Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hIlU1ledlK0WoRmp-tL_K_qi2N0.roa
File: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (raw, json)
Hash identifier: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=
Subject key identifier: 84:89:54:D6:57:9D:94:AD:16:A1:19:A9:FA:D2:FF:2B:FA:A2:D8:DD
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 0194258F58E16179F77FE30C92977A6368C7
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hIlU1ledlK0WoRmp-tL_K_qi2N0.roa
Signing time: Thu 02 Jan 2025 05:48:58 +0000
ROA not before: Thu 02 Jan 2025 05:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212034
IP address blocks: 2001:67c:2918::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:58:e1:61:79:f7:7f:e3:0c:92:97:7a:63:68:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Jan 2 05:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=848954d6579d94ad16a119a9fad2ff2bfaa2d8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:4e:10:e0:fd:2d:86:37:a8:d4:e7:7f:e2:
47:5c:66:b2:96:65:13:8e:33:f0:27:84:8a:42:f4:
1c:0a:c4:f0:3e:03:79:1d:ea:85:7d:c1:41:eb:2f:
d8:71:bb:ef:62:da:74:9c:c5:5e:3a:56:fb:4c:96:
ed:55:e2:2f:92:32:50:2a:4c:80:27:f0:a5:72:1a:
b7:63:c9:85:57:0b:15:a7:f0:96:d6:1f:ad:a0:c4:
bc:6a:3b:36:cc:89:36:4b:db:7c:33:72:2b:ad:0e:
ba:d4:3d:08:12:7e:17:f8:10:94:44:86:0a:de:46:
d7:db:47:1f:ee:fc:75:50:f1:9b:f5:05:13:76:a0:
3d:6a:d2:62:73:52:6c:d7:fd:69:d4:65:58:09:ed:
39:34:e5:a4:4a:9f:18:64:fe:f9:1f:6d:60:f9:d8:
9f:54:71:82:dc:05:78:9a:57:65:04:77:43:3d:aa:
88:85:69:b7:09:c7:51:dd:6d:12:51:ab:59:06:7f:
6f:2b:91:11:ea:ad:d0:ae:fc:2e:20:7d:d2:03:0b:
32:72:68:31:c2:fe:88:79:9a:d3:d6:e6:5d:dd:f2:
5f:68:8c:6f:8e:81:39:3b:84:3e:51:b9:56:02:9f:
76:d2:5d:7b:ba:ca:c2:df:bc:79:c4:de:48:f4:3d:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:54:D6:57:9D:94:AD:16:A1:19:A9:FA:D2:FF:2B:FA:A2:D8:DD
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hIlU1ledlK0WoRmp-tL_K_qi2N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2918::/48
Signature Algorithm: sha256WithRSAEncryption
0c:21:94:9b:74:d8:6e:9c:04:95:53:e7:8c:0c:0e:4c:d2:35:
b7:6f:d2:f7:85:39:ea:bf:ee:37:40:0c:44:83:b6:f8:ce:82:
19:1a:84:b3:e9:8f:10:82:03:22:0e:76:74:d4:b3:45:90:bb:
f5:0f:d3:78:f2:ee:04:39:03:8c:0e:56:db:a2:03:d9:5f:da:
7f:4f:28:93:f3:ce:c0:9d:79:67:f8:2d:a6:78:f4:23:1a:d4:
83:99:e7:91:77:47:49:db:db:72:ec:ea:bb:f3:79:c0:0b:05:
99:72:81:41:d5:3a:cd:0b:47:b2:74:80:11:34:90:35:d9:97:
7b:48:03:33:47:01:a9:17:21:6b:de:da:9a:ac:6f:ad:8b:78:
26:05:04:f3:63:7e:18:35:12:f2:b2:ab:3c:05:71:44:4a:34:
b3:3c:90:f4:3b:c4:d4:fe:0d:ab:22:1b:00:2c:a7:42:1f:64:
2c:b9:fc:58:b4:5c:4f:68:81:a0:76:82:fb:53:8c:bd:c6:2a:
2d:1f:96:d5:8c:6e:3f:9c:83:e8:15:78:25:33:40:c4:55:ee:
c0:13:a6:a1:f1:a3:cf:7a:0a:f1:0e:97:e6:98:d9:34:96:f8:
38:dc:2f:ca:c9:8c:6d:c6:a3:ed:e2:a4:8b:55:c3:ac:74:04:
32:e5:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:22 2025 by rpki-client