Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa
File: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (raw, json)
Hash identifier: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=
Subject key identifier: F2:37:D6:45:9D:4D:2E:3D:5B:8E:4A:F1:CD:13:06:F7:26:2E:A4:BA
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 019423D6C61F5DE04B9A951255EA1D5D6230
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21430
IP address blocks: 2001:67c:1590::/48 maxlen: 48
2001:67c:15a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c6:1f:5d:e0:4b:9a:95:12:55:ea:1d:5d:62:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f237d6459d4d2e3d5b8e4af1cd1306f7262ea4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:ae:33:32:27:ce:51:67:15:9f:9d:b0:86:
26:cc:30:61:03:14:48:1e:96:40:70:0a:a2:64:f2:
fe:01:36:21:bb:8a:64:12:2d:22:83:39:1f:3f:fa:
b1:1e:25:f7:a4:bf:3e:1b:01:98:54:17:ca:e4:c7:
e6:9d:1c:3d:d2:d9:d0:a6:25:3e:1e:5b:77:59:05:
cb:92:44:50:c1:15:b3:60:5c:92:14:83:57:69:35:
90:ab:68:f3:af:58:e0:a2:90:1d:d1:69:ec:82:6b:
c6:4e:31:eb:d0:8e:fd:65:6e:fb:6b:a6:f6:f1:97:
9a:ab:b3:cf:4c:e6:5c:c0:f6:a2:18:2c:e3:3f:0e:
49:68:41:d7:62:b4:3d:2c:6c:88:c9:fa:e6:9a:88:
ea:2e:a8:17:e4:b2:1f:59:b7:18:32:18:46:41:0b:
f9:1d:fa:62:f9:31:d6:d5:96:c1:d9:c4:87:68:19:
f2:09:4a:b8:1c:a9:d0:cc:95:05:e0:e2:ec:8c:cc:
31:7e:61:a4:5c:26:db:47:d1:88:68:c2:27:1f:0d:
4b:c0:92:17:59:49:89:c5:7e:ed:77:ff:4c:2e:51:
78:cf:65:4a:88:04:08:d3:28:69:41:3a:b2:41:1f:
bd:0c:15:eb:75:12:18:fc:65:44:a8:8c:b8:31:be:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:37:D6:45:9D:4D:2E:3D:5B:8E:4A:F1:CD:13:06:F7:26:2E:A4:BA
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1590::/48
2001:67c:15a1::/48
Signature Algorithm: sha256WithRSAEncryption
5a:9b:73:94:1e:8b:bb:9d:05:34:3c:7e:3b:e0:37:ea:72:d8:
37:f1:b3:12:ea:a0:12:e3:41:70:52:50:14:77:bb:bc:09:19:
bc:e8:93:7d:3f:34:6f:1c:17:38:55:92:f1:09:2a:24:e1:f6:
e8:29:e1:44:95:80:8b:b7:11:1f:c0:91:3e:d3:f8:52:b0:68:
10:07:6d:89:d6:0c:2c:0c:fa:99:11:39:aa:fc:c7:9d:7c:10:
09:be:be:4d:61:2f:c7:48:b2:da:5f:b0:5e:d7:37:0c:a3:5a:
d8:e8:c2:0a:a8:70:b4:05:44:78:1d:09:e5:51:a1:0c:4e:5e:
86:d3:b0:0e:6b:b3:16:fb:b6:9c:c4:cc:14:ba:c1:8d:fc:9a:
21:66:1d:97:2e:46:6e:37:b8:84:bb:95:ed:c0:15:ae:a6:30:
34:84:6b:2d:0b:8f:99:81:47:99:89:66:8a:5b:0c:3c:70:e3:
60:20:fb:b7:ed:63:d2:af:a8:08:b7:50:9f:0e:71:83:a6:8d:
cc:6b:dc:69:70:6d:72:95:8f:d3:da:59:50:68:b5:c9:c0:34:
3e:55:9e:40:53:d2:ad:16:ef:4e:c0:37:6b:35:28:9f:a4:3a:
7c:34:ec:ca:1a:f5:82:8f:a9:cc:1c:26:b0:1d:cd:82:dd:9f:
e5:04:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:48:28 2025 by rpki-client