Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/P8zXUAaQks5p-XgYDOvceaS5lbk.roa
File: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (raw, json)
Hash identifier: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=
Subject key identifier: 3F:CC:D7:50:06:90:92:CE:69:F9:78:18:0C:EB:DC:79:A4:B9:95:B9
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D72A65676DB3D41584298DC0DA0DE1
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/P8zXUAaQks5p-XgYDOvceaS5lbk.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207960
IP address blocks: 2a0e:1cc1::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2a:65:67:6d:b3:d4:15:84:29:8d:c0:da:0d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fccd750069092ce69f978180cebdc79a4b995b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:a2:c5:36:13:08:77:79:3b:14:e5:1e:fc:
e6:80:84:43:07:61:da:c2:85:d8:23:d5:e7:c5:b2:
9e:20:ad:29:8f:d7:65:96:a5:b4:d4:45:7f:2f:bc:
cd:33:dd:23:06:64:e9:2c:52:52:33:02:d9:aa:eb:
28:bf:14:bb:ca:ea:4f:6d:7c:ef:e0:84:b6:4b:be:
21:ea:f0:c3:4f:ac:5c:91:28:cd:4c:37:2b:fa:b1:
29:9c:db:2f:9b:01:94:25:3c:6e:9a:2b:7d:aa:b9:
29:66:c1:63:21:1b:bc:d0:11:51:f1:10:71:fc:be:
f9:70:9e:64:03:0c:9f:71:92:14:a6:a9:b8:e9:5a:
9c:cd:ea:d2:8c:8e:96:eb:bf:65:e5:99:da:1a:ad:
8b:3a:b6:32:4d:cb:c3:bc:66:18:50:b8:0e:26:db:
81:37:f2:bc:7f:86:d4:04:51:c3:23:58:42:a9:76:
30:28:46:66:c5:82:81:f0:ef:44:ea:6e:7d:66:f6:
12:fe:d4:bf:2d:da:18:0d:a3:d7:a1:08:2d:2b:d2:
ad:86:e6:4d:56:b3:82:75:3f:1c:c9:de:cf:3a:1b:
11:93:31:cd:70:e7:0e:9f:9c:c3:29:b1:42:a4:df:
9c:5e:6c:88:64:d2:14:78:9e:71:2f:0b:d3:86:17:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CC:D7:50:06:90:92:CE:69:F9:78:18:0C:EB:DC:79:A4:B9:95:B9
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/P8zXUAaQks5p-XgYDOvceaS5lbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1cc1::/40
Signature Algorithm: sha256WithRSAEncryption
d1:57:77:6b:d2:3e:be:64:95:01:05:46:aa:31:8c:51:01:b6:
c9:b9:30:b0:14:a0:f5:4a:21:b7:8a:bb:3f:4f:06:6c:44:02:
dc:e3:86:48:94:71:73:82:60:9e:18:53:9e:76:f2:a2:b3:f2:
87:17:44:58:e4:04:88:1a:82:78:72:94:08:14:71:70:d5:ad:
b9:c5:35:2b:87:32:00:6d:5c:9f:3c:85:8d:3f:d5:ae:4a:a2:
3e:74:f9:b2:12:04:62:98:7d:48:7e:a0:1d:52:cb:c2:07:8e:
69:28:a9:51:5c:c5:83:6a:84:8b:63:00:28:fa:da:8d:c4:b0:
20:2b:12:9f:90:ca:d8:b8:1a:65:1b:f3:20:7c:f9:ad:ce:2b:
87:14:60:19:b5:4f:b1:ca:08:cf:e1:db:12:e8:d2:36:05:40:
8b:62:ef:4f:e9:a0:e8:e4:a2:a4:06:7e:56:45:70:7f:da:73:
c2:ba:b3:a2:f5:9c:1c:cd:8d:75:4f:88:19:1c:0c:8e:04:07:
de:98:54:fe:12:ab:13:93:f4:c9:80:a4:b9:d9:24:12:99:33:
05:b7:bb:ea:4e:46:ea:19:ba:2e:16:d3:13:92:a6:40:0b:d6:
78:4d:bd:2f:4e:fb:04:57:4c:78:3d:76:bf:24:a1:9c:76:ee:
d7:84:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:07:52 2025 by rpki-client