Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/_l-XctLDCPzRb-pMlqXmGyqDvHM.roa
File: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (raw, json)
Hash identifier: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=
Subject key identifier: FE:5F:97:72:D2:C3:08:FC:D1:6F:EA:4C:96:A5:E6:1B:2A:83:BC:73
Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial: 01942521DB76E577C3734C9CD7C84B726BA3
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/_l-XctLDCPzRb-pMlqXmGyqDvHM.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 2001:67c:b74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:db:76:e5:77:c3:73:4c:9c:d7:c8:4b:72:6b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe5f9772d2c308fcd16fea4c96a5e61b2a83bc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:ef:b7:60:80:37:4e:77:2b:f7:d4:7f:c8:
75:27:33:af:a0:55:07:4f:df:f7:2d:00:1c:ff:0e:
17:e3:33:c2:cf:ca:e0:b6:72:08:f3:bd:dc:14:ed:
f1:f3:ac:c6:ec:6b:74:1b:a1:6e:81:e8:2a:bb:9e:
4e:11:ac:16:0f:bc:92:d9:46:42:9b:84:89:33:b5:
a7:45:5e:00:96:93:ea:ce:54:62:12:d6:b7:c5:2d:
6c:62:cb:19:05:66:0b:85:bf:41:3c:5b:87:1c:db:
89:38:cc:5c:37:c8:f0:5b:d7:4f:2c:dc:7f:ea:22:
51:28:41:00:68:73:7a:71:7e:18:9d:8b:3f:47:8f:
24:06:92:f0:d3:09:7e:1f:bf:49:d7:6b:5b:35:36:
86:89:f1:19:42:23:3d:94:66:96:fc:9c:5e:86:6d:
7d:57:16:dd:f9:1d:26:54:ea:06:0b:d2:b6:b8:c5:
c4:ad:31:ad:80:d2:d5:21:ae:7d:ae:c4:8c:3c:59:
ca:a0:2f:dc:61:a5:8a:16:be:f7:80:94:dd:97:65:
15:8e:66:de:93:33:8f:07:f5:4e:e0:e7:02:74:e3:
bd:af:95:1b:c1:14:ce:f7:46:d7:4f:90:e8:27:3c:
ee:5c:23:07:49:ce:b1:3a:15:71:07:09:6a:ee:3c:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5F:97:72:D2:C3:08:FC:D1:6F:EA:4C:96:A5:E6:1B:2A:83:BC:73
X509v3 Authority Key Identifier:
keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/_l-XctLDCPzRb-pMlqXmGyqDvHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b74::/48
Signature Algorithm: sha256WithRSAEncryption
0f:3d:79:64:18:d8:05:b8:85:da:cd:f0:65:80:f3:f8:da:65:
ff:fa:3f:b5:24:85:16:c2:b3:31:31:5e:a2:e0:43:71:60:04:
0b:22:d4:39:e0:52:3c:52:a3:0b:49:42:3e:a0:df:19:65:06:
6b:7e:27:77:7c:b2:4c:fb:2e:99:59:29:94:bd:57:cf:f2:f3:
f6:5f:55:a4:e6:01:af:bd:2f:04:34:f3:16:65:a8:67:c5:9f:
28:e4:d5:5b:99:25:39:47:dc:3b:5b:b4:2a:3a:3d:43:11:5e:
30:82:0d:3f:7c:1d:f5:88:82:8b:c3:16:55:43:a3:ab:47:cb:
4e:de:5e:b1:53:59:61:51:30:9b:63:61:af:f1:33:45:b1:b9:
d2:4e:ca:bd:e1:1f:c8:bd:2d:cc:bd:24:80:f2:62:c3:16:d8:
fd:82:51:ce:0d:7e:62:c2:f4:e4:50:df:2b:91:df:68:d0:ef:
d0:2d:b7:87:f1:78:c0:cf:21:a0:22:ca:14:20:9f:64:ca:70:
3d:17:4e:03:40:b3:f7:eb:be:95:bb:d8:d7:91:7a:ae:cf:fe:
f6:bd:b6:48:5d:49:77:d2:b1:63:41:24:1a:71:5f:99:36:01:
3a:ce:f0:59:67:ba:c6:60:d9:3a:7b:28:55:a7:47:e5:4c:a8:
09:58:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:22 2025 by rpki-client