Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/1-AdV1gWt78vpwXoV5m3jLVJq008.roa
File: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (raw, json)
Hash identifier: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=
Subject key identifier: F8:07:55:D6:05:AD:EF:CB:E9:C1:7A:15:E6:6D:E3:2D:52:6A:D3:4F
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019422FAEA591A5B0DDC0C602CD0DDD1A8D3
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/1-AdV1gWt78vpwXoV5m3jLVJq008.roa
Signing time: Wed 01 Jan 2025 17:47:36 +0000
ROA not before: Wed 01 Jan 2025 17:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213673
IP address blocks: 2a01:ecc0:c0::/42 maxlen: 42
2a01:ecc0:100::/42 maxlen: 42
2a01:ecc0:140::/42 maxlen: 42
2a01:ecc0:180::/42 maxlen: 42
2a01:ecc0:1c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ea:59:1a:5b:0d:dc:0c:60:2c:d0:dd:d1:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Jan 1 17:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f80755d605adefcbe9c17a15e66de32d526ad34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7e:bb:d1:bb:f6:eb:a5:f9:a7:10:38:65:7b:
a0:7d:1a:d9:14:12:d7:b5:ae:47:41:c9:74:4c:ef:
0f:cf:be:d3:3e:ac:39:eb:07:d1:e4:ad:bd:1b:63:
06:68:16:ca:bc:6c:7c:a7:f3:f9:15:46:d2:41:8b:
4c:2e:1a:2f:0f:f0:b0:d5:bf:33:f2:db:7e:68:d8:
c1:65:7f:e5:e8:70:2c:63:5e:3c:6e:0c:f8:58:45:
db:22:d9:f9:6f:5d:8f:ae:d8:e8:e0:29:62:ed:26:
9d:f0:5b:a0:8b:69:3b:cb:ad:bd:96:c3:fe:c4:27:
f8:0d:8e:68:e7:a7:5a:27:27:af:a8:46:ba:d6:aa:
61:38:a2:0b:cb:49:0a:1c:b4:2c:08:92:f2:fc:91:
6e:5e:36:15:e0:a4:c2:92:bc:5c:75:76:c5:ab:9c:
4e:92:dc:f8:33:52:48:eb:06:64:7c:60:72:d7:38:
c2:41:88:eb:95:e6:19:7c:94:71:2a:44:14:eb:93:
35:c9:b5:34:7d:72:09:de:1c:35:96:1c:f2:33:0b:
f2:2e:2e:e4:e5:9f:be:f6:f8:ac:19:1e:c2:25:ad:
c7:f4:85:fc:3f:0d:1d:e5:72:0b:5f:90:16:c6:60:
3a:fb:6d:8c:26:8c:49:c2:81:ff:7b:7b:01:0a:c2:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:55:D6:05:AD:EF:CB:E9:C1:7A:15:E6:6D:E3:2D:52:6A:D3:4F
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/1-AdV1gWt78vpwXoV5m3jLVJq008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:c0::-2a01:ecc0:1ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b2:f4:30:ae:27:c2:d8:bc:c4:b8:18:2b:ab:52:32:2a:63:e0:
f4:11:73:b0:fb:4f:70:c4:34:44:83:22:a1:25:f3:37:d8:69:
6e:c6:a4:df:c8:f8:07:33:a4:a5:0d:8a:40:ca:5d:a1:62:38:
84:76:29:c4:4a:57:e5:af:76:1b:93:aa:ea:a9:19:79:c8:d3:
5e:e5:5f:d0:6a:63:e0:a9:b6:80:1d:a5:17:8a:f8:ca:e9:8f:
54:f6:06:f9:f2:d3:2d:4f:c3:67:d8:cf:2d:74:01:59:c6:d3:
73:29:c3:68:1a:51:09:1a:7e:29:94:a7:64:87:e6:56:5a:f9:
e7:47:b3:7a:67:10:90:a5:51:77:29:33:ee:cb:5b:f8:43:28:
ad:62:02:c2:6a:e6:0b:0f:2b:d2:c4:37:d2:42:55:16:c7:0a:
43:5f:db:47:55:c8:91:4e:d5:8c:ad:3b:c6:97:52:a3:df:1c:
9d:8a:c2:61:ac:22:13:bf:14:22:f1:9c:01:a4:d9:0b:98:2a:
ec:f2:3d:03:3a:21:3e:e2:3e:1a:00:ec:16:0e:50:95:1e:3e:
43:d7:54:bc:4e:35:ce:80:3a:86:b6:21:21:ac:e5:10:07:86:
6a:ca:ae:97:db:36:ab:f1:48:ea:a8:a6:2c:8e:54:92:e6:47:
1a:4a:6e:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:45:03 2025 by rpki-client