Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa
File: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (raw, json)
Hash identifier: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=
Subject key identifier: 8F:E1:1F:FB:F6:54:AC:0F:80:63:A6:57:63:35:34:C0:A0:34:30:01
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 0194274782E3A39C804FB4B48DD9E89835CE
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa
Signing time: Thu 02 Jan 2025 13:49:45 +0000
ROA not before: Thu 02 Jan 2025 13:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196939
IP address blocks: 2a01:4a60:ffbf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:82:e3:a3:9c:80:4f:b4:b4:8d:d9:e8:98:35:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Jan 2 13:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe11ffbf654ac0f8063a657633534c0a0343001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:10:36:d7:60:99:0e:c8:a8:c8:04:95:2f:
fc:76:c6:b7:ae:67:bb:46:30:01:77:7b:4f:16:8e:
74:55:b7:21:33:a8:51:28:72:9e:fa:f6:19:44:68:
18:f9:94:ec:1b:1c:6c:52:91:ab:02:5d:f7:0c:f0:
e3:d0:c0:3a:94:26:83:7e:27:2f:bf:89:b0:37:da:
b5:1f:23:e7:d7:ac:d3:d6:81:24:9d:c7:da:1d:76:
e9:56:45:17:d5:eb:d0:5b:58:1a:85:ed:b8:0f:85:
76:cb:22:23:b4:6e:71:c0:d4:54:25:39:3a:45:f5:
fe:0a:d7:da:31:f5:be:8b:bf:d9:76:0c:e8:31:43:
41:d2:f3:a1:84:d1:f0:f8:1a:c4:26:fa:09:db:fd:
f7:26:1b:89:ee:18:c7:10:de:c5:1d:40:d5:2f:63:
4c:08:68:4e:a8:25:32:15:dd:54:6e:f9:35:ac:76:
35:c0:b0:b8:1f:59:ac:23:61:7e:b0:08:aa:12:51:
b8:dd:5f:2b:33:fd:5c:20:77:29:5c:80:10:2f:86:
85:09:3e:6c:0b:10:b9:a2:e2:c8:fc:79:d4:a7:c7:
00:e0:8d:bf:98:bc:45:80:4b:53:f7:63:cc:ea:03:
32:9a:eb:a5:64:50:e9:59:5d:e1:6f:92:70:b9:fa:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E1:1F:FB:F6:54:AC:0F:80:63:A6:57:63:35:34:C0:A0:34:30:01
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4a60:ffbf::/48
Signature Algorithm: sha256WithRSAEncryption
6a:47:fd:a8:77:93:29:bb:16:86:f8:9d:04:93:f8:2f:17:2d:
ae:ca:90:7d:f5:2a:c6:39:e9:09:d9:28:81:f4:ba:83:ca:02:
93:82:6f:5e:d3:48:37:99:85:7c:33:e1:e9:3e:66:8c:b0:76:
d6:bd:8a:d8:0d:4b:f8:cf:9e:88:0f:5b:85:b2:97:9f:76:dd:
d2:52:22:de:f8:27:32:8d:14:4e:ed:0b:47:1c:d8:22:ad:28:
ab:ad:2d:b7:2e:9c:6d:9e:e6:d9:5f:64:9b:30:22:ca:be:34:
8e:33:7b:8f:fc:f0:5f:38:82:69:2e:da:65:0c:2e:67:41:1d:
81:1b:45:01:6c:28:cf:ba:d2:d1:a7:fe:78:0c:ac:77:c4:5d:
07:da:de:dc:11:77:dd:d2:fd:6b:d4:bd:fe:68:56:53:e7:a7:
e8:db:f3:a8:6e:28:cf:9c:31:4b:69:1e:a8:ea:5f:42:48:62:
88:1b:8a:9a:12:57:a1:ac:47:d5:78:68:76:3c:50:22:8d:21:
e5:3a:e3:04:93:df:35:b3:f2:90:4b:16:8f:8e:cb:de:f9:1a:
0f:36:8f:d1:47:90:54:f1:ee:4a:79:16:79:f8:bc:ca:5b:f8:
fb:20:e4:25:91:74:53:91:da:a3:17:3e:04:df:78:ee:3d:c5:
48:db:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:42 2025 by rpki-client