Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/G_f7kxOFgVYdBOXPeM0NuoPa37g.roa
File: G_f7kxOFgVYdBOXPeM0NuoPa37g.roa (raw, json)
Hash identifier: OJ6wq9uaQj+e3g9gY2nb5Ef2sahGIzOqFBubnfupALo=
Subject key identifier: 1B:F7:FB:93:13:85:81:56:1D:04:E5:CF:78:CD:0D:BA:83:DA:DF:B8
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424449CE1F1A3E1D3804B115F67B49F79
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/G_f7kxOFgVYdBOXPeM0NuoPa37g.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208982
IP address blocks: 2a09:7:2009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9c:e1:f1:a3:e1:d3:80:4b:11:5f:67:b4:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bf7fb93138581561d04e5cf78cd0dba83dadfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:41:5d:64:63:bd:af:a0:c0:f9:39:6b:bf:
04:96:5a:9b:1a:bc:89:17:ba:77:94:fb:46:9a:35:
67:6c:7d:25:b0:cf:5c:28:d3:2c:95:5a:af:bb:d2:
69:80:35:77:83:5c:40:6f:73:d8:4f:45:73:83:03:
68:0a:f5:4a:12:d7:03:2b:7a:39:07:40:82:1d:27:
bf:3f:f3:c0:49:45:a8:bc:a0:67:b4:ca:f2:a2:4f:
43:13:50:b8:4e:ff:e5:ca:84:f7:1b:4c:7d:19:ea:
1c:bf:f3:cc:b1:61:e5:36:9f:00:50:bf:0e:87:5b:
55:32:2f:eb:96:16:17:d5:5f:9b:c7:48:c4:96:1b:
08:0a:a3:1b:89:88:f0:a1:a1:89:05:1f:d3:0e:b1:
2b:82:cd:84:b7:e1:15:89:3f:54:65:ed:61:48:3c:
6b:2b:06:5d:c1:c2:5c:2b:f6:ff:ee:61:ce:4a:e3:
1e:d4:be:46:4f:d0:b2:8c:40:8d:4d:ff:38:25:86:
70:78:f1:15:1b:a8:13:07:60:83:7a:4b:39:23:c8:
ca:19:d6:aa:2d:43:6e:2d:aa:de:a8:76:ba:5e:06:
0a:0e:51:83:62:72:df:0b:a8:b8:69:29:19:53:d7:
1d:14:e8:04:53:1a:48:ee:3e:75:4d:de:a9:c7:44:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:FB:93:13:85:81:56:1D:04:E5:CF:78:CD:0D:BA:83:DA:DF:B8
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/G_f7kxOFgVYdBOXPeM0NuoPa37g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2009::/48
Signature Algorithm: sha256WithRSAEncryption
3d:18:b0:07:51:8b:26:eb:d6:b7:2a:06:31:28:b2:06:dd:00:
70:c1:85:da:ab:ed:45:db:cd:63:b8:05:96:44:25:e4:12:e4:
0a:9b:07:5e:a4:65:db:b5:f3:92:51:79:68:c1:5d:79:bd:5c:
de:c5:f2:7c:8a:18:d5:30:f0:dd:d8:5a:a7:59:a7:59:e9:39:
02:02:74:9a:7a:b7:cb:ee:aa:0c:01:c8:ce:d2:5e:cd:8f:28:
14:f4:a7:6b:49:4a:cd:37:0d:a9:56:f6:da:3e:0c:a4:17:43:
58:9f:7b:f8:15:93:08:b2:93:d1:38:6f:7d:cf:7c:3c:f0:1a:
48:de:11:a5:45:3d:fa:16:f6:27:db:96:f1:23:c7:62:9e:9a:
e4:92:6a:1c:74:2f:cb:12:47:fd:14:0e:aa:b3:ea:3b:b6:23:
15:8e:68:b6:87:32:a9:b9:05:9d:b6:5c:0c:5e:29:53:68:86:
c1:2e:42:a6:e1:bb:6d:9a:c9:7a:c8:d1:03:c0:3b:13:52:b2:
56:b6:e5:81:ff:e2:0b:30:cd:0c:7b:0c:3b:8c:7e:88:3f:d3:
e7:d5:43:48:db:71:47:5f:b6:3c:e9:85:f1:b3:ca:d5:1c:b7:
51:84:3e:97:70:70:fe:5a:44:fc:45:f8:23:58:84:9b:1b:47:
11:a5:a1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:37:17 2025 by rpki-client