ea:11:64:40:9d:a3:26:81:38:09:
8c:56:32:69:fe:f9:84:a6:05:5c:f3:ce:ef:81:80:b5:9c:dd:
8d:5d:49:34:88:f2:66:3e:64:c0:3c:77:1b:92:ce:fa:b8:0c:
74:3d:a5:6c:cd:69:c1:6f:d6:fc:63:aa:62:2c:d1:3a:70:64:
4e:10:21:7d:a1:48:bc:b0:5c:17:2f:e1:26:ae:d7:69:82:d9:
76:8c:2c:5b:33:0a:4b:1b:d3:24:70:aa:0d:52:c8:bb:6c:ec:
c5:2f:c5:9b:f5:c2:be:91:96:bb:c8:f6:56:66:e5:a1:6d:d4:
ed:09:f2:0a:b6:4e:1b:78:89:50:cb:e4:b6:8d:7d:19:32:d2:
47:b4:12:af:aa:b6:7e:62:7e:cb:50:f2:11:65:92:04:83:3f:
27:7d:ff:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:13:31 2025 by rpki-client