Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8qTrJM-WdR6EXUoasFsYyi6Y6aA.roa
File: 8qTrJM-WdR6EXUoasFsYyi6Y6aA.roa (raw, json)
Hash identifier: ODqxQgnbz8t3ydq63p2GX0Pd+lBKuGehImCvhm3CHdo=
Subject key identifier: F2:A4:EB:24:CF:96:75:1E:84:5D:4A:1A:B0:5B:18:CA:2E:98:E9:A0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427481E46375A340683C5CF0F9E18BC5F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8qTrJM-WdR6EXUoasFsYyi6Y6aA.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 2a0e:15c0:5::/48 maxlen: 48
2a0f:2d80:1292::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e7c5:98bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1e:46:37:5a:34:06:83:c5:cf:0f:9e:18:bc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2a4eb24cf96751e845d4a1ab05b18ca2e98e9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6f:ee:0f:1a:4a:c7:60:97:cc:26:e8:e7:ad:
be:f0:e8:46:05:30:66:46:dd:a6:d5:bc:d6:97:76:
ee:c0:58:7f:2d:26:70:aa:c2:8a:07:45:92:2b:94:
91:65:20:a7:1c:77:76:75:f7:c3:59:44:b6:5d:e3:
ea:01:a5:67:53:a5:22:43:cb:ac:9a:52:aa:8b:98:
62:b2:cc:53:fd:4e:20:24:0d:ee:34:ec:63:ab:c5:
6a:c9:61:fa:77:6e:d8:a8:33:98:ec:90:68:59:9a:
7f:cb:93:91:0f:ac:61:07:17:0e:e6:ed:96:5c:0e:
11:25:3a:56:5f:92:41:aa:6f:83:a4:16:05:c1:03:
02:07:d4:b6:ca:b8:1b:7c:d5:4d:39:13:2b:f0:53:
91:3e:a9:be:cc:78:9c:bb:ba:43:8b:0e:13:5b:16:
ce:43:9e:e6:10:4e:9b:a9:0d:39:5c:6c:a3:01:28:
4e:49:68:7e:46:28:05:dd:86:44:d2:f6:f7:f3:6a:
30:ae:38:46:33:45:f2:f1:88:c8:eb:8c:53:0d:55:
62:38:c3:57:66:6b:a4:e2:6b:8d:86:86:1f:ba:a9:
65:2c:57:88:7e:f2:09:4b:ed:ce:96:70:3d:96:69:
36:f9:6e:f0:72:25:11:8c:8b:e6:72:9a:70:f5:f1:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:EB:24:CF:96:75:1E:84:5D:4A:1A:B0:5B:18:CA:2E:98:E9:A0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8qTrJM-WdR6EXUoasFsYyi6Y6aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c0:5::/48
2a0f:2d80:1292::/48
2a0f:bc00:a1c4::/48
2a0f:e7c5:98bc::/48
Signature Algorithm: sha256WithRSAEncryption
43:dc:0a:d0:fc:69:25:50:af:5a:13:d8:2c:29:11:0c:1b:59:
b2:05:a8:fb:64:52:f3:fe:61:93:02:87:1d:ce:47:6c:a5:55:
2e:5c:0d:34:c4:7a:1c:3b:40:ad:0c:1a:38:49:91:a6:1a:44:
91:b1:fe:89:fa:c5:d5:f8:9e:47:d3:42:f6:a6:29:71:ab:13:
d9:a0:75:a3:3a:68:ee:68:a0:bf:85:50:10:9c:e3:a8:05:29:
da:b6:f2:f6:90:a3:85:78:54:07:96:88:f7:94:57:9e:59:94:
5c:99:87:e5:2a:89:b7:f4:29:72:a7:74:41:6c:7e:4b:97:1e:
b5:26:a8:61:c4:32:b6:96:30:34:46:66:cc:3c:9f:32:80:b0:
9d:26:0a:a9:2b:3c:2e:49:d2:49:b7:f6:96:1e:86:14:9b:1a:
c9:14:fe:87:d7:0d:40:83:6a:29:12:d8:1b:21:48:b1:2c:f2:
68:9a:79:f8:87:c3:81:3f:c5:b8:f8:d6:46:66:ef:39:d4:6c:
40:4c:e5:18:c7:08:2f:ae:3a:5a:b3:42:c2:eb:9e:fa:9b:58:
28:28:b0:64:fe:73:e4:1e:7b:3b:5a:dc:50:91:2c:3d:a8:19:
cd:df:14:ce:9e:c2:9d:3c:24:60:4e:8f:8e:d1:df:31:52:47:
46:aa:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:26:01 2025 by rpki-client