Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/U6O4fPn6akIpWmgc4yJT0O6kLpo.roa
File: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (raw, json)
Hash identifier: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=
Subject key identifier: 53:A3:B8:7C:F9:FA:6A:42:29:5A:68:1C:E3:22:53:D0:EE:A4:2E:9A
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019427B5D31C7C8DA7614E56B1ABEB2EDD71
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/U6O4fPn6akIpWmgc4yJT0O6kLpo.roa
Signing time: Thu 02 Jan 2025 15:50:15 +0000
ROA not before: Thu 02 Jan 2025 15:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208942
IP address blocks: 2001:bf7:fc00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d3:1c:7c:8d:a7:61:4e:56:b1:ab:eb:2e:dd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 2 15:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53a3b87cf9fa6a42295a681ce32253d0eea42e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:bd:f5:5e:a9:1e:ab:5e:13:ad:a9:75:02:
11:0f:32:df:35:4e:4b:6e:91:84:db:f2:99:98:92:
33:dd:fc:18:2f:b2:8f:5e:43:a7:a6:24:7f:ca:f3:
56:34:c9:20:36:34:2c:68:ad:70:f7:3f:a1:52:c1:
13:ab:0c:7c:34:73:8f:28:ef:bc:88:2a:ec:3a:4b:
fb:c6:6e:ab:23:a5:2e:e8:f1:ff:9f:df:ef:ad:46:
3d:f3:16:31:46:ea:83:f6:2b:41:b5:0a:3f:b2:3a:
b7:ad:f0:10:ba:d1:da:a6:46:cb:38:0a:4f:2d:29:
2b:32:f3:88:93:53:ce:e8:a0:58:a3:f5:6b:20:bf:
4f:6f:f3:9f:6f:f3:d3:6a:f1:4a:72:9d:80:e0:3a:
47:8b:cb:82:06:97:2c:d3:01:5b:84:6e:50:da:9c:
33:c5:83:1e:6e:aa:64:f2:a3:10:30:a8:e1:b7:23:
a0:c4:75:f9:06:a9:01:d5:09:9b:60:ff:51:74:ab:
06:b9:e5:a3:df:3a:ac:7c:75:5d:b2:83:86:7b:90:
c6:ca:15:2d:80:07:56:c4:ab:2c:ea:af:12:d5:e2:
8e:a5:21:0b:62:ce:f0:64:8c:7e:a5:cd:ae:13:6c:
36:53:1f:1d:52:68:34:b4:0d:d7:e6:0a:fc:ef:97:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:B8:7C:F9:FA:6A:42:29:5A:68:1C:E3:22:53:D0:EE:A4:2E:9A
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/U6O4fPn6akIpWmgc4yJT0O6kLpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:bf7:fc00::/44
Signature Algorithm: sha256WithRSAEncryption
91:ba:64:4c:2b:40:28:96:65:94:f7:3f:18:18:de:5c:22:d0:
3b:2d:71:a0:8a:46:57:7b:b0:f8:68:60:aa:49:ad:05:97:94:
ec:e1:fd:3d:5d:b6:0a:bc:a6:fa:77:7e:f4:9f:df:e0:b2:65:
00:8b:a8:02:5e:e8:f8:87:1d:9f:6a:50:bf:14:92:b9:87:cd:
af:08:bd:dd:3a:96:c0:4c:e6:8d:77:66:d8:60:9a:6a:9d:cd:
59:a0:1f:09:24:5c:8d:55:ca:52:5f:cc:81:4b:cd:21:85:a5:
5d:88:d2:5e:62:76:93:b2:e7:30:59:7b:07:1a:d4:8c:10:b4:
61:34:a7:23:24:2a:cc:43:29:16:da:e5:61:71:92:d3:c6:39:
f6:52:d1:eb:e5:0d:08:a8:13:80:ec:9d:94:83:a8:1f:b5:13:
4c:11:db:20:85:a2:d7:c2:58:07:75:ad:a9:ae:75:5a:0e:4c:
e0:c8:4e:e8:71:1a:93:45:55:d2:75:a8:cf:6d:ff:26:31:d3:
ac:c5:33:0b:eb:25:b7:d0:ac:23:c4:1e:78:0b:3e:2d:cb:ce:
fd:7b:02:fc:db:e2:f3:21:7e:2a:e0:52:1c:26:e8:48:1e:af:
78:46:ba:f2:33:9c:14:d9:52:90:62:5f:4b:7d:c5:3d:e4:d5:
ff:71:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:16 2025 by rpki-client