Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa
File: Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa (raw, json)
Hash identifier: N2JyPxT8+m5HQDRPSXJdJM2oBFZFnSgrTMkI9DghAaA=
Subject key identifier: 43:C1:51:BF:E0:16:E8:B0:8F:7B:E3:61:63:D3:57:37:92:E7:0B:8A
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 019427B5D1C380AE4FBB89CD82B0D6460FAA
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 2001:678:330::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d1:c3:80:ae:4f:bb:89:cd:82:b0:d6:46:0f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c151bfe016e8b08f7be36163d3573792e70b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:ca:a2:48:2a:ee:ce:25:eb:dc:59:c0:8d:
0a:67:0b:31:79:53:47:8a:c7:7d:c5:1b:15:3e:d8:
1f:a4:33:79:89:87:06:0b:c5:8f:3c:df:a3:ab:bd:
08:ae:f6:44:32:fe:48:c5:70:50:94:c1:07:37:fc:
59:fd:16:9a:be:d7:17:3f:d0:2b:ae:3a:cc:5d:34:
f0:46:15:88:d0:34:ee:c6:7f:22:78:15:fc:1c:09:
25:16:2f:1d:60:03:32:23:bc:5e:c3:64:30:1e:2f:
bb:58:f8:9c:5f:42:90:d6:ad:5b:cc:17:75:25:01:
02:a2:3f:b7:bb:03:52:da:96:7d:93:33:c4:5c:5b:
d0:f4:e3:ef:04:ae:91:c6:4e:5b:41:c5:9a:e5:1d:
82:2a:ec:ab:dd:60:7a:3b:11:c7:77:6f:79:4a:00:
20:19:3b:a3:b7:f3:6b:01:42:b5:4e:ca:a1:f7:5c:
89:96:79:8f:f5:bf:09:fe:5a:6f:e4:d2:eb:10:3f:
81:d4:f5:45:7e:5b:f8:8f:47:b7:b3:b2:f5:30:76:
5d:8f:7e:79:1a:b8:cb:5f:4d:25:31:c3:94:5a:e0:
20:9e:be:8f:56:26:ce:95:2d:19:37:87:3c:68:21:
ed:00:34:b0:45:e1:1c:73:b2:d8:29:34:9b:a3:82:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:51:BF:E0:16:E8:B0:8F:7B:E3:61:63:D3:57:37:92:E7:0B:8A
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:330::/48
Signature Algorithm: sha256WithRSAEncryption
3f:62:7c:e0:d5:31:83:5f:a7:32:e4:44:1f:b3:be:16:45:a9:
65:f2:11:85:8a:8c:94:25:dc:dd:fa:d5:7c:79:ed:d8:f4:3a:
60:91:a6:43:fb:81:b5:7d:09:d9:83:11:49:2a:1d:27:81:3e:
da:e7:1f:54:2e:68:ff:54:e1:20:63:56:da:7e:20:ee:c3:4b:
34:d9:f7:28:c0:1d:70:76:08:e6:cc:10:58:d0:3d:54:22:36:
d7:aa:27:74:cf:be:7b:07:fb:8c:2a:2c:4b:55:0a:06:7a:40:
c5:20:6b:d0:80:10:d0:58:47:18:56:fb:8f:17:64:1c:25:c6:
28:10:d6:ab:ff:f7:0e:a2:d6:19:db:fd:25:e5:5f:06:3f:09:
ec:24:36:3e:63:97:6e:11:e6:28:c8:5f:2b:52:c3:20:77:50:
e9:af:13:3f:92:1e:e5:35:2d:63:83:30:b0:e7:9a:b0:a0:de:
df:9f:06:e5:fc:6f:15:17:6f:c9:49:d1:c4:d7:41:24:ab:29:
13:42:c6:41:77:06:8b:8c:7a:fe:66:a7:4e:72:b6:ec:ea:13:
b4:c8:e3:64:24:e0:db:27:30:8a:44:66:e6:eb:0f:9e:00:2d:
03:43:66:c3:34:6d:8c:3b:2c:84:ec:fd:cd:e6:4f:71:d7:3d:
6c:f7:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:39:26 2025 by rpki-client