Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/_ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa
File: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (raw, json)
Hash identifier: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=
Subject key identifier: FD:E7:12:75:E0:4C:29:71:0A:9B:B3:E4:F1:D5:D5:C0:97:7B:BD:4D
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 019427474ADA84C5ED231595E146C4A9D6D0
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/_ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa
Signing time: Thu 02 Jan 2025 13:49:31 +0000
ROA not before: Thu 02 Jan 2025 13:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 2001:67c:1770::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:4a:da:84:c5:ed:23:15:95:e1:46:c4:a9:d6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Jan 2 13:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fde71275e04c29710a9bb3e4f1d5d5c0977bbd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:2b:b0:11:8c:87:18:9c:ee:b0:da:6f:64:
be:1f:48:e0:c8:b9:50:c0:9b:6d:10:49:a7:f5:0c:
34:e3:e1:15:70:08:08:60:20:6f:87:e0:62:71:f5:
2f:0f:fd:7c:15:df:db:af:fe:34:b2:5f:81:82:f8:
ce:ce:19:37:55:b4:77:74:62:d7:a8:90:be:f0:4e:
ab:c6:44:97:f4:a3:4d:19:d9:bb:8a:e6:04:93:d2:
e7:27:93:b6:68:d6:61:b6:8c:c1:27:5f:cc:08:75:
48:bc:94:d7:a3:e3:da:17:51:c3:f6:d3:4a:34:37:
a0:84:5f:03:ab:b5:b1:6f:14:5d:15:e6:da:be:02:
80:3d:70:01:58:22:8a:39:7b:59:4f:37:c6:47:76:
bf:d9:9a:2b:5d:ec:b9:e5:26:80:ff:4a:2e:2d:3d:
05:08:15:26:5f:9b:37:3c:c6:dc:16:40:e3:a4:37:
69:c5:3b:60:cd:24:59:69:76:30:22:b8:22:af:b6:
e9:aa:6a:30:21:7b:34:e5:7a:84:aa:ae:31:63:b6:
6c:aa:15:bc:fd:da:be:ec:7b:95:30:92:b2:b9:b4:
39:7f:62:cd:f3:4c:da:fe:16:b8:1f:61:36:cf:94:
ed:59:a1:c0:49:46:17:63:a8:0d:ff:d6:5f:8a:a1:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E7:12:75:E0:4C:29:71:0A:9B:B3:E4:F1:D5:D5:C0:97:7B:BD:4D
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/_ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1770::/48
Signature Algorithm: sha256WithRSAEncryption
3a:e5:8a:33:79:20:43:27:08:3c:2e:59:fd:5b:f4:b0:16:62:
67:00:33:b2:89:c2:58:05:f2:95:0a:cf:bb:f2:0a:37:18:4c:
72:d1:9c:bf:29:2c:aa:1e:bd:91:f2:1a:3c:f6:27:73:bb:81:
ea:27:74:de:9d:03:6a:b0:19:96:f4:39:2d:de:d9:de:30:1b:
c0:65:6c:01:76:da:56:d9:2a:c0:05:7a:7c:17:1c:55:c6:42:
ec:d8:74:e0:49:4a:55:39:99:00:a7:8e:bc:ba:d2:13:3c:13:
d2:80:f1:a6:ee:88:a4:8e:dc:3a:74:cb:be:1c:23:93:46:24:
a6:cf:d0:ad:f3:d4:d9:ce:20:8b:a9:51:1d:b5:e7:0a:63:c4:
fd:41:2a:ce:83:20:65:3f:ce:24:85:61:f0:a7:ba:2c:69:2e:
d6:29:76:aa:29:38:e2:77:b3:c1:45:a1:01:0e:93:e7:ea:76:
bd:eb:30:65:b4:f1:f8:c6:21:6e:a3:42:79:d5:f6:fe:86:1c:
e2:3b:eb:70:4e:43:ee:21:a4:f5:ed:e3:96:22:27:79:6b:9f:
4d:a0:8a:76:b2:19:36:69:44:ec:93:5b:0b:0d:4c:3f:db:b6:
50:c2:e3:12:36:cb:9d:dd:76:7a:46:be:57:2a:b8:73:ec:f0:
a3:07:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:46:32 2025 by rpki-client