Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa
File: JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa (raw, json)
Hash identifier: f214yyN1FtBYx9omDVPh5FOJpLcqVPrmTXzmLrvFbb4=
Subject key identifier: 25:02:D5:B5:73:7E:4E:AB:4B:A7:D8:73:2D:76:0B:B7:66:21:D7:39
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 0194258FAEA349D43ADFC75E89599D9EA006
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214017
IP address blocks: 2001:67c:f3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:a3:49:d4:3a:df:c7:5e:89:59:9d:9e:a0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2502d5b5737e4eab4ba7d8732d760bb76621d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:ce:5f:0b:c7:54:a2:15:df:72:92:8a:51:
06:bc:4d:9b:5f:0b:f0:02:50:85:38:66:9a:04:bb:
db:64:6e:1f:67:be:65:ae:4c:f4:81:58:53:04:0e:
5a:ae:c9:5a:7f:d0:43:b1:9a:df:db:5e:c1:bd:32:
12:71:b7:73:0c:58:a2:6f:d9:69:f2:52:8e:f6:97:
3f:31:10:41:83:89:e4:94:63:73:a1:eb:ac:c4:7b:
ad:19:78:3e:cc:de:76:20:26:cc:de:2c:df:6a:85:
cd:f2:06:e0:78:66:55:33:f9:94:a3:51:f3:72:b3:
a9:b7:2e:42:5e:3e:4b:33:52:bc:91:88:93:31:96:
ba:a7:7a:b9:5b:00:40:d0:ac:c5:7e:eb:c2:c0:35:
72:16:27:3f:00:70:df:b6:cb:9d:ce:3a:28:d7:3b:
6a:5c:0a:56:30:96:25:d6:e6:86:9e:ab:bb:25:c9:
f0:ee:39:df:52:3d:e3:c5:02:0d:b1:6c:39:f1:52:
8c:41:52:fd:af:cf:20:9d:52:d7:4c:2f:a5:1a:8d:
95:90:ab:bb:73:de:5f:e6:ee:f4:82:89:56:fa:bf:
e5:05:31:db:d1:1e:83:5e:3d:3b:87:70:b3:42:cf:
30:0d:2c:de:91:ae:ef:eb:9d:2d:e0:4e:28:a4:b4:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:D5:B5:73:7E:4E:AB:4B:A7:D8:73:2D:76:0B:B7:66:21:D7:39
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f3c::/48
Signature Algorithm: sha256WithRSAEncryption
7a:e8:dc:c7:e3:58:a4:79:1e:b7:ee:64:56:fb:a4:79:0f:a6:
19:f8:b3:8e:1a:30:1f:60:31:fb:ec:68:4b:bc:68:fd:79:96:
88:26:e3:c5:3d:43:11:cd:24:05:bd:4c:f9:6f:09:79:cc:81:
1c:bc:a0:42:9b:69:d2:9a:83:0d:b5:b2:dd:ea:c9:13:61:17:
8e:ac:3d:07:f6:61:98:ae:d5:93:d1:54:ab:49:2d:45:51:49:
17:ce:38:b3:81:a0:56:e2:3d:83:02:03:36:8d:79:1c:1a:7e:
43:bf:94:5f:79:a0:d3:94:68:87:b2:c2:57:3b:d3:69:23:f9:
e0:81:a7:a1:84:72:fc:09:e1:78:07:81:84:ff:34:e2:a5:a2:
26:73:14:a2:4f:7a:16:89:b2:06:a6:f2:1a:29:74:e0:c2:7b:
89:51:13:4e:53:6f:4f:1b:0f:1b:d6:70:3e:b5:43:f3:87:a0:
40:f7:c2:61:cb:7b:fe:8f:0d:77:3f:b7:e8:b8:19:93:75:09:
ae:b3:1e:b0:f3:6c:17:98:89:d9:7c:1f:fa:89:4d:42:fe:d6:
97:03:39:20:2a:7c:66:4d:40:ee:16:a5:ad:93:1e:21:93:6e:
36:7b:78:df:72:70:98:e5:af:1c:67:36:68:c5:5d:39:6a:8f:
c7:c4:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:15 2025 by rpki-client