Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m7C4LK8pgT5lORZBsv-BS_VdFFQ.roa
File: m7C4LK8pgT5lORZBsv-BS_VdFFQ.roa (raw, json)
Hash identifier: X3l+LpnL2+oK3trvHtfdrKfFth5mN5qj+aVKY9/H5Rw=
Subject key identifier: 9B:B0:B8:2C:AF:29:81:3E:65:39:16:41:B2:FF:81:4B:F5:5D:14:54
Certificate issuer: /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial: 01941F8C775290DBE1AF0AE256C58909E34A
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m7C4LK8pgT5lORZBsv-BS_VdFFQ.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22634
IP address blocks: 2a04:7141::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:52:90:db:e1:af:0a:e2:56:c5:89:09:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb0b82caf29813e65391641b2ff814bf55d1454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:54:13:10:a0:3a:40:cc:33:ab:52:ef:17:
12:18:c5:7a:b4:6f:69:e8:b0:2d:ac:f4:dd:4d:1f:
c8:ad:3b:1e:c0:fa:20:e7:65:98:b8:cc:b3:b3:e8:
bb:ee:fa:ec:63:b2:71:c6:4c:71:d8:48:22:76:56:
70:3d:af:7a:8d:57:c5:0a:54:6f:b7:b6:94:08:91:
7d:ac:6c:b7:04:27:36:98:1b:18:15:f8:73:3f:0b:
a4:06:67:48:35:05:a0:31:fc:f5:b2:cd:97:7d:c9:
9d:50:a8:c3:84:18:34:35:8f:3e:07:88:3d:81:fd:
9e:c9:60:03:bd:cf:53:cc:47:d1:d3:d3:ac:ef:b7:
4b:17:f6:f8:ee:ae:b3:9c:33:fb:c5:0b:a1:60:f6:
7d:1e:b8:e4:7e:b1:e5:f9:6e:17:72:7e:32:01:3f:
ad:51:6f:36:09:80:d3:3f:b7:6a:e4:b1:f0:00:8e:
07:6c:82:ce:06:4f:e9:2b:49:69:75:73:5f:6f:91:
40:09:80:0e:6b:b8:7f:ff:c0:d1:a6:da:7b:23:31:
ff:97:15:9b:72:6f:cc:28:58:c0:70:e7:f6:fa:96:
e2:7a:96:a9:aa:cc:dd:21:f3:2f:44:e2:6a:3d:0f:
8d:77:b7:84:25:ed:22:3c:3a:13:22:97:95:6a:e9:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:B8:2C:AF:29:81:3E:65:39:16:41:B2:FF:81:4B:F5:5D:14:54
X509v3 Authority Key Identifier:
keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m7C4LK8pgT5lORZBsv-BS_VdFFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:7141::/36
Signature Algorithm: sha256WithRSAEncryption
1a:96:af:3f:9a:5b:11:c7:b3:70:cb:8e:b1:af:be:d7:7f:34:
0f:08:3d:3f:e6:15:c7:f6:83:83:b8:06:7a:df:d2:d3:54:e6:
a7:e1:ed:93:5d:22:f2:a1:72:b4:64:31:02:56:22:6e:ec:02:
0a:2c:7b:98:6f:d0:92:37:76:d4:10:43:0a:11:f0:5b:1f:3f:
8d:f1:61:73:c6:51:6e:f4:7f:db:a5:8d:2f:49:c9:00:83:84:
5f:32:0f:9a:44:32:06:db:22:b4:79:24:a6:f3:0a:cc:a7:8e:
6f:99:30:cf:1e:5d:0c:da:13:29:5f:1d:ad:7a:b0:e1:11:1f:
30:e4:18:e0:c4:42:e6:23:e3:65:17:8c:71:29:b1:e5:6e:b3:
0f:54:15:17:ec:f0:a6:69:2b:cd:6d:fa:d4:08:1b:7d:9b:26:
26:c0:91:64:dc:f2:1b:fa:0e:e8:d9:f8:4d:53:d0:3e:52:9b:
b7:9e:de:b4:32:19:e2:7a:50:a7:79:04:c7:e5:69:a2:e6:61:
77:aa:95:4d:00:62:af:42:cf:80:eb:76:46:a9:1e:f8:cf:7b:
ea:6a:48:b9:cf:e4:4d:f9:31:c9:f9:3b:29:08:d7:f2:fc:88:
a4:47:72:fe:61:04:ae:34:bd:9b:3a:a8:6a:47:94:78:2e:dc:
0e:d6:c0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:45 2025 by rpki-client