Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa
File: l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa (raw, json)
Hash identifier: NLd7UhunGsXkE5IXHeIn2nj/Zfr5LqW+H7ZS9niwIqs=
Subject key identifier: 97:F4:72:E4:53:A8:F8:E8:94:29:16:7C:72:D8:6B:B6:D9:BE:17:D6
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019424456C7FCEB09241A562637D278C5131
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31216
IP address blocks: 2001:678:8b8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6c:7f:ce:b0:92:41:a5:62:63:7d:27:8c:51:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97f472e453a8f8e89429167c72d86bb6d9be17d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:03:46:54:9c:1b:9d:50:8e:a8:00:d1:81:
13:69:cf:b9:a1:9a:58:cd:33:67:dd:75:9b:d9:18:
0e:92:a9:37:b8:48:cf:59:fb:59:46:25:ca:e0:88:
5a:58:22:98:e0:44:bb:74:fd:db:d8:22:21:02:8f:
a5:8a:59:2a:49:4c:23:b5:b6:e9:57:f4:6e:ca:34:
81:87:86:0d:1d:2b:77:62:39:6f:82:24:56:7c:cd:
f3:22:81:d0:96:92:7d:54:03:f8:04:83:e4:f5:54:
82:4f:07:1c:00:1e:42:51:45:24:17:26:4a:80:57:
d0:ee:c1:67:b7:89:06:ce:2f:ab:f0:46:9c:8a:e9:
69:f6:23:5f:34:02:b5:cc:4a:f2:bc:c6:bf:a9:85:
63:65:45:0e:a5:fd:f0:32:35:bf:25:48:1b:4f:3b:
02:4c:67:92:d1:8d:ea:60:81:75:57:e0:ad:04:fb:
d0:4c:16:91:0b:fa:51:15:7f:66:bc:e6:50:fe:40:
1e:bb:12:14:25:7f:92:10:47:72:5d:f6:f6:28:56:
60:19:6a:d5:07:aa:13:8c:e3:12:18:29:4d:47:22:
84:1e:12:5a:fc:1c:ac:56:aa:7f:f2:d5:a9:a4:6a:
c6:12:34:e0:16:c2:9a:2e:73:6b:29:69:c4:f1:df:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F4:72:E4:53:A8:F8:E8:94:29:16:7C:72:D8:6B:B6:D9:BE:17:D6
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:8b8::/48
Signature Algorithm: sha256WithRSAEncryption
28:35:a0:4b:0e:9c:8c:1f:10:76:d3:36:41:9f:76:1b:c8:9c:
ea:6f:ac:af:2b:47:58:2a:b4:7f:34:0e:e6:32:6a:7b:bf:db:
a2:12:be:71:98:e4:25:cd:ee:5c:5a:13:27:e1:e7:18:04:b2:
74:a5:bd:e9:b0:b8:18:30:e0:20:b9:3c:52:0c:27:3c:77:13:
c6:ea:1b:a5:4b:ac:59:af:f4:cc:da:4a:09:e0:de:d6:bf:ef:
c9:19:05:f2:9e:b8:fe:85:b9:c3:c1:c8:ec:0f:24:32:9b:2b:
2a:a9:d8:c9:25:87:e8:46:e7:3f:6a:e4:3d:aa:d3:a2:8c:0d:
67:7f:4a:76:45:74:12:30:fc:3b:41:ad:26:57:58:d9:0e:b7:
c5:58:d4:aa:9a:69:a5:20:6c:6b:41:8f:a6:0d:7f:a4:39:dc:
60:13:97:ee:7d:ab:5a:76:a0:6d:2f:21:05:45:32:2f:f4:07:
9b:fd:87:ec:8e:7f:7a:ad:27:62:7e:08:32:38:26:67:ee:b5:
3f:4b:b1:f7:19:c8:61:c7:52:51:14:01:05:9b:f9:6e:82:be:
1b:93:6f:93:70:93:08:1f:7d:06:b7:72:5f:a5:b6:e9:0c:4b:
01:52:09:53:fa:75:4d:22:7d:9b:f2:fc:e1:05:80:8f:56:5f:
ad:d3:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:02:26 2025 by rpki-client