Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/o8sfhubQFGvA4ZJTFmxYRQy_8BU.roa
File: o8sfhubQFGvA4ZJTFmxYRQy_8BU.roa (raw, json)
Hash identifier: zlco8FBYipjyiWykH8Iz3WhsfoQrVIZvijQ7Mn9Boo8=
Subject key identifier: A3:CB:1F:86:E6:D0:14:6B:C0:E1:92:53:16:6C:58:45:0C:BF:F0:15
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6C7B17FF5CDEE944A65D971BF7CA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/o8sfhubQFGvA4ZJTFmxYRQy_8BU.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215228
IP address blocks: 2a12:bec4:1110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6c:7b:17:ff:5c:de:e9:44:a6:5d:97:1b:f7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3cb1f86e6d0146bc0e19253166c58450cbff015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:c0:92:1a:3a:92:e7:13:2c:7e:13:6d:55:
c0:a2:e4:41:43:b1:76:26:6c:67:e1:ca:03:e7:1b:
64:cd:ac:e3:8a:f7:32:6b:4d:2b:fd:91:c8:db:8c:
16:f0:f2:9f:0f:c5:f5:2e:1f:42:41:5d:33:65:9a:
ca:b0:b3:19:be:0c:f1:81:7d:6d:dd:e7:bf:32:48:
8c:71:1b:22:05:47:55:56:5e:0a:7e:4d:41:a9:ed:
3c:5a:0b:06:ac:de:8d:a7:06:5a:d5:b4:9d:d9:64:
40:11:f5:04:3e:1b:e1:af:1f:04:c8:89:74:c7:e4:
4e:bb:30:99:3b:72:10:61:10:ee:29:3d:e1:da:39:
e4:b2:ab:32:cf:00:d1:35:db:36:93:94:2a:87:09:
cc:3f:8a:cc:84:98:b2:c8:eb:ad:3b:33:36:8a:c8:
e2:5e:61:d8:6a:d7:da:6c:e1:32:53:ba:55:54:5b:
35:a2:f9:56:05:e3:9f:2b:9e:24:49:6e:57:1e:ab:
2c:43:2f:a2:b7:2d:e0:54:99:f5:07:ff:ff:15:7c:
4a:ea:70:a7:73:11:64:63:c0:7f:ca:f7:0a:4f:0a:
8b:f5:1e:fe:e1:98:a9:d8:c0:97:e2:9e:93:1c:0b:
01:ed:78:67:56:f7:dd:e0:28:db:7a:f5:a9:7f:da:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:1F:86:E6:D0:14:6B:C0:E1:92:53:16:6C:58:45:0C:BF:F0:15
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/o8sfhubQFGvA4ZJTFmxYRQy_8BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1110::/44
Signature Algorithm: sha256WithRSAEncryption
af:18:58:cb:67:c6:7e:9d:99:77:7d:2b:7e:04:a2:93:f6:39:
8e:32:bc:71:cd:50:0c:20:a6:08:84:79:71:43:45:f3:d9:cc:
4b:bf:87:ae:e6:8a:36:b8:42:c9:f4:05:39:39:d5:14:7c:21:
31:19:52:68:82:0d:e8:52:ae:16:fa:8a:72:23:64:09:27:90:
53:7c:10:2f:b6:a3:38:d5:fb:79:92:3c:de:dd:d6:4f:37:a5:
dd:32:76:47:14:45:b0:7d:9c:37:6f:a6:cf:c6:12:c0:bb:17:
cd:2a:04:03:9a:ad:30:e1:f2:a3:49:c4:9d:40:1b:97:41:e7:
5b:75:ae:b6:62:b2:6e:7b:45:5b:69:5a:4e:00:9a:9e:f8:c6:
e2:22:58:1a:0b:b4:b0:02:85:ba:82:0f:55:7b:78:da:8f:f1:
7a:7c:49:3d:90:c6:51:4c:67:bf:78:43:53:96:87:9a:a0:57:
69:9d:32:b2:1c:35:8c:67:18:48:15:1e:84:50:af:d6:5d:ce:
bd:57:8a:74:0d:ad:b0:62:c7:2b:de:da:a4:30:f7:26:b4:28:
c4:bd:f2:9c:26:18:8a:c0:f6:28:2f:a4:e2:4b:fc:f9:e2:33:
81:e4:df:88:0d:b2:dc:16:fe:0b:78:99:3a:9f:f9:b2:90:98:
dd:4e:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:48:04 2025 by rpki-client