Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/i79NCekW-Qk2f37cnLIHdMaGWGk.roa
File: i79NCekW-Qk2f37cnLIHdMaGWGk.roa (raw, json)
Hash identifier: AKre+y+5gfaRsBEkefmwYRikUDRD13fBVo1kOthyjfA=
Subject key identifier: 8B:BF:4D:09:E9:16:F9:09:36:7F:7E:DC:9C:B2:07:74:C6:86:58:69
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 01942143FA2621C424D35CF865FA93243787
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/i79NCekW-Qk2f37cnLIHdMaGWGk.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210641
IP address blocks: 2a02:dcf::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fa:26:21:c4:24:d3:5c:f8:65:fa:93:24:37:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bbf4d09e916f909367f7edc9cb20774c6865869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:82:18:42:92:69:8c:4e:3a:b2:a7:86:bd:
42:76:ac:af:eb:42:c1:6e:dd:54:ba:41:ac:31:30:
24:88:1e:27:8b:df:c1:3c:66:74:a5:aa:98:36:1d:
89:9f:7e:7c:51:d5:5e:3d:4e:67:b9:f3:34:a8:5f:
df:50:e1:3f:3d:94:d7:64:13:e1:aa:ce:55:2b:df:
4b:1b:47:f5:16:ec:4d:cd:df:cc:e4:8c:46:83:5a:
17:11:3a:b7:ee:eb:32:8f:ec:5b:0d:45:b1:e0:a4:
4a:ac:89:48:36:cd:0e:cc:ac:9f:ad:e7:bd:32:33:
4a:c9:ca:55:dc:ba:6d:8c:ef:48:86:d0:af:d9:e2:
11:16:cb:8d:2c:08:5b:54:b7:e3:90:43:3e:62:b2:
3a:ca:d4:78:0f:55:b0:a1:85:6f:0b:fc:31:c9:40:
27:cb:49:fa:c5:64:73:b4:20:c2:9a:b2:0a:6b:09:
2b:00:e3:58:95:c8:35:de:dc:17:dd:f9:9d:17:ce:
ca:4c:77:66:85:e4:ed:32:e8:94:c0:ad:ae:a2:38:
85:37:1c:56:8b:8f:92:d3:04:04:3c:b7:4e:6b:22:
4d:ed:23:45:d0:ef:db:34:20:a1:3c:ac:b4:31:cf:
ae:55:89:5e:e6:0d:63:cf:7a:3b:be:0f:d9:c8:74:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BF:4D:09:E9:16:F9:09:36:7F:7E:DC:9C:B2:07:74:C6:86:58:69
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/i79NCekW-Qk2f37cnLIHdMaGWGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:dcf::/32
Signature Algorithm: sha256WithRSAEncryption
62:e8:75:60:cc:b6:de:9c:f0:bd:c8:b0:a8:2f:75:c5:f4:07:
ec:5b:9a:1e:25:44:ba:e1:d4:34:8a:b7:b0:09:ec:29:93:a5:
03:ea:41:89:89:21:60:e7:4b:32:9b:07:2d:9d:ee:a8:63:20:
55:b1:2b:55:41:34:5e:b6:36:88:98:0a:0c:c1:f9:da:39:fa:
ce:42:3a:ea:3e:ec:2e:5f:58:d5:67:55:99:13:a9:01:17:4a:
2f:8a:3f:40:1a:d4:14:5a:be:87:23:83:d0:a8:48:24:0a:2d:
4f:d0:06:bf:1e:3b:b3:1c:4f:da:55:5e:ef:6b:e9:02:cd:11:
07:d5:0c:34:d3:1f:6e:fd:6f:24:69:09:fb:8f:88:4c:60:d8:
c1:a7:58:01:86:1a:a0:ad:aa:bb:bc:96:6e:de:1a:ab:1d:d7:
a3:71:64:a4:33:62:c6:5b:c2:04:aa:99:ee:44:31:6b:f4:f1:
6e:f5:72:ab:73:ee:83:e7:1a:3a:72:2d:54:6c:81:a2:6c:eb:
af:2e:88:4a:26:04:71:31:79:ec:9f:23:be:7f:7e:ed:1a:af:
aa:c0:aa:5f:e9:da:b8:d4:e9:b7:ec:bf:b4:c8:12:cb:5f:60:
f1:95:90:c9:71:5e:f9:02:ae:90:7e:01:70:32:1e:2f:78:4c:
89:8e:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:47:17 2025 by rpki-client