Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/2-8ODfbSISRCVrFLypE1beop4mI.roa
File: 2-8ODfbSISRCVrFLypE1beop4mI.roa (raw, json)
Hash identifier: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=
Subject key identifier: DB:EF:0E:0D:F6:D2:21:24:42:56:B1:4B:CA:91:35:6D:EA:29:E2:62
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019427B5EF3C2B07155FCBF5696DCF928C07
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/2-8ODfbSISRCVrFLypE1beop4mI.roa
Signing time: Thu 02 Jan 2025 15:50:22 +0000
ROA not before: Thu 02 Jan 2025 15:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 2001:67c:2f50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ef:3c:2b:07:15:5f:cb:f5:69:6d:cf:92:8c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbef0e0df6d221244256b14bca91356dea29e262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:62:b8:41:b0:02:1b:f4:0e:82:cf:d6:2b:
83:bc:97:ed:70:22:fa:3d:55:c9:8f:97:c8:aa:79:
ea:68:87:ef:cf:bb:e1:2f:95:6f:55:d2:e7:ce:0a:
46:6b:1d:dd:3f:f4:09:57:b4:28:f8:9d:e4:8f:c2:
ad:70:c7:e2:bd:15:ee:dc:57:af:38:d1:0b:ee:38:
1f:51:01:27:9e:a2:16:95:3b:b6:bd:2b:55:b9:5c:
35:83:90:7f:a6:28:3d:d2:3b:66:f5:eb:19:5c:ab:
6e:50:8b:39:b1:5f:f8:ea:8e:43:3c:51:98:43:d4:
14:cc:58:e5:45:cf:0c:0b:b7:82:dd:88:08:e9:78:
42:a2:f4:ef:3f:4e:d3:c8:14:ad:69:11:d1:81:02:
56:fb:61:4e:0d:1e:6b:74:b8:b1:c0:35:5e:60:95:
32:6e:25:33:c7:e8:82:53:dc:b9:e1:3d:56:a8:96:
8e:79:c2:96:fd:cf:73:69:a4:74:ca:ed:e0:7a:66:
79:46:e8:8b:06:39:fb:8c:49:7e:87:5a:8f:33:61:
2c:20:72:e8:95:ca:43:f7:1c:2f:66:85:04:1a:5c:
5b:90:a8:2d:70:e4:8a:7b:de:69:6f:a5:59:a8:72:
c2:d1:e8:76:80:82:ae:e0:91:39:93:e5:c8:83:75:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:0E:0D:F6:D2:21:24:42:56:B1:4B:CA:91:35:6D:EA:29:E2:62
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/2-8ODfbSISRCVrFLypE1beop4mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f50::/48
Signature Algorithm: sha256WithRSAEncryption
71:d9:80:82:2d:bf:a7:67:48:9e:57:ff:8d:3d:5e:87:28:2d:
a1:41:4d:16:19:53:1b:85:f3:53:2a:e2:fd:d6:7b:e2:0e:61:
75:43:b3:4c:80:3c:ff:2e:47:de:66:a5:18:8b:79:0a:d3:3c:
64:dd:f1:c4:97:9d:18:21:0d:0e:f7:ae:c2:4c:29:5c:82:fc:
4a:c5:13:e6:4b:61:37:5d:81:80:d8:2b:37:4f:37:95:bd:c6:
4d:7e:43:b2:44:56:72:d0:b0:e7:54:ca:74:d0:f7:62:2e:f6:
a8:f6:f7:3f:56:8e:33:1f:99:6a:03:8f:79:3f:bb:98:e1:ec:
15:48:0a:29:e1:bf:b5:e0:3c:20:fa:71:09:b3:4b:27:e5:d0:
11:da:55:a0:9c:9d:79:14:21:6c:a7:d3:4f:8d:e0:58:dd:77:
d5:c0:78:a3:e1:4d:be:b8:ef:b0:5c:cb:ac:c8:82:7c:d6:ab:
13:63:f0:72:80:06:97:1e:64:ac:da:cf:43:62:85:24:58:a9:
13:2b:1e:c6:87:70:0f:ca:ab:a8:e1:6e:5d:5e:f8:53:6e:55:
de:0c:69:e0:bc:7e:e7:98:4b:bc:ea:64:6f:5e:2a:b5:a7:0a:
2d:fa:e2:1e:0e:31:65:ca:bb:e4:64:e8:a3:e3:04:e1:76:b1:
81:23:00:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:33 2025 by rpki-client