Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa
File: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (raw, json)
Hash identifier: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=
Subject key identifier: 8E:BE:CE:8B:E5:4E:06:FF:CB:04:31:A0:01:16:C7:E7:28:B4:7C:21
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 019425222EC85A42AE8E2628B67C61DD72C8
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206081
IP address blocks: 2001:67c:c64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2e:c8:5a:42:ae:8e:26:28:b6:7c:61:dd:72:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ebece8be54e06ffcb0431a00116c7e728b47c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:85:42:bf:a8:29:34:d8:2b:e1:6d:d6:fb:
24:90:ab:10:15:51:82:bf:4c:7f:c4:a9:87:eb:59:
1e:dd:24:34:86:e2:a2:f1:18:da:d9:93:f6:cd:32:
41:24:29:54:38:9c:9d:c6:8a:86:dc:b6:52:1e:0b:
ed:5d:10:2a:ac:4f:ff:31:86:a3:43:c5:ee:d0:4d:
f3:7e:9d:b4:41:06:d1:59:cc:81:a2:91:03:13:8a:
9e:c1:d0:11:5e:f8:85:65:e8:18:30:9f:1b:3e:a7:
14:a5:ca:cf:a9:87:cb:20:4b:98:51:0c:2e:09:4e:
77:0e:b1:db:2c:51:77:bb:23:6d:49:da:df:f9:1f:
d0:a1:a8:b0:14:24:16:9e:8d:6d:b3:ce:00:70:82:
57:16:29:4b:1f:ee:f7:db:28:2a:ab:3f:52:14:e3:
8e:40:5e:2a:7a:86:3b:26:f3:7d:c8:a0:87:0b:77:
8c:d2:e3:9f:0d:c3:15:c7:97:97:33:0f:a5:6e:ba:
48:97:cf:af:26:12:03:af:87:db:57:98:69:fa:f7:
12:de:99:a0:fa:fb:f7:da:da:fe:9f:54:97:53:19:
d0:a9:43:5b:ee:f8:ca:23:4c:49:43:58:fd:76:6d:
a4:ef:26:7e:da:f5:f4:77:0b:c3:df:b1:ad:8d:72:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BE:CE:8B:E5:4E:06:FF:CB:04:31:A0:01:16:C7:E7:28:B4:7C:21
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c64::/48
Signature Algorithm: sha256WithRSAEncryption
00:e5:09:55:4c:59:49:74:f9:b4:2c:67:5d:24:dd:76:45:d6:
38:f7:bb:52:bd:c4:ae:6a:52:b1:79:5f:9a:01:d5:ff:5f:9b:
b1:4e:ef:2e:d0:c5:61:40:0e:ee:e4:a3:dc:63:00:92:10:21:
aa:56:0a:67:70:8d:4d:2f:49:69:e6:65:2d:db:b8:ca:33:fd:
55:2c:a6:0f:b9:64:26:44:9c:79:91:57:a7:fa:20:0e:7f:01:
4d:c5:c2:e7:d3:33:5a:d8:b0:5c:a8:61:34:63:5a:f6:13:d3:
d5:72:86:6a:64:8a:14:4c:0d:d6:47:b8:ce:f4:58:06:1b:fb:
0f:46:99:61:bd:e6:78:02:e6:d8:3c:e7:12:9e:a9:58:2e:eb:
e6:be:58:fd:db:ce:c2:95:a9:5c:c7:13:68:b3:3b:64:a2:36:
9b:43:33:4f:f7:f3:a7:74:47:5b:ad:7e:aa:e6:1d:35:fe:74:
97:ee:36:13:81:69:01:a2:f7:32:d4:be:d6:b4:d7:3d:cf:52:
81:02:5d:ef:4b:46:39:43:f1:52:10:49:57:c8:6e:b3:fc:e1:
b2:43:12:1e:8e:d1:b7:12:ff:c6:0c:28:de:c5:29:e2:d9:02:
1a:e7:56:d5:1f:8e:c6:22:fa:8c:a8:d0:41:f3:66:34:06:77:
01:55:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:29:19 2025 by rpki-client