Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/8__4CSysP9ewpgBTT4RjqVsmoag.roa
File: 8__4CSysP9ewpgBTT4RjqVsmoag.roa (raw, json)
Hash identifier: 6Vh8B3R0vOjHWshOtYFXsA9V6+E+ovifthcqX5LH5AY=
Subject key identifier: F3:FF:F8:09:2C:AC:3F:D7:B0:A6:00:53:4F:84:63:A9:5B:26:A1:A8
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 0194228DE1F1D861DE68FFA89E3D49A53015
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/8__4CSysP9ewpgBTT4RjqVsmoag.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59550
IP address blocks: 2a00:1ca8:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e1:f1:d8:61:de:68:ff:a8:9e:3d:49:a5:30:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3fff8092cac3fd7b0a600534f8463a95b26a1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:1a:a1:ea:27:7f:30:c0:24:a5:d9:da:9b:
f9:38:76:0d:61:06:cd:7c:2f:f0:0c:15:86:f1:dc:
51:3e:e0:c5:5d:f5:13:e8:72:95:af:68:e4:2b:18:
e5:c8:6a:a6:cc:0c:ea:13:b8:39:ef:b6:d3:1c:8e:
a1:26:b1:ca:0b:97:7f:b3:4c:74:f3:d8:de:47:a2:
da:bf:05:73:79:a1:3b:a0:03:56:e4:a3:c7:f3:b8:
3a:7a:84:52:0c:cf:6e:ea:3b:e5:23:05:0a:66:f7:
41:cf:b2:db:28:fa:aa:78:3c:32:c3:84:b9:a3:c5:
74:89:d7:b4:e3:fd:28:24:3e:6e:37:04:6c:0a:3a:
df:cd:dd:8b:28:c7:5d:ee:50:62:c7:ab:77:0c:56:
ab:3a:f2:8b:36:d4:c1:ba:7f:04:df:fa:b3:41:ce:
0f:8a:50:14:4f:5b:4b:79:f5:b3:08:c1:b9:d3:5b:
26:fc:c1:c4:ce:89:49:7d:c8:8e:cf:68:3f:48:77:
19:31:65:22:41:46:51:80:bd:77:68:13:b3:eb:75:
88:56:bf:fc:7d:ea:18:2e:89:fd:4f:65:1f:7f:f9:
b4:08:80:cd:a5:8f:44:bb:81:fe:87:74:cc:69:de:
2a:88:80:44:fe:2c:c6:80:92:fe:a7:b2:a3:ee:86:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FF:F8:09:2C:AC:3F:D7:B0:A6:00:53:4F:84:63:A9:5B:26:A1:A8
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/8__4CSysP9ewpgBTT4RjqVsmoag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1ca8:3f::/48
Signature Algorithm: sha256WithRSAEncryption
04:5e:47:a2:c2:2e:c6:71:39:1a:b6:5e:2e:58:d0:4d:ad:31:
5a:6e:d8:a6:6b:06:b8:92:8e:c2:b3:93:6d:22:47:4a:4a:06:
1a:ae:f0:d9:38:55:68:c9:df:1f:ca:88:73:75:ff:e7:b9:8c:
3d:eb:74:fd:10:48:81:e8:52:25:5f:d1:56:51:02:2d:cb:5a:
80:cf:67:ea:c9:2d:4b:7c:1e:5b:ae:a7:cc:7e:1f:e0:72:bd:
ba:3d:bd:56:89:01:11:1b:c5:47:c7:e4:2b:b3:32:f4:77:bf:
a7:09:78:40:64:60:1b:3e:a7:c4:2e:b1:6f:be:9e:d8:4c:3d:
9b:b1:81:8c:70:a7:90:eb:ae:50:77:66:ca:5f:dd:2c:ca:32:
c8:3c:9c:1b:c5:9a:cc:05:05:46:87:fe:9f:bf:63:b5:54:26:
c1:d1:92:cb:21:75:f3:06:fc:fc:7c:5b:c5:b4:70:be:c1:91:
d2:57:89:26:3f:eb:e3:e2:cd:51:6e:22:0e:e4:1f:a2:a3:6d:
a0:ee:62:5c:ab:d4:e8:16:76:84:0f:3a:69:f2:6f:72:80:ef:
41:9c:a7:8b:6c:df:3c:f8:e6:7c:26:53:f3:25:99:f7:58:61:
da:51:1d:15:48:e0:7f:db:e4:63:4e:38:32:f5:23:75:04:97:
8f:1e:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:13:55 2025 by rpki-client