Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/X8CA8MplxHYpL5q3b_en-F-UQs4.roa
File: X8CA8MplxHYpL5q3b_en-F-UQs4.roa (raw, json)
Hash identifier: kpBIXrcPDRA1vln2o7CgUflJFoexKXz4XzOQaKlJk44=
Subject key identifier: 5F:C0:80:F0:CA:65:C4:76:29:2F:9A:B7:6F:F7:A7:F8:5F:94:42:CE
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D76DC19546A3830F7EBBF86F45380E
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/X8CA8MplxHYpL5q3b_en-F-UQs4.roa
Signing time: Wed 01 Jan 2025 21:48:28 +0000
ROA not before: Wed 01 Jan 2025 21:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204254
IP address blocks: 2a00:f826:a::/48 maxlen: 48
2a07:6fc6::/32 maxlen: 32
2a07:6fc6::/40 maxlen: 40
2a07:6fc6::/48 maxlen: 48
2a07:6fc6:1::/48 maxlen: 48
2a07:6fc6:2::/48 maxlen: 48
2a07:6fc6:100::/40 maxlen: 40
2a07:6fc6:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6d:c1:95:46:a3:83:0f:7e:bb:f8:6f:45:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fc080f0ca65c476292f9ab76ff7a7f85f9442ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:2c:87:4f:1b:68:2f:90:78:04:de:66:4a:
81:9d:df:08:00:67:26:39:e6:18:36:c2:03:c2:78:
35:b8:e0:e8:7f:8d:9b:84:b5:78:46:9e:1c:ff:0f:
d2:20:9a:df:ed:22:6c:e2:8f:fe:26:8c:f3:4d:a9:
18:2b:ec:65:f4:a6:66:0d:4b:cc:ce:1c:b9:93:9e:
8c:c3:29:b2:44:36:15:08:27:e7:99:de:f3:d4:ae:
b7:89:f4:23:98:fb:74:67:bc:cc:ad:40:aa:1a:75:
6b:a0:34:a3:70:ae:60:bb:26:3b:b5:9d:29:44:5b:
98:ac:8d:67:43:0c:4e:c4:ee:40:15:13:c7:7b:30:
52:66:04:5b:82:9b:89:33:f2:87:65:4f:e9:76:ea:
01:66:5b:a1:d2:7f:ba:c9:57:04:6a:b7:6e:57:be:
55:28:44:31:1c:ea:ed:6b:b7:4a:05:2d:6f:10:e1:
1c:d0:a4:96:15:1f:e1:be:ec:a0:76:6c:b3:0f:da:
a4:d9:00:38:3d:e0:01:e0:27:79:26:d8:88:b7:3b:
1f:59:a7:cc:65:8d:d1:cb:e8:ef:1c:48:a3:7d:cd:
75:5b:be:5f:f4:47:f7:ad:f2:e1:a3:35:70:74:eb:
f6:d3:cb:25:81:6b:b4:48:05:5c:7f:f9:97:59:29:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:80:F0:CA:65:C4:76:29:2F:9A:B7:6F:F7:A7:F8:5F:94:42:CE
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/X8CA8MplxHYpL5q3b_en-F-UQs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f826:a::/48
2a07:6fc6::/32
Signature Algorithm: sha256WithRSAEncryption
a8:2d:3d:4b:ef:bb:d2:f2:20:88:45:de:33:e8:63:84:db:1f:
0d:63:f7:06:9a:9c:fc:0d:e3:0a:cb:2e:49:77:d2:22:fb:46:
36:7b:67:4b:0a:86:e0:67:61:c0:56:09:57:e6:eb:53:46:9b:
11:74:76:7d:b6:4a:31:52:cd:7b:63:ab:97:08:55:8c:52:80:
16:49:5d:3e:7e:b9:ef:e7:17:ea:1d:6a:54:98:ce:14:0b:d9:
d9:04:b1:e0:fe:81:00:29:6f:41:0b:70:e1:5f:01:30:40:f5:
c6:e1:88:da:9a:61:0d:a5:7c:ff:92:5f:68:96:d3:c3:ab:28:
e5:4b:4c:0f:f7:32:2d:e2:e9:4a:c4:fe:c0:9e:00:09:a3:57:
77:e3:e4:fe:ac:51:eb:44:b5:6d:86:22:65:75:0d:b5:55:ee:
88:f1:be:e8:b2:ef:b1:66:e4:1f:f5:0d:36:ad:d2:e8:6d:a1:
5f:00:0e:30:b0:1f:52:97:fc:d5:6c:75:03:52:f7:6c:9c:f1:
9e:a6:60:9d:eb:f4:a9:f5:5b:80:7c:7d:dc:70:31:98:4e:0f:
12:46:bd:bb:5d:d0:13:7b:67:0a:18:96:ba:1b:55:ab:17:c7:
72:ab:2a:6b:c5:06:fe:22:ba:01:9c:18:6b:97:1c:11:3d:1c:
2e:08:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:45 2025 by rpki-client