Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa
File: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (raw, json)
Hash identifier: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=
Subject key identifier: EF:FC:47:BC:51:FD:CF:59:53:04:C9:82:60:26:72:7C:E3:0B:A4:21
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194222000206F4B79241BE5D0371C66CD33
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31605
IP address blocks: 2a0f:56c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:00:20:6f:4b:79:24:1b:e5:d0:37:1c:66:cd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=effc47bc51fdcf595304c9826026727ce30ba421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:d5:81:62:c0:74:19:91:50:5f:21:ab:6d:
04:3d:aa:2c:be:ee:16:81:40:37:a7:13:37:cf:60:
e1:dc:ee:4f:f2:64:35:64:5b:ff:35:ff:4f:3e:29:
6e:b0:7f:c7:38:30:29:c7:d1:13:75:6d:46:67:aa:
c9:53:65:99:fc:d9:56:52:dc:bf:fd:ba:bf:78:eb:
19:cb:4b:72:6a:1e:71:84:5f:c3:42:75:26:fa:1a:
d8:98:31:48:06:cc:91:ca:03:05:08:04:49:5b:65:
1f:de:0e:ef:33:9c:d3:b3:7d:2e:50:cc:9b:e0:83:
e5:79:2a:92:8b:a4:49:c4:2e:b1:b7:60:06:a7:5a:
60:1b:af:f0:41:bb:49:01:db:b1:02:3d:a9:62:b8:
5c:42:06:51:c2:05:20:45:df:55:fd:a6:3c:63:75:
1d:db:7c:e9:b7:bd:a4:5b:ff:48:39:b7:fd:f5:49:
4e:80:6a:06:e3:93:b7:78:9c:9d:74:1f:e7:72:56:
9a:48:cd:a2:be:00:3d:13:78:c6:e8:0c:7a:4f:8e:
fd:2c:1a:4c:60:4e:d7:43:7c:bd:bc:09:72:4b:a3:
0e:72:99:f8:3a:6a:c8:f7:f5:73:87:fe:b6:2e:d6:
9a:b0:9c:2c:fa:d5:32:c0:66:c3:10:e5:da:96:a7:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FC:47:BC:51:FD:CF:59:53:04:C9:82:60:26:72:7C:E3:0B:A4:21
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:56c4::/48
Signature Algorithm: sha256WithRSAEncryption
ae:2e:9b:66:00:e4:12:f3:7c:b8:f9:42:09:59:f2:0f:51:61:
02:73:1f:55:6d:ce:bf:92:f0:c3:13:b3:27:ca:6a:de:75:d2:
b3:be:40:1c:3d:24:36:2c:4e:24:3e:0f:b1:99:4e:38:d3:eb:
62:91:d3:fd:2f:2d:92:0e:86:e9:5f:8e:58:5a:28:b2:cc:31:
43:a2:26:46:d0:1d:7a:f7:c0:b6:1d:aa:b0:47:5e:00:50:03:
b1:69:d2:03:8e:e9:3c:61:79:45:d4:e5:4c:8e:ff:29:5e:ae:
96:9c:84:ae:93:88:55:fc:ec:9d:ae:f7:01:6f:93:50:86:99:
64:5b:29:b3:26:74:3d:a4:f8:d0:98:b4:a8:b8:9b:51:20:23:
0c:d2:58:11:87:1b:6b:f8:e8:81:af:71:41:72:b4:82:57:c8:
cc:fd:ed:14:f2:76:1f:e9:48:40:e2:1e:ed:70:83:93:05:a2:
ed:52:86:42:aa:cc:9c:af:2b:4a:be:18:1d:44:da:c0:a0:e9:
fd:f0:78:f3:03:10:45:6f:a4:2a:e0:18:e3:d1:e0:b9:91:7c:
f1:9d:4a:93:8e:f7:95:7e:04:4e:5a:4b:be:1c:e1:f0:e1:ac:
cb:1b:9f:00:2a:c8:b6:41:72:38:7f:cf:8c:53:81:dd:31:58:
1a:f6:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:26:54 2025 by rpki-client