Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UQFInSw96FdOK6mlt_Oi76Wv5Kg.roa
File: UQFInSw96FdOK6mlt_Oi76Wv5Kg.roa (raw, json)
Hash identifier: PcmR4sEbVHwHAOcVFyhLox7Ay0PsDtxAvCQZQGNXdMo=
Subject key identifier: 51:01:48:9D:2C:3D:E8:57:4E:2B:A9:A5:B7:F3:A2:EF:A5:AF:E4:A8
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D98F99860082F4F3276B27E05E3F60
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UQFInSw96FdOK6mlt_Oi76Wv5Kg.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215056
IP address blocks: 2a03:5840:118::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8f:99:86:00:82:f4:f3:27:6b:27:e0:5e:3f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5101489d2c3de8574e2ba9a5b7f3a2efa5afe4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:22:0a:1c:8a:ae:3a:8d:ed:10:ef:7e:42:
f8:6a:ef:43:39:d7:44:ca:e1:2f:2a:2c:fc:b1:57:
15:9a:21:05:67:45:82:ab:c5:fb:c3:1c:4c:9b:22:
d1:3c:8d:2f:ba:ec:a1:27:87:bc:a6:f4:9d:a3:1d:
03:be:a5:26:0a:d9:80:6c:4b:e7:9b:64:cc:b4:28:
f3:4d:96:5c:99:bd:2f:f4:6a:da:73:7a:3b:89:73:
19:95:1b:44:df:50:ee:ff:16:87:15:6e:40:f8:fe:
0a:33:ff:9a:23:f1:6e:ff:25:3a:7b:aa:0b:bb:d9:
9c:cd:ed:ea:7c:f4:e7:c4:2e:82:3e:cf:6c:d2:e6:
ce:79:c3:38:de:c4:33:bc:7e:eb:d2:67:df:e4:69:
cd:01:e2:d2:10:4a:bf:5e:53:43:83:75:5c:fc:22:
b1:c5:a2:2b:d5:02:ea:87:4e:35:3e:39:be:69:35:
43:6a:cf:9a:ad:2f:65:8c:70:4f:45:32:f0:0c:b3:
f0:84:21:0a:8b:07:b8:af:ae:cd:0a:7e:b5:f1:50:
78:91:c9:80:3b:6a:98:8d:89:26:dc:bf:8f:10:97:
f7:42:f7:72:8b:bb:39:a3:76:3f:37:fa:1c:ec:50:
79:c0:e7:15:e3:bc:4a:6b:64:d7:e7:4f:69:58:e6:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:01:48:9D:2C:3D:E8:57:4E:2B:A9:A5:B7:F3:A2:EF:A5:AF:E4:A8
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UQFInSw96FdOK6mlt_Oi76Wv5Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:118::/48
Signature Algorithm: sha256WithRSAEncryption
4c:a7:74:c5:9c:a2:71:45:55:a4:55:5e:49:a8:5e:b7:f9:6e:
04:1d:af:a8:41:5b:89:8d:1b:15:f9:38:eb:62:12:60:7d:2e:
c9:91:e8:f6:fc:45:fe:67:13:61:ce:f3:2c:dc:72:5a:cc:e9:
d6:e3:92:94:de:14:3d:e3:37:46:f9:ca:9b:0f:bf:38:33:1c:
7c:17:1a:79:0e:54:c5:54:de:bf:ae:af:03:e0:45:1d:26:e1:
3d:cb:26:ca:11:96:17:0e:5c:cd:de:7c:1c:3b:fc:23:90:c0:
14:0d:f3:5e:7c:45:75:a3:ca:40:25:21:2e:57:29:3a:fd:a9:
d9:7b:1f:bd:5d:1b:f6:96:9d:48:ea:66:1f:46:ee:80:77:08:
a8:2b:3f:8e:a6:e1:79:f4:59:04:bc:ad:fe:a5:06:81:80:55:
1d:6f:1b:f0:31:80:48:7a:cd:99:cc:bf:09:d2:bd:ca:48:26:
06:e5:d1:0f:94:54:f8:cd:3d:06:d6:21:3c:dc:ba:c0:75:89:
14:75:a4:95:a8:1f:6e:a7:7c:f7:81:a8:86:72:53:3a:09:f0:
e4:a2:91:dc:7c:95:bf:16:36:e8:0e:e2:9b:0f:14:48:b3:86:
5c:71:00:3f:28:0e:5a:4a:ce:2b:7e:46:0f:93:f0:1a:ee:32:
ac:08:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:56:46 2025 by rpki-client