Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/RIRzVPPhcE8vA4XvF5JriP-fYwY.roa
File: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (raw, json)
Hash identifier: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=
Subject key identifier: 44:84:73:54:F3:E1:70:4F:2F:03:85:EF:17:92:6B:88:FF:9F:63:06
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019427487B59FCA62303B2686F80D4EEE58D
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/RIRzVPPhcE8vA4XvF5JriP-fYwY.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202060
IP address blocks: 2001:67c:558::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7b:59:fc:a6:23:03:b2:68:6f:80:d4:ee:e5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44847354f3e1704f2f0385ef17926b88ff9f6306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:c0:cd:dd:b2:db:ae:8e:ba:0c:68:7e:cb:
eb:c7:2d:1b:94:73:7c:ca:d3:b3:be:94:33:3e:13:
49:7c:5b:a7:4f:2f:e5:ca:e8:f7:2f:f2:1a:e9:e4:
c0:a4:70:3a:98:07:44:ee:4d:4f:2e:9b:9c:f0:01:
3c:85:b8:33:e0:0b:46:a0:00:fa:35:69:db:52:33:
dc:e3:be:32:0f:6b:d7:52:42:3e:ef:60:f7:24:9f:
23:02:e6:98:b4:64:65:27:af:c0:1a:29:a7:07:77:
62:7e:80:40:02:e6:73:55:74:17:11:24:a7:49:e1:
78:98:60:18:2b:4f:0f:aa:28:4e:29:e8:b9:f0:bc:
ec:e6:bd:14:71:75:f6:86:3a:98:ca:02:9e:4b:2d:
19:a3:b4:92:8f:02:97:b7:0b:32:91:1f:8c:82:1c:
e9:e5:73:b9:99:69:cb:f8:63:dc:ce:8d:3a:42:fa:
7d:b5:1d:3b:70:d4:14:8f:bc:3b:ea:9b:98:dd:3f:
bd:4e:c1:ac:42:4d:b6:fb:3e:2a:e0:81:ff:f9:2b:
65:53:5e:47:5e:0e:9e:44:aa:3a:20:5a:42:19:e7:
e5:b2:0b:44:85:d4:60:69:7a:be:8d:d6:62:66:77:
9e:7f:4d:03:b1:ac:65:ee:ac:d9:a9:e5:17:7f:23:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:73:54:F3:E1:70:4F:2F:03:85:EF:17:92:6B:88:FF:9F:63:06
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/RIRzVPPhcE8vA4XvF5JriP-fYwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:558::/48
Signature Algorithm: sha256WithRSAEncryption
38:52:ea:1b:c0:3f:45:74:6b:90:8d:d5:ff:ce:66:55:ca:8b:
99:e5:e4:2c:73:c2:24:fd:2c:48:19:bb:0c:60:04:37:5f:97:
a8:d2:c8:12:48:40:d0:bf:2d:0b:d2:67:e2:b2:3a:1f:85:dd:
d3:45:b4:53:f1:ae:71:64:87:a0:dd:83:45:95:04:3c:07:c7:
aa:ce:6a:b6:e9:8b:47:ee:b9:6e:dd:2e:a1:54:f3:0d:72:9e:
92:ec:17:2f:fb:51:74:92:b9:34:36:c9:74:55:ea:49:72:e8:
56:4e:6a:8c:d4:c5:cc:b7:f2:d9:21:49:87:f0:47:7e:0f:d4:
39:88:57:8f:43:c1:c6:1e:45:58:93:d4:15:b4:c6:f5:e7:8b:
aa:10:9d:21:e6:ac:e2:85:08:98:e2:c6:c7:a9:35:2e:e8:94:
df:1f:e6:2f:9b:1a:91:49:86:6b:b6:ed:d9:6f:89:e0:17:47:
dc:ee:f7:49:7a:17:57:f1:4f:d9:fe:c7:1e:83:c7:b7:49:ad:
d7:dc:a5:12:d8:60:58:68:3e:eb:8d:90:40:fb:d4:9b:49:54:
7a:23:ab:aa:55:a9:7b:d9:0b:e0:8d:d5:ab:ca:a6:f2:f8:ed:
97:6e:12:ed:a2:26:8f:b3:06:96:23:a6:79:e7:6f:38:04:82:
aa:21:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:28 2025 by rpki-client