Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/t8cq4b1nAfG-fC4vwdKSmjzZztc.roa
File: t8cq4b1nAfG-fC4vwdKSmjzZztc.roa (raw, json)
Hash identifier: URrKscem9x14TGL4Viw7da7kLuo3IZFxvYHMeZaxOEs=
Subject key identifier: B7:C7:2A:E1:BD:67:01:F1:BE:7C:2E:2F:C1:D2:92:9A:3C:D9:CE:D7
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 019421B2205B3B01A970BA31CE0CB3879944
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/t8cq4b1nAfG-fC4vwdKSmjzZztc.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48024
IP address blocks: 2a02:7080:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:20:5b:3b:01:a9:70:ba:31:ce:0c:b3:87:99:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7c72ae1bd6701f1be7c2e2fc1d2929a3cd9ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:69:dc:17:e3:ad:ea:d1:2e:d7:45:8b:7b:0e:
b8:4d:0e:45:d6:af:d6:9f:b2:14:cf:04:02:de:47:
0b:f8:54:b8:33:8e:98:ec:0b:90:ca:88:93:71:11:
29:26:64:5d:95:93:d4:e6:7d:b2:a9:d9:cc:f3:72:
61:9a:0e:fd:76:49:5d:f3:fa:40:ba:66:60:0a:57:
1d:cb:43:60:11:3c:04:a6:72:5b:c8:c0:65:1a:5a:
af:73:76:60:d5:99:a7:fd:42:e1:37:41:e6:c6:0d:
ef:0b:72:4e:38:9f:24:38:6a:6a:f8:80:b5:92:91:
aa:c2:b6:3d:f4:5b:b2:f6:30:a6:05:d3:9e:42:2f:
11:4f:da:49:0c:0e:c7:d6:31:2e:9f:92:0d:6a:62:
37:ae:47:f3:f7:e5:e0:0f:fe:ca:b1:ab:c9:0f:b5:
a6:e5:5d:83:f9:c8:b1:1b:4f:fc:9b:bd:73:e8:6e:
b7:6d:ae:82:fe:21:99:6d:96:6a:83:8c:32:4d:5f:
24:b9:b1:4a:a6:2e:80:98:d8:4e:e4:df:d9:39:bb:
40:f7:1a:4a:6a:28:c7:a4:6e:e7:fb:aa:bd:02:83:
3e:c6:c8:1c:52:61:b0:7f:31:f0:e7:45:75:02:3e:
79:55:38:ee:72:8b:5b:8b:5a:53:dc:a0:82:3c:62:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C7:2A:E1:BD:67:01:F1:BE:7C:2E:2F:C1:D2:92:9A:3C:D9:CE:D7
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/t8cq4b1nAfG-fC4vwdKSmjzZztc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7080:3000::/36
Signature Algorithm: sha256WithRSAEncryption
c6:10:21:46:96:a8:e8:fb:c4:78:20:7e:53:5a:9a:1b:a7:37:
01:ee:c7:bb:66:33:b9:34:64:9d:1f:9a:bd:72:4f:60:76:6d:
80:e3:0b:29:40:ca:f4:12:c1:b4:da:96:e4:1d:18:56:72:22:
30:dd:54:20:8e:54:f4:8e:55:6c:2b:4f:d9:d5:3b:eb:cb:1d:
aa:12:ed:8b:db:13:9b:03:f5:3c:c4:43:50:8c:80:e7:98:4e:
bf:0e:14:b6:5a:f4:69:63:c0:7e:b4:26:c1:4c:b2:02:d4:9a:
85:b2:24:28:5d:74:2c:22:cc:b3:9d:0c:67:b3:79:6d:33:76:
3e:ef:72:61:77:5a:fd:ad:9f:e7:b3:6a:be:c0:30:48:4f:d0:
a0:54:7f:a1:b3:ac:3e:1a:4b:bf:6d:a9:8c:9c:ce:50:4f:56:
bb:ea:85:1d:bb:76:79:f2:3d:eb:35:ed:0f:e3:33:2f:19:fe:
aa:64:86:12:f8:33:23:fb:d8:11:5f:5e:79:a8:1b:c2:2f:d9:
35:a5:2c:e4:ec:af:01:ac:4c:60:99:0d:e9:6c:b3:a7:66:3f:
f1:1f:fc:d5:a2:b4:03:9e:70:f1:45:72:84:8e:6e:ec:a8:9c:
76:cb:69:cc:c7:8b:ce:6b:15:44:46:0b:4a:7d:84:e2:03:88:
c1:ba:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:24 2025 by rpki-client