Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/8jdJFfwz0f1bOSecP72_M36iRRI.roa
File: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (raw, json)
Hash identifier: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=
Subject key identifier: F2:37:49:15:FC:33:D1:FD:5B:39:27:9C:3F:BD:BF:33:7E:A2:45:12
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0194258FCD47FAA387E8F1BDF59D88B86AEE
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/8jdJFfwz0f1bOSecP72_M36iRRI.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200482
IP address blocks: 2a07:6d40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cd:47:fa:a3:87:e8:f1:bd:f5:9d:88:b8:6a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2374915fc33d1fd5b39279c3fbdbf337ea24512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:76:76:01:ba:59:a3:9e:0b:e4:fb:12:fc:
c6:1d:2c:b6:b1:cc:de:42:8b:d9:57:56:a5:f5:ef:
24:cc:21:ac:7d:b6:3c:3b:53:60:df:a2:f8:cf:e0:
3d:e3:ae:57:8f:47:2c:29:2d:31:d7:76:9b:52:02:
41:e9:13:94:59:9d:8f:06:ba:ff:87:fb:86:f4:e7:
88:70:8b:a4:ee:d0:1c:42:fa:81:a5:d0:7e:05:60:
ad:48:b6:93:00:7e:00:67:d8:ce:db:90:ee:b6:c2:
df:64:15:27:08:2e:ea:79:0a:ec:f0:94:09:df:ed:
c4:68:3c:7a:2a:7c:be:b8:fd:94:89:2f:46:ad:ef:
c1:cd:c7:1f:7a:9a:02:68:f1:b4:5d:0d:bb:bc:16:
c3:81:b3:d2:9c:19:f2:2c:f3:21:94:b3:8d:b3:b8:
ae:41:64:0e:85:17:00:db:89:eb:97:ff:8c:fd:b3:
a6:a2:b0:2a:4e:10:38:e6:e5:11:6a:2d:dd:cf:62:
14:3a:d6:2d:de:75:70:24:5c:44:17:0a:7e:bb:47:
3a:f3:16:98:75:76:37:78:64:c5:50:8e:e2:0e:8d:
85:db:87:2f:2c:c9:7f:f2:8a:35:74:85:d6:96:d1:
1c:f4:d4:f1:a6:9f:23:bb:06:d7:c4:78:5d:3b:05:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:37:49:15:FC:33:D1:FD:5B:39:27:9C:3F:BD:BF:33:7E:A2:45:12
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/8jdJFfwz0f1bOSecP72_M36iRRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:6d40:2::/48
Signature Algorithm: sha256WithRSAEncryption
21:88:02:71:0a:a8:59:24:2f:33:44:a9:9d:63:75:e7:49:2d:
f4:53:72:9a:19:84:85:5c:85:d3:e6:c6:84:67:2e:cc:d8:af:
74:3e:c5:0c:2d:5f:5d:d8:ba:dc:45:7f:2f:2c:e2:eb:3a:30:
24:a3:2c:aa:ea:ca:96:c9:1a:11:57:46:78:ac:9a:d4:f6:09:
e5:0c:e3:9c:28:b4:be:4e:af:90:9a:fa:9e:17:5d:2a:1c:03:
d3:4d:70:19:d1:e0:42:d1:a3:98:5c:94:50:c5:d4:4a:e4:3d:
36:70:88:f1:81:df:14:ff:7d:08:fd:23:29:d4:f5:a3:b2:b1:
0c:24:40:60:b2:7c:67:69:9c:a4:19:20:b0:82:7a:95:f9:57:
33:80:ce:46:3c:df:a2:99:6f:ce:f4:2d:56:32:b3:5c:eb:35:
37:24:d7:8d:02:b9:3e:c9:6e:f6:f8:55:fe:a7:de:7e:1e:bd:
9e:55:8f:c0:d6:3b:66:5b:6d:b8:3c:df:f0:9e:7c:c2:81:7f:
60:1d:62:c2:1a:60:e7:0a:fd:df:9a:c1:47:aa:98:e2:bb:21:
62:d6:29:00:45:14:e5:de:b3:b8:85:1d:f2:55:91:50:00:92:
a1:01:89:3b:bb:77:09:04:1b:54:5b:f0:00:f9:ef:0b:9a:df:
d6:c9:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:17 2025 by rpki-client