Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/fIVfFoI2yXviLFQxAd8iQ3kMY-Q.roa
File: fIVfFoI2yXviLFQxAd8iQ3kMY-Q.roa (raw, json)
Hash identifier: aA+APseunSxx9RL6N0K8Qc8EpGgMdI7DpMcxgR/kF5k=
Subject key identifier: 7C:85:5F:16:82:36:C9:7B:E2:2C:54:31:01:DF:22:43:79:0C:63:E4
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 0194236A401704C81CA62BBB44BEFAA67B7C
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/fIVfFoI2yXviLFQxAd8iQ3kMY-Q.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49801
IP address blocks: 78.111.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:40:17:04:c8:1c:a6:2b:bb:44:be:fa:a6:7b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c855f168236c97be22c543101df2243790c63e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:25:0f:99:78:3d:06:70:65:5a:cb:a8:ea:
a1:79:82:cb:f2:cd:bf:ec:16:bc:03:42:2e:0d:c2:
90:03:27:a9:07:f3:64:d5:8e:aa:fb:c7:83:da:8d:
59:97:d5:65:6f:6a:ea:70:9c:13:ad:e1:47:92:25:
c3:8c:42:73:35:15:ff:cb:b1:b8:5d:cd:d6:f9:e2:
57:90:30:a7:e0:31:64:89:0a:42:cc:2c:0d:4f:92:
fa:b2:e7:be:85:ce:00:3a:ef:40:66:0e:78:27:3d:
d7:35:f5:8a:33:99:2a:7b:04:0e:5a:5b:7c:06:2f:
d7:a8:72:5b:a2:ee:ee:e8:78:9f:f1:87:f5:e7:f0:
5d:0e:93:d3:8a:f6:b2:e3:60:2b:41:12:9f:80:76:
43:9f:f0:ae:6b:f4:ca:22:8a:9b:c8:62:ba:ba:1f:
19:11:a1:e3:05:74:3c:bc:76:6d:50:08:aa:5b:74:
b2:0b:f0:19:eb:91:2a:ac:d6:cf:c1:dd:a3:bc:76:
b5:d1:d1:f0:f2:94:22:07:1e:19:89:c1:18:6b:e7:
fe:7f:fc:87:12:13:b1:cb:85:15:71:aa:83:d6:9f:
17:e7:d9:92:31:1f:c4:27:45:36:68:9c:0d:88:96:
7c:19:07:4b:0b:2a:1b:5a:02:44:54:5f:82:af:14:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:85:5F:16:82:36:C9:7B:E2:2C:54:31:01:DF:22:43:79:0C:63:E4
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/fIVfFoI2yXviLFQxAd8iQ3kMY-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:51:e4:15:d4:ce:45:5d:11:8b:ce:30:86:af:23:8f:ec:fc:
c0:74:dc:29:06:d1:97:d4:a1:52:f5:8b:2a:9b:83:7a:07:7b:
c1:27:9d:37:cf:2c:07:06:62:ff:74:d5:51:89:f0:bc:3b:ea:
db:d0:6b:d4:75:3e:c9:06:f9:9d:78:cb:32:42:a3:fa:bc:d6:
a6:0f:c9:86:e8:4b:a3:f6:15:30:60:5f:fd:1c:a2:b6:1b:3d:
67:80:79:2a:6a:9e:42:ef:9a:03:56:c2:d1:02:ff:3e:52:1e:
5a:fa:f3:d2:86:3b:4c:f5:0e:31:8f:90:44:32:bd:9b:36:fa:
94:76:74:96:32:7a:2b:6e:88:1e:b7:fc:37:94:db:05:3a:9b:
34:1a:15:57:a9:6f:c1:dd:a7:be:47:4d:69:da:48:8a:26:33:
12:cd:8b:92:2e:bb:be:2e:29:d9:0d:f9:81:99:1c:20:75:62:
fc:83:bb:72:18:4d:21:2d:83:1e:af:f8:b9:aa:2c:8b:d8:02:
64:fc:99:81:cc:98:39:a2:a6:f3:76:0c:5f:86:c2:b8:b1:ad:
77:a7:32:52:97:ab:50:83:ea:54:00:f7:ae:4a:14:a3:90:ac:
88:ae:0d:7f:d9:da:78:e8:b6:d5:f8:03:02:81:e4:e9:f2:e5:
c8:47:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:19:33 2025 by rpki-client