Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/sIDOXg67yEuo_7naS_BfCVLmcEk.roa
File: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (raw, json)
Hash identifier: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=
Subject key identifier: B0:80:CE:5E:0E:BB:C8:4B:A8:FF:B9:DA:4B:F0:5F:09:52:E6:70:49
Certificate issuer: /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial: 019420D5E73C1E190AC04030A960BA2A2096
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/sIDOXg67yEuo_7naS_BfCVLmcEk.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2001:67c:d1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e7:3c:1e:19:0a:c0:40:30:a9:60:ba:2a:20:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b080ce5e0ebbc84ba8ffb9da4bf05f0952e67049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:30:da:dd:b6:c4:6e:e8:7c:4a:cb:5f:7f:
f3:3f:e9:bf:fa:87:1a:8f:c1:9d:cd:e8:88:2a:90:
e1:de:79:da:eb:da:a3:34:29:a2:eb:10:62:3e:8d:
b1:8c:33:f5:46:bb:fa:58:03:b5:a7:d2:3a:89:f4:
ca:a5:63:dd:4d:fc:a3:67:ea:19:72:59:d4:90:62:
de:c1:6b:ec:34:7a:f0:bc:b2:b0:24:fa:4d:37:e2:
2d:f3:e9:ee:34:21:93:f5:64:85:2b:40:f3:3f:5f:
89:b5:55:f6:a3:ad:58:d1:6d:09:9f:54:8f:8e:21:
22:90:9b:3a:61:d3:92:bb:c4:cb:ab:9d:f2:a4:9d:
4f:94:8e:6b:d7:16:39:bf:87:86:e1:16:cf:e0:08:
b2:36:32:23:62:60:cd:39:59:96:7c:dc:6e:88:51:
35:bf:82:63:28:ec:4a:b6:9e:d8:a8:2e:30:8c:c6:
e6:77:aa:bf:e1:40:b7:63:36:67:02:be:5e:5c:c9:
07:87:62:0c:b1:88:e3:76:70:c6:32:38:39:d9:5e:
bb:a2:42:72:9e:14:49:85:38:9b:9f:0a:65:4b:7b:
89:fb:cc:bc:64:a1:86:0c:58:51:5b:1b:4c:6f:d3:
65:c3:8f:d0:55:de:98:d7:6e:7d:7c:d1:b2:f3:b3:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:80:CE:5E:0E:BB:C8:4B:A8:FF:B9:DA:4B:F0:5F:09:52:E6:70:49
X509v3 Authority Key Identifier:
keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/sIDOXg67yEuo_7naS_BfCVLmcEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d1c::/48
Signature Algorithm: sha256WithRSAEncryption
57:e1:4b:99:b6:fa:2d:fb:32:42:79:91:79:93:0f:07:b3:3e:
20:bd:11:b4:30:1f:58:74:b6:d2:aa:d3:4f:a1:31:0c:21:a3:
d1:cc:79:4f:ae:ec:3b:a7:a9:d7:e7:1d:1c:d9:d8:27:2c:82:
bb:08:90:af:c0:6d:cd:9b:f4:8e:ee:a5:b3:3c:4c:20:76:a3:
47:f6:fb:84:6b:2e:fc:0b:60:54:5e:d7:e4:92:84:f1:03:65:
fa:b5:7c:c9:97:16:13:b1:08:2c:f6:af:12:0e:ab:9b:e1:29:
82:a0:44:b6:03:fc:8a:7f:49:9b:2e:74:68:0d:41:27:c1:61:
a7:ef:c4:45:d1:bd:3b:a9:5d:64:1a:4b:11:1d:1a:31:6b:f0:
17:61:af:bd:d6:ec:13:ee:1d:d1:05:ad:59:28:aa:32:75:57:
15:0a:af:3d:5e:4d:fd:e4:2a:9b:7d:81:f2:c8:3a:98:a3:b6:
80:1c:ce:cc:b7:9b:d3:f9:fd:4d:ba:af:d4:de:db:81:26:1b:
61:5f:b5:16:11:4e:ce:30:e5:36:b2:98:84:4d:eb:78:cb:b1:
d8:4a:cd:29:5d:be:c5:48:ca:f2:cf:49:48:2a:16:77:2f:aa:
e4:10:e8:96:4e:3f:38:e1:5a:68:d2:08:21:d4:3a:5e:dd:b1:
22:b9:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:09:50 2025 by rpki-client