Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/gR-u8bbl7CpODpcyHOQdtDNy2f0.roa
File: gR-u8bbl7CpODpcyHOQdtDNy2f0.roa (raw, json)
Hash identifier: Ut3zYRyimjZoyc0EPzGxgygwX+4ILv4UHAbFies+BRg=
Subject key identifier: 81:1F:AE:F1:B6:E5:EC:2A:4E:0E:97:32:1C:E4:1D:B4:33:72:D9:FD
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427463564E1A8CA5A6CBF8105107BE322
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/gR-u8bbl7CpODpcyHOQdtDNy2f0.roa
Signing time: Thu 02 Jan 2025 13:48:20 +0000
ROA not before: Thu 02 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211013
IP address blocks: 2a05:1082:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:35:64:e1:a8:ca:5a:6c:bf:81:05:10:7b:e3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=811faef1b6e5ec2a4e0e97321ce41db43372d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1d:d3:c8:d2:a1:b4:b8:51:dd:f6:e7:c5:72:
09:1f:00:e9:81:94:ea:de:19:27:1a:60:8e:1f:c8:
a8:c0:f8:3e:e5:8e:69:92:40:21:26:17:e6:4e:81:
29:83:b6:22:0c:41:dc:2c:ee:a4:b0:6f:51:e0:65:
77:7a:34:ff:c0:3d:d4:ce:ae:cc:08:9a:c1:36:a9:
bb:b2:61:d5:db:9c:3a:8e:27:d8:65:51:d3:fc:af:
3d:f7:4f:37:ce:10:36:74:8b:e0:6a:88:96:3b:7d:
03:ce:68:ad:2d:f6:50:7e:cb:ba:15:1c:a7:8c:19:
af:bb:e6:b7:11:24:b8:db:1a:75:51:7f:59:64:ce:
4e:94:19:37:fa:a2:da:c8:b1:74:44:b4:86:b1:7a:
1d:39:d8:3d:03:2b:6d:7b:ea:2e:8f:8f:d8:11:68:
f9:dc:09:00:c0:16:b4:2d:b4:4c:8f:4b:b8:42:e6:
1c:de:e9:62:7d:bf:27:08:84:86:66:a3:23:fb:d9:
74:c8:7d:79:f7:3e:a4:7d:aa:07:13:fe:10:47:24:
4a:ad:31:34:f4:f6:21:bf:7f:33:d3:bb:c1:70:7e:
d8:b6:4e:70:59:e5:4d:21:13:5c:cf:9a:44:be:8e:
72:9c:6e:40:de:b7:e9:58:03:2d:58:85:1a:dc:00:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:AE:F1:B6:E5:EC:2A:4E:0E:97:32:1C:E4:1D:B4:33:72:D9:FD
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/gR-u8bbl7CpODpcyHOQdtDNy2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1082:f000::/48
Signature Algorithm: sha256WithRSAEncryption
b2:15:63:1a:11:54:f7:a7:6f:97:a3:aa:0f:c1:4d:f8:c9:a1:
75:76:cc:bb:1d:43:aa:97:f8:82:5b:c1:2c:6d:8c:f8:8b:11:
40:ba:f8:77:84:53:78:2e:92:42:c8:1e:00:3e:22:52:ac:c4:
91:7f:ae:38:b4:f0:4b:d4:d0:89:f8:8f:65:b2:bb:0f:fb:e1:
bb:c2:d5:c3:13:ea:ca:dc:ce:c3:f7:19:94:bf:c1:90:6e:80:
68:78:fc:71:8d:d8:53:46:5d:91:78:37:79:82:4b:31:00:da:
7f:ed:d5:4f:e3:2a:82:f3:90:d6:38:a9:ad:8a:af:bd:40:60:
b3:3f:40:93:85:93:b3:fe:30:6b:09:c8:92:e8:f6:f1:79:c6:
cc:66:7e:48:29:ab:c4:51:a8:de:b1:e4:5a:6a:b3:20:47:6a:
8a:be:79:f2:ad:06:c0:aa:02:82:d8:56:cb:17:2d:44:9a:e6:
84:44:12:1a:f9:c6:bb:dc:11:dc:c3:71:cb:7c:01:1a:80:0d:
43:fd:1a:e1:f6:13:7b:dd:0f:43:e7:13:43:a5:1d:3f:e5:3e:
e7:88:56:e0:dd:31:d5:82:42:7a:b0:aa:85:53:1d:cd:b1:4b:
08:7c:a8:22:49:10:70:97:12:ac:83:87:4f:7d:87:77:75:5f:
5b:8a:c4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:08 2025 by rpki-client