Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/OXFWEO59LWqNp3-W3eA61p6mEl4.roa
File: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (raw, json)
Hash identifier: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=
Subject key identifier: 39:71:56:10:EE:7D:2D:6A:8D:A7:7F:96:DD:E0:3A:D6:9E:A6:12:5E
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 0194282320B18EC0BF36A6D0DC540BB8DA4A
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/OXFWEO59LWqNp3-W3eA61p6mEl4.roa
Signing time: Thu 02 Jan 2025 17:49:38 +0000
ROA not before: Thu 02 Jan 2025 17:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48047
IP address blocks: 2a02:2978:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:20:b1:8e:c0:bf:36:a6:d0:dc:54:0b:b8:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 2 17:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39715610ee7d2d6a8da77f96dde03ad69ea6125e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:f0:17:6f:1a:09:3a:bc:11:ee:7d:36:69:
14:ca:0c:54:57:5f:f6:b9:7e:2f:65:5e:e0:74:ec:
56:66:ba:f9:59:a5:ca:5d:96:3f:80:27:a1:2d:0d:
e0:d6:ba:e5:1c:5d:f8:b6:79:25:69:9b:e9:96:82:
54:ad:5d:3e:03:7b:6e:80:c2:a5:cf:fc:87:45:c3:
e7:6b:5d:00:11:4a:8b:21:32:3c:13:e6:c8:79:1b:
36:01:92:1b:33:39:5f:5b:39:d4:77:f3:70:33:77:
08:75:03:52:bb:7a:0c:bc:b2:35:a7:c1:a4:66:65:
a3:09:40:28:60:7a:5e:6c:ee:9b:8e:2d:60:d9:d9:
cc:7a:92:36:97:67:c2:a0:0b:60:5e:48:4a:f5:67:
91:51:d8:6b:ed:09:8a:2b:7c:42:93:ba:ce:64:ed:
96:70:dc:23:5f:69:8f:de:75:d8:71:45:46:c4:89:
13:a2:43:9d:98:5b:7a:eb:33:d2:08:eb:55:d2:93:
eb:6c:8d:c2:1f:f3:f2:fc:f9:a4:38:a7:ab:51:0d:
a8:45:78:82:31:de:38:dd:f4:6b:24:0a:62:bc:ed:
34:ef:eb:21:45:ba:d2:ff:bf:84:55:5f:2b:a5:f2:
77:6e:a3:4a:02:bf:bc:29:f2:8a:de:c7:6d:a2:54:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:56:10:EE:7D:2D:6A:8D:A7:7F:96:DD:E0:3A:D6:9E:A6:12:5E
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/OXFWEO59LWqNp3-W3eA61p6mEl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2978:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
43:e2:45:2b:30:c9:0c:eb:6a:9b:73:8a:56:3c:1b:bd:cd:4a:
58:32:bf:fa:90:9c:5f:e3:89:95:34:ae:47:61:ec:c5:08:ee:
48:1c:93:cc:e0:32:96:0a:e1:44:db:d9:5f:7c:e1:3b:54:04:
c7:c7:4b:ab:4c:2b:ee:c2:97:6f:99:0b:37:21:ff:50:2b:9a:
07:51:39:c8:93:5e:e3:78:4e:c9:62:c8:89:8f:f9:5a:34:4d:
a7:22:57:4c:78:e6:f5:42:e0:93:b4:82:80:a2:a6:94:d7:de:
33:fb:ef:5d:d4:37:67:71:b1:8f:2b:06:29:70:95:f2:68:4c:
87:24:d8:b3:ad:d5:bb:4b:74:b9:b0:00:c3:ed:2f:f1:f7:3b:
a4:c0:4c:c9:54:4e:c4:32:a4:8f:47:e9:dc:3d:6b:90:18:0c:
a2:2b:8e:14:7c:6d:74:d6:92:e2:60:a9:8a:62:51:33:31:91:
4b:1a:d4:7c:c4:2f:4d:d5:5d:44:0a:aa:80:fa:c0:05:35:f9:
28:1b:dd:56:66:d8:ba:7c:4b:73:b4:62:8e:cb:c5:24:6b:ee:
35:84:3c:20:8a:fa:1b:f0:25:f1:ca:c9:0f:fd:78:8c:36:78:
72:3b:6d:e9:7a:78:1c:f7:6c:62:60:c9:5c:72:65:37:93:d5:
bb:b0:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:49 2025 by rpki-client