Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/55QaGGuDVD6Ry_FBxNwx4PCpRgc.roa
File: 55QaGGuDVD6Ry_FBxNwx4PCpRgc.roa (raw, json)
Hash identifier: yVGzbcARGa7lXZA3nqS80o73WfoUd3Mktfl+lvTn09U=
Subject key identifier: E7:94:1A:18:6B:83:54:3E:91:CB:F1:41:C4:DC:31:E0:F0:A9:46:07
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D98296B80F271E8F3D4D7C3FFAC815
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/55QaGGuDVD6Ry_FBxNwx4PCpRgc.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197432
IP address blocks: 2a03:5840:fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:82:96:b8:0f:27:1e:8f:3d:4d:7c:3f:fa:c8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7941a186b83543e91cbf141c4dc31e0f0a94607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:0b:9e:0e:28:e6:fa:3d:0e:85:27:75:01:
e0:05:bf:4c:d2:75:53:fb:15:2e:a5:ec:be:5d:e5:
47:ea:ad:d1:6d:f6:41:a5:5f:cf:b2:ca:30:43:db:
ff:5b:09:b8:c5:98:4e:3d:96:a2:c5:dc:e9:6d:6f:
c1:0e:c0:77:f6:bf:76:65:71:d2:88:09:6e:ff:88:
a4:ed:bd:56:b5:a7:14:b6:62:eb:b3:38:be:b6:ee:
43:4c:a8:c6:ce:d8:8e:b8:96:6e:e8:a2:11:da:cb:
d9:2a:54:2a:d8:f4:54:c4:76:28:f9:ab:21:5d:03:
ea:11:b3:4c:33:83:89:dd:03:cf:51:15:41:fb:b1:
fc:9b:ac:1c:0b:2b:8d:b3:90:fd:5c:f0:d8:5d:92:
9c:78:52:21:d5:20:09:88:d4:ba:f3:ca:df:14:b9:
12:28:8d:cf:27:88:eb:9f:22:09:4c:b0:6f:f0:bc:
ff:ff:45:fc:7c:d5:10:c8:1a:c5:b6:b7:88:3f:86:
5b:9e:8d:ad:16:5c:4e:86:5b:26:8b:bf:b5:e6:d9:
5e:20:61:7d:4b:38:3f:89:69:38:c6:cd:cb:cb:df:
05:5c:e4:87:fb:16:bb:e1:97:b2:02:87:aa:9f:78:
8e:ba:ea:09:7f:a6:f0:37:ea:3c:54:f1:06:c9:24:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:94:1A:18:6B:83:54:3E:91:CB:F1:41:C4:DC:31:E0:F0:A9:46:07
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/55QaGGuDVD6Ry_FBxNwx4PCpRgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:fc::/48
Signature Algorithm: sha256WithRSAEncryption
29:c6:87:59:79:a5:33:51:14:b6:70:47:60:5c:04:3c:9e:38:
93:35:0c:a1:76:4b:c0:c8:60:2f:9e:cc:b2:f4:a7:bd:bb:14:
89:33:01:84:32:20:75:87:b7:e1:89:60:51:42:33:ce:cb:c0:
c4:1f:0b:23:91:5b:8a:28:05:79:bc:9c:bf:db:a0:99:2e:c9:
e2:82:28:72:77:9c:82:b9:25:c8:87:ac:26:8a:e2:63:de:f1:
c7:9a:22:27:3b:fe:0d:bd:42:a0:95:7c:7a:6d:bd:cd:f5:e9:
13:44:f2:05:b4:8e:e8:ba:e1:2b:08:10:f8:2b:bd:68:a3:d7:
24:68:64:b4:00:d5:3b:4a:59:be:ec:f1:fc:d8:05:ab:68:32:
5e:09:c7:30:12:3c:8a:1d:d7:8e:ff:d2:d1:b3:9b:c5:dd:c9:
c6:6a:77:c5:ce:a1:49:75:db:7b:d1:d9:58:cc:4d:38:d4:12:
97:e1:a2:7d:28:88:71:04:21:9d:98:dc:7c:e1:4b:db:3f:5d:
02:93:85:8b:a3:1a:38:7b:74:18:92:69:5b:24:d5:71:32:ca:
6b:9d:65:58:ad:d1:d9:c6:6c:35:d8:20:38:f7:f0:d8:ac:72:
09:ef:2b:2c:e9:27:86:cf:00:b9:ed:08:6f:af:5a:71:bf:f9:
f4:22:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:39:09 2025 by rpki-client