Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fFcReiDCZvGq5LR_cyZOKyKXGlY.roa
File: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (raw, json)
Hash identifier: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=
Subject key identifier: 7C:57:11:7A:20:C2:66:F1:AA:E4:B4:7F:73:26:4E:2B:22:97:1A:56
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D729ED4AB1F15DE47FAD9878AE2C68
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fFcReiDCZvGq5LR_cyZOKyKXGlY.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207846
IP address blocks: 2a0e:1cc0:9::/48 maxlen: 48
2a0e:1cc1:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:29:ed:4a:b1:f1:5d:e4:7f:ad:98:78:ae:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c57117a20c266f1aae4b47f73264e2b22971a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:17:ce:ff:31:ab:89:5a:ca:c3:1d:c0:52:
b5:33:78:5b:87:74:43:bb:ed:fc:dc:ac:89:f2:a9:
5b:65:ae:57:a4:24:dd:69:3e:b7:04:ab:f0:48:2d:
e4:76:b8:58:f9:83:75:5c:b0:ef:4f:e7:41:e7:b8:
17:8c:fd:23:d4:61:ea:f4:e9:bd:b4:34:39:04:0c:
1c:75:08:bc:08:4a:da:fb:0c:18:8c:87:c0:b4:28:
8d:71:6d:37:e3:26:63:50:78:09:55:c7:8e:ca:3a:
4a:7c:7f:56:e7:1a:ce:c9:a5:72:80:99:ed:6c:3f:
97:9b:cc:ba:79:4c:d1:9e:eb:e5:b5:89:2b:37:58:
eb:3b:80:81:b9:d3:3d:1c:1b:73:ad:8c:9e:b6:c6:
4a:bc:a0:8b:b4:dd:87:3c:9a:9b:f1:f9:01:e7:17:
54:30:9b:83:9d:98:67:56:16:e0:d4:b5:43:e4:a4:
18:65:6c:6e:ab:96:79:18:6b:d3:a4:7f:43:d2:d3:
08:0e:05:41:c3:19:8e:3b:1e:df:28:e0:19:c2:e9:
de:e9:b5:1b:b2:ab:24:46:8c:da:5b:68:74:4f:5c:
c0:51:89:61:3d:2f:5d:ed:84:c9:00:ed:91:ec:db:
50:ce:79:dd:5c:b0:44:79:62:26:07:4b:85:1c:da:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:11:7A:20:C2:66:F1:AA:E4:B4:7F:73:26:4E:2B:22:97:1A:56
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fFcReiDCZvGq5LR_cyZOKyKXGlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1cc0:9::/48
2a0e:1cc1:100::/40
Signature Algorithm: sha256WithRSAEncryption
89:ff:76:47:20:35:ad:6b:5f:3d:f7:2a:0f:5f:09:2e:2e:8b:
49:f8:5c:5c:49:24:b0:09:c8:7a:c1:59:d0:35:36:e6:09:35:
0a:16:3e:f9:37:6a:e8:6a:b4:bb:4c:e8:9f:03:84:30:85:99:
d3:e7:36:54:cd:28:15:2f:f0:a4:a1:bf:be:c7:b0:4b:18:9e:
5f:b2:1f:94:63:d6:5f:48:d9:ac:bf:43:e5:7b:7a:14:10:9b:
16:0a:7a:a4:e9:87:bd:44:05:19:60:1f:37:8a:96:75:ea:02:
62:42:c8:49:6c:ae:f8:31:06:18:7a:4e:63:94:ff:c5:a7:05:
f5:34:e6:7f:9c:c9:cb:3f:41:3f:5e:fd:a0:81:40:c4:50:e2:
e9:cb:4e:41:a3:9a:96:8d:2b:f9:15:4d:42:68:d0:93:b6:5d:
ed:94:b7:7d:31:3b:13:3a:87:f0:cd:8a:52:7e:5e:63:fe:3a:
49:55:ed:93:ce:50:c0:ec:b8:24:80:e2:39:37:85:a0:84:97:
6a:69:7b:80:98:cf:7f:dd:97:ed:8c:1e:8c:6c:ff:f2:f9:b0:
72:03:f5:ec:1f:ed:d6:5b:f6:48:4c:13:77:32:e3:2d:cb:39:
c1:48:71:10:83:fe:e8:c7:19:0e:06:60:55:d2:6b:a8:a5:d9:
13:2d:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:24 2025 by rpki-client