Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/5_qRdcU_zBI67bUjjCeGmUT4bso.roa
File: 5_qRdcU_zBI67bUjjCeGmUT4bso.roa (raw, json)
Hash identifier: S33Bj4i6cQIjVG+I+Gmo76E+1aI2U06ldTXtc0u4sXQ=
Subject key identifier: E7:FA:91:75:C5:3F:CC:12:3A:ED:B5:23:8C:27:86:99:44:F8:6E:CA
Certificate issuer: /CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Certificate serial: 01942747916B76640391080A0C265D906009
Authority key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/5_qRdcU_zBI67bUjjCeGmUT4bso.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214592
IP address blocks: 2001:678:60c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:91:6b:76:64:03:91:08:0a:0c:26:5d:90:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fa9175c53fcc123aedb5238c27869944f86eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:e6:9d:34:31:5f:a6:4d:b0:2b:78:73:e1:
69:53:54:45:2c:00:23:13:39:2a:d3:24:79:15:89:
21:fb:76:54:d5:9e:6d:46:e0:d7:64:82:23:fa:a8:
63:c9:1f:66:bb:18:0a:d1:80:d6:97:83:bc:e1:c9:
d9:4e:fa:e5:84:5f:e3:c3:5b:3a:cb:63:2a:67:1e:
0b:96:8d:e9:5e:28:0b:d8:84:89:87:cf:25:29:82:
2e:96:ec:5b:14:6c:44:8b:88:61:ca:26:74:f0:15:
3b:84:fe:9a:98:40:3b:74:ee:cb:3d:3a:fc:6b:81:
9c:77:d2:93:e9:b0:46:6f:75:3b:30:ab:50:fa:0e:
aa:62:99:4f:b7:f4:1c:31:59:2f:1c:47:62:1c:f9:
26:6e:fa:d9:3d:77:f7:c2:74:62:8b:78:c9:7c:3d:
44:e0:2b:c5:7c:ce:38:fe:7f:29:5e:12:47:33:e8:
f5:58:c6:e8:80:71:38:52:e0:3f:a6:0b:d5:b0:d5:
f0:45:3f:b7:b5:41:2a:6c:cc:25:3f:ae:98:ec:ec:
28:a9:6f:dc:8e:06:cd:d6:a8:95:fb:0b:4c:c7:86:
b6:33:14:04:e1:62:11:32:72:07:fe:4c:21:64:36:
10:32:79:17:11:8a:f1:8e:b0:b3:c0:5c:b3:7c:f4:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:91:75:C5:3F:CC:12:3A:ED:B5:23:8C:27:86:99:44:F8:6E:CA
X509v3 Authority Key Identifier:
keyid:4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/5_qRdcU_zBI67bUjjCeGmUT4bso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:60c::/48
Signature Algorithm: sha256WithRSAEncryption
1d:dd:ee:bf:5e:f4:f3:23:c4:57:46:ec:6f:9e:31:40:79:ec:
83:76:67:c4:03:80:91:ff:ca:5a:fe:f5:e6:ab:ff:09:59:9b:
85:2d:9a:56:8b:f0:ea:99:8c:da:96:e1:5c:7e:39:5e:87:e2:
ea:d3:11:87:3e:63:96:d7:cd:89:96:fb:c1:6e:4c:c0:4d:13:
2e:d5:f6:3d:b8:c8:8c:83:f8:55:14:9a:3a:80:6a:ca:6a:cc:
02:bd:4d:b2:21:7b:e0:f8:3d:c0:75:69:5b:bb:4c:b5:bb:be:
2c:9f:76:52:36:56:8b:a6:b0:11:4f:47:f2:29:6d:0d:57:e2:
ff:37:eb:27:7e:1e:ea:99:6d:af:1f:94:34:a2:7c:e4:a9:89:
a8:45:37:78:94:5e:4f:9d:86:cc:fc:a8:f7:e7:1f:1b:a8:24:
68:7d:02:07:3d:9a:36:f6:4b:8b:e9:69:55:ca:40:03:7a:74:
e9:cc:d8:ab:a8:20:f3:e2:63:67:13:d1:9e:0c:b1:cf:e9:70:
bf:12:d4:81:bf:e5:a6:1a:2c:f9:79:71:b5:ea:ab:bc:ca:28:
66:57:3a:0e:77:cf:e4:06:d7:40:c9:4b:22:27:89:4c:42:4f:
a4:32:c5:c1:74:00:d0:42:a1:e7:cc:6e:44:d0:61:d8:08:c9:
35:55:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:22 2025 by rpki-client