Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa
File: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (raw, json)
Hash identifier: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=
Subject key identifier: 26:0F:E3:7C:18:C7:6F:45:6E:E9:F9:30:67:7E:E6:31:2F:75:A8:8E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019512E1CC4E91E115EB8D8554FF3F706088
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa
Signing time: Mon 17 Feb 2025 07:49:02 +0000
ROA not before: Mon 17 Feb 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8434
IP address blocks: 2a02:7720::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:e1:cc:4e:91:e1:15:eb:8d:85:54:ff:3f:70:60:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Feb 17 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=260fe37c18c76f456ee9f930677ee6312f75a88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:3a:dc:76:35:f7:0e:37:8c:15:90:77:ec:
a0:14:36:5a:b2:f3:68:77:aa:e6:ce:24:17:3d:0c:
54:f8:f6:53:ba:98:f1:a8:ab:c5:7d:73:85:0c:2e:
d9:f8:a6:5b:da:dc:b0:22:55:cb:44:bf:a6:cf:29:
2b:81:19:48:c5:56:bf:32:be:4e:f2:02:b3:6b:5a:
b9:55:c9:4b:64:a5:10:11:7c:69:e2:c7:bf:b0:88:
fe:74:f1:64:bc:cf:ea:1d:ab:3f:4c:b4:df:0b:df:
3e:c8:03:15:f8:a8:20:b2:00:96:08:6d:f7:e7:31:
86:06:57:ca:3f:2b:24:21:40:a2:29:27:7e:29:87:
28:9a:88:9a:62:35:c0:f5:e5:54:11:e0:f9:cf:e7:
29:df:35:49:d0:8b:4f:96:af:f8:91:cb:4a:c2:b3:
3e:30:61:b5:b3:b0:b8:8f:8d:b9:ef:92:72:d6:ec:
f2:28:b0:da:6c:e8:2c:bd:f0:33:86:27:33:cf:f0:
89:03:6d:e7:65:24:1e:f4:ac:6c:af:22:74:f9:d4:
cf:17:fd:f9:1f:4f:3a:0b:da:d0:86:8c:19:48:93:
56:6e:eb:b8:5c:4e:3d:df:1d:a3:a3:46:2b:29:59:
e6:7b:8b:be:ec:17:4f:e5:6c:89:ca:49:62:0b:8f:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:E3:7C:18:C7:6F:45:6E:E9:F9:30:67:7E:E6:31:2F:75:A8:8E
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7720::/32
Signature Algorithm: sha256WithRSAEncryption
2e:21:0b:ae:70:1e:5f:56:38:7c:d1:47:b2:fd:42:1e:a1:b1:
c3:86:a3:a2:38:14:13:05:cc:bc:38:a3:dc:98:c6:7b:77:f0:
28:5e:e9:cb:19:b3:0f:c7:94:b4:ba:fb:78:1b:4e:b8:62:4b:
30:87:ce:52:43:f9:e5:c3:42:3e:ff:7d:49:6c:f7:ff:72:36:
3b:8f:b6:c6:61:8e:b9:11:ec:07:2e:2a:ab:fa:a9:73:9e:48:
cb:1d:55:27:4e:09:95:54:d5:dc:4c:ac:46:bf:7e:16:bb:c6:
fc:3e:a7:ce:f2:56:58:4f:af:b3:63:34:50:a5:65:77:32:52:
66:99:f0:75:c9:71:7f:6f:ae:83:9d:cc:ec:e7:f1:b3:38:ea:
1e:66:79:86:72:19:14:00:ec:bb:93:e3:66:c3:f3:ae:f6:0e:
d8:cb:1a:52:a1:dc:4a:e7:1b:ac:a3:cc:5a:83:7c:5e:26:b7:
b6:6a:e0:16:ef:03:fe:49:a8:b5:55:1b:a3:8f:41:b3:41:53:
18:d6:79:37:c2:8c:9c:63:6e:1c:b5:b7:03:86:2b:37:f4:2b:
a3:2a:6c:c5:a3:60:c2:ff:b0:1e:f6:d8:b6:f1:7f:8a:f1:74:
84:4e:f9:e5:b3:45:7e:4d:c7:f7:4b:a1:c7:7b:8c:01:f5:17:
a0:8f:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:55:25 2025 by rpki-client