Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/G8fzQDALPsZtnyHdyazBSsu_jP4.roa
File: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (raw, json)
Hash identifier: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=
Subject key identifier: 1B:C7:F3:40:30:0B:3E:C6:6D:9F:21:DD:C9:AC:C1:4A:CB:BF:8C:FE
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 019428271878EEDAC379BADC409B0F6BC866
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/G8fzQDALPsZtnyHdyazBSsu_jP4.roa
Signing time: Thu 02 Jan 2025 17:53:58 +0000
ROA not before: Thu 02 Jan 2025 17:53:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142632
IP address blocks: 2a0e:46c4:10b::/48 maxlen: 48
2a0e:46c4:10c::/48 maxlen: 48
2a0e:46c4:10d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:18:78:ee:da:c3:79:ba:dc:40:9b:0f:6b:c8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc7f340300b3ec66d9f21ddc9acc14acbbf8cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:ef:ca:79:49:cd:b9:41:e5:2a:69:43:b8:
8d:28:50:d9:82:cd:a5:31:bc:34:b7:23:f4:e6:fc:
3d:b1:46:4a:ad:14:ba:a0:32:1f:75:53:7e:10:bd:
b4:86:72:62:21:99:36:51:19:f1:72:58:16:2a:20:
df:56:cb:62:b4:c5:00:bd:d5:3f:48:18:9b:41:12:
7e:15:fa:ad:42:39:68:0c:d8:68:d9:85:0c:18:45:
37:5d:99:a4:87:45:53:0e:37:c3:d2:ed:79:a7:6d:
55:0e:d7:e9:6d:bc:55:65:f7:47:7c:c1:60:99:e9:
6e:c9:5e:2d:cf:18:1f:a9:04:52:f5:c2:90:0f:48:
d8:7e:5b:7d:be:92:de:a9:ba:f6:27:92:70:db:90:
2f:52:b0:46:7e:56:5a:2c:ea:2d:d7:8e:ac:a1:89:
02:73:45:a6:f8:a4:f9:69:33:7e:e9:f8:b7:11:b4:
b3:f9:3b:3a:d7:d9:1a:1f:24:07:8f:5d:39:6e:f8:
3e:81:0d:db:2b:06:88:96:7f:cd:2e:6d:94:4b:4c:
7a:1c:b4:b2:05:7f:b5:57:e7:bf:f4:c5:bf:72:1b:
b1:e9:f7:1e:2c:98:35:c4:0f:39:28:73:25:5e:ff:
45:28:ba:d5:75:cd:41:21:83:d2:23:50:1c:50:87:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C7:F3:40:30:0B:3E:C6:6D:9F:21:DD:C9:AC:C1:4A:CB:BF:8C:FE
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/G8fzQDALPsZtnyHdyazBSsu_jP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:10b::-2a0e:46c4:10d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:1f:86:4d:40:4b:83:3b:2a:46:c7:f6:87:a4:cf:3d:94:23:
77:d8:25:7b:47:57:2d:c1:ca:b7:90:3e:9f:c8:e0:f8:e3:25:
8c:b8:99:cd:89:8f:15:11:a6:9c:a1:c0:c1:76:51:04:60:8c:
b2:48:40:91:34:01:b4:c5:15:d3:2d:58:ff:ed:8b:ac:ae:b6:
04:9f:eb:c7:0c:66:d1:b4:cb:85:b6:35:87:50:88:c7:58:de:
49:42:68:5e:b6:a8:ba:ad:c7:d9:fb:bd:09:dd:59:90:76:a0:
9d:96:e6:4d:7c:67:09:d9:66:89:d0:28:f3:be:35:51:e2:55:
0e:90:93:49:9f:18:2c:8f:2a:11:bf:83:82:7a:85:4b:e7:63:
4d:76:7b:87:db:fb:c8:83:69:9a:60:ca:d8:d8:a2:23:1d:bf:
7a:90:da:22:ab:d1:80:a5:a7:fc:ef:6e:b8:9b:6a:68:75:1e:
1a:f1:c2:76:74:c9:fa:eb:40:9d:5f:f6:33:30:bb:f6:58:af:
0b:00:cd:6a:07:e5:34:5b:b4:a1:94:15:13:50:bb:28:c7:d9:
79:ae:13:45:c8:14:12:5b:51:b7:7c:da:0e:e3:9a:75:94:e9:
11:67:8b:1e:33:1a:41:15:aa:04:07:53:17:86:77:99:b5:87:
f0:d6:a2:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:58 2025 by rpki-client