Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7Npb7ICgBMJHb4a0IGHos2W3hqE.roa
File: 7Npb7ICgBMJHb4a0IGHos2W3hqE.roa (raw, json)
Hash identifier: tIWzqid9UodmzSmt0ZrLoa2AGlbA7d8YNy0nPagOwhM=
Subject key identifier: EC:DA:5B:EC:80:A0:04:C2:47:6F:86:B4:20:61:E8:B3:65:B7:86:A1
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D991DB72C2666E9A447236106884A5
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7Npb7ICgBMJHb4a0IGHos2W3hqE.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216009
IP address blocks: 2a03:5840:111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:91:db:72:c2:66:6e:9a:44:72:36:10:68:84:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecda5bec80a004c2476f86b42061e8b365b786a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:f3:95:93:1a:eb:44:09:d6:5f:9b:e4:4c:
89:cc:d1:1a:de:86:c8:5d:c8:59:0a:6a:da:f8:86:
39:b1:45:d8:1a:4f:f8:4f:a4:cc:9e:b8:7c:b5:72:
1a:e4:16:d4:04:61:27:4a:df:86:ed:86:40:19:b9:
94:03:a9:ca:d6:0e:71:d6:63:bc:54:b1:c8:1f:79:
98:02:a3:01:1a:c5:9e:cd:15:2d:51:96:2d:a1:05:
b5:c0:51:e2:ec:2d:2f:d8:53:f6:07:67:c1:cf:f6:
24:cf:39:f7:31:57:ee:04:99:73:fa:a2:db:77:7b:
22:66:0a:c4:1a:06:87:7f:8f:5e:04:5c:b2:fc:9f:
86:09:dd:d7:27:15:3c:2a:f1:0e:ab:4a:8f:c7:08:
de:71:51:35:6a:41:ee:44:1b:93:8c:8d:22:2d:75:
2d:3d:84:6b:5b:a6:ad:d6:12:f1:09:6d:a4:89:37:
6f:ee:6b:3d:3c:59:c5:6d:40:56:64:79:37:7e:d6:
ce:93:e9:7e:80:a9:8f:db:c7:b3:1c:31:d1:4a:ca:
70:f5:13:85:2b:dd:10:a5:b2:98:51:91:89:46:6c:
0d:0e:e3:e8:28:e4:2b:ad:0c:7b:8a:f5:26:34:2a:
d3:6a:21:26:d6:bf:21:34:33:64:04:04:2e:f2:27:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:5B:EC:80:A0:04:C2:47:6F:86:B4:20:61:E8:B3:65:B7:86:A1
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7Npb7ICgBMJHb4a0IGHos2W3hqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:111::/48
Signature Algorithm: sha256WithRSAEncryption
66:8e:23:6b:b2:0c:51:9e:eb:d9:0d:ea:7c:10:b4:fd:21:54:
13:77:c5:e4:38:36:c1:7f:50:80:30:09:05:48:ae:53:9e:30:
ae:91:fd:74:6a:db:c6:3f:11:f8:af:49:a7:a8:62:5d:06:80:
9a:d4:88:07:35:01:88:6e:62:74:47:42:99:fc:2c:f9:34:3a:
09:45:76:9b:cf:bb:39:1e:c1:36:d8:cb:07:61:87:b1:ee:cb:
79:36:26:18:2a:9b:4e:78:c4:e0:0c:33:be:94:7e:54:4a:b9:
21:fd:33:8b:4e:6b:e4:8d:c8:61:9b:3b:b2:df:74:7a:ed:f9:
e1:1d:d3:16:dd:c6:3f:a8:9a:3c:c0:b2:8d:18:0f:a8:a8:a9:
16:eb:3d:eb:41:41:45:dd:35:bc:8f:f0:56:4a:2b:3a:36:60:
f4:27:b9:c6:23:1a:50:ad:74:3d:f1:7d:ce:71:60:dd:97:2c:
d1:19:40:f9:86:ba:d0:b8:f3:6e:c7:38:f0:ee:da:8e:61:3d:
ff:34:8f:c2:a4:44:4c:b3:0e:b6:e4:b6:90:29:f1:bf:03:07:
e0:c3:ec:42:9e:0d:37:7e:15:a1:19:ff:2d:ac:3d:f9:aa:1e:
d7:13:fe:8e:0d:38:c0:07:8d:6d:87:65:c6:dd:f5:74:87:fa:
86:02:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:57:03 2025 by rpki-client