Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/JFSPkHUXD6uekiRT14OFUV3SRJ8.roa
File: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (raw, json)
Hash identifier: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=
Subject key identifier: 24:54:8F:90:75:17:0F:AB:9E:92:24:53:D7:83:85:51:5D:D2:44:9F
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 019422FB723446D8627FA76D46AF373225EB
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/JFSPkHUXD6uekiRT14OFUV3SRJ8.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212828
IP address blocks: 2001:67c:a58::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:72:34:46:d8:62:7f:a7:6d:46:af:37:32:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24548f9075170fab9e922453d78385515dd2449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:83:96:16:6a:db:d1:77:fa:9a:2c:12:b9:
fc:11:b1:fe:e7:f8:f4:bd:0c:4b:8a:50:d6:7b:d7:
a5:ea:8d:a1:53:37:15:8f:62:a9:b4:f5:1c:f1:a7:
5a:7a:ee:b0:0a:d9:73:af:dd:77:10:63:ce:5b:28:
87:28:f5:19:af:e7:28:80:e8:8d:fa:36:1c:d0:ef:
43:95:4b:bb:55:8f:07:0f:66:13:38:ac:1a:2e:91:
56:80:2b:81:cd:0a:55:6d:ce:96:12:4b:a9:8b:58:
4b:f2:63:38:d1:53:49:6e:26:9c:f7:5e:09:52:7e:
22:b4:35:54:53:00:6a:90:41:5b:a2:0b:45:25:ff:
5c:03:12:7f:8f:9c:48:9a:61:9f:03:ac:db:ab:8d:
c9:ea:a0:fd:b6:2b:63:9e:e7:4b:b7:7e:04:58:62:
0e:fb:02:72:24:be:55:b6:86:7a:e3:07:bf:48:49:
6d:4a:5a:27:2b:57:90:73:e8:cc:f0:02:0d:77:28:
9d:fb:a6:8f:52:6c:98:18:25:fc:2c:a7:91:ef:d8:
96:26:c6:57:fb:b9:05:78:6a:87:f7:eb:dd:db:ed:
7d:6f:9b:5f:b9:2c:33:c2:62:80:4c:90:e4:69:af:
8c:a5:fd:d7:6b:01:1d:1b:dd:1d:52:86:b8:db:55:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:8F:90:75:17:0F:AB:9E:92:24:53:D7:83:85:51:5D:D2:44:9F
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/JFSPkHUXD6uekiRT14OFUV3SRJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a58::/48
Signature Algorithm: sha256WithRSAEncryption
6d:11:6b:a9:0a:d6:04:c9:9f:1d:d1:89:86:f5:b1:4e:35:b5:
40:cf:06:02:a4:3a:6c:53:0c:46:0b:a2:28:3e:ed:05:02:17:
d5:d3:fc:f3:2a:de:03:a5:bd:d1:c4:0b:a4:bb:c0:c6:5a:52:
d0:ed:c6:df:4e:ac:e5:2a:c7:e2:ee:5f:fb:d3:fb:58:58:8c:
d1:a8:eb:41:47:38:75:56:39:a4:fe:32:5c:3e:c5:53:44:80:
e3:f9:a5:1e:11:dc:bb:e9:05:e1:fc:03:12:02:7d:f6:3e:14:
e1:9f:48:ea:85:61:38:c9:8c:6a:02:dd:8f:d5:9c:23:c4:23:
63:e8:b2:bc:34:17:b4:42:ca:06:4f:33:1a:69:f9:98:a6:af:
49:21:72:c8:04:75:10:6c:5a:b0:4a:cb:36:76:12:83:d2:65:
37:8f:1f:d3:02:19:ed:92:9a:d1:f5:d6:de:2c:cc:4e:cd:5c:
30:a3:07:be:ee:31:02:21:02:82:11:dd:61:10:e1:7a:b7:11:
d1:ef:a5:21:03:99:0d:75:4c:1f:b5:ee:07:11:84:5e:e4:31:
11:24:f2:da:3f:f8:1e:95:e3:60:19:12:3e:d9:2a:55:a3:d5:
4d:59:37:66:1b:bd:15:a3:3f:a8:89:76:7b:5c:08:cc:b8:70:
cb:84:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:28 2025 by rpki-client