Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uF_FxTynB3toUc8r_Wgbz06CThI.roa
File: uF_FxTynB3toUc8r_Wgbz06CThI.roa (raw, json)
Hash identifier: TY937u9dN15cJsWJXvfCWzyb90LEGs6v3vI6efOsJb0=
Subject key identifier: B8:5F:C5:C5:3C:A7:07:7B:68:51:CF:2B:FD:68:1B:CF:4E:82:4E:12
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242A95687364D2D91F97E560518408
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uF_FxTynB3toUc8r_Wgbz06CThI.roa
Signing time: Thu 02 Jan 2025 17:50:46 +0000
ROA not before: Thu 02 Jan 2025 17:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205138
IP address blocks: 2a01:8740:10::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:2a:95:68:73:64:d2:d9:1f:97:e5:60:51:84:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b85fc5c53ca7077b6851cf2bfd681bcf4e824e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:74:61:43:d9:49:ff:93:b6:78:05:a6:dc:
1b:e0:d5:64:07:02:75:9a:46:27:dc:72:62:14:0d:
b2:d8:fa:4a:07:8b:4c:81:7a:10:4c:ae:32:5b:8b:
1f:6a:1d:0d:cf:8a:03:9f:15:91:9e:74:c8:fc:06:
78:2f:c7:ee:d8:b7:02:c5:5c:7d:44:5c:3b:6e:21:
04:45:c9:08:ef:e7:ba:af:50:6f:26:e7:b6:cc:13:
cf:78:dd:a3:87:06:3a:9d:0d:bc:6d:6f:de:ff:81:
7b:18:ef:c9:81:cb:c8:7c:41:65:d2:ba:a5:9a:2f:
35:51:1a:c5:4e:4d:b7:af:af:58:2e:4c:8f:91:c0:
31:8b:d1:3c:6b:a9:26:56:3e:eb:3f:d4:ae:f8:7e:
8f:cd:01:ea:2e:39:d9:42:e9:31:fe:48:1d:da:81:
5b:2d:30:3f:9f:dd:2b:2d:0e:2b:18:e1:8a:bd:64:
c1:51:32:43:dd:e6:b5:c8:e9:d8:a1:02:5a:c8:10:
62:7e:9b:6b:bd:a1:20:7d:cc:0c:52:69:f2:1b:c7:
a0:04:45:02:e7:09:3f:d2:b7:55:73:78:5e:43:39:
2d:81:64:0e:39:ed:49:be:ac:e5:8e:2a:1d:86:90:
f4:fe:fe:86:30:ac:08:0f:b1:c0:c6:61:f1:b4:1b:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5F:C5:C5:3C:A7:07:7B:68:51:CF:2B:FD:68:1B:CF:4E:82:4E:12
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uF_FxTynB3toUc8r_Wgbz06CThI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8740:10::/46
Signature Algorithm: sha256WithRSAEncryption
6c:43:1a:c6:00:56:ea:b6:40:8c:40:d7:71:c3:e9:e6:ad:4f:
94:7d:72:88:1b:fa:1d:b3:1c:18:fe:58:1b:c1:14:a5:2a:ce:
4d:9c:4e:9a:5d:17:8b:ee:40:78:5a:80:47:69:8e:d6:88:10:
ac:77:e0:7f:e5:89:f6:90:9a:c6:98:2a:57:6f:09:9a:e2:43:
e3:27:ce:76:bb:f3:2c:b2:8f:de:19:7d:37:f6:c9:33:87:27:
7e:e8:2e:93:5a:09:c0:67:9d:de:c7:b7:89:3d:70:ec:c2:3e:
d1:66:91:99:29:c9:90:fd:24:c3:e1:bc:b9:09:9b:7e:28:45:
54:f3:7a:5d:e9:47:76:de:e0:6b:9e:85:53:a3:09:42:01:f5:
97:0d:8d:03:7f:1e:25:34:2b:04:13:fd:35:99:10:0a:83:4d:
2e:63:c4:c0:9a:6a:ac:4d:a8:a8:82:4f:5a:c5:c8:e3:97:c2:
28:ea:6d:0d:d6:2c:ee:98:c3:29:8c:b5:82:3a:74:d7:a3:a2:
61:bf:8c:42:52:b3:f8:26:9e:ce:a6:1a:cc:0e:6e:b4:57:6a:
5f:72:ee:17:ea:ca:84:2b:68:a5:b8:8f:83:e9:07:3c:a7:03:
11:58:f8:95:9a:b0:20:ec:ed:36:9c:af:13:75:4b:72:72:1a:
35:19:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:43:01 2025 by rpki-client