Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/CLJ-Ccf7b87A2Na9lVT06sqXcjo.roa
File: CLJ-Ccf7b87A2Na9lVT06sqXcjo.roa (raw, json)
Hash identifier: EOX8xfG0i4ScTdxMoRNDoyftOjEGKASpFwkpPhIOsfQ=
Subject key identifier: 08:B2:7E:09:C7:FB:6F:CE:C0:D8:D6:BD:95:54:F4:EA:CA:97:72:3A
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369FAF55FD3BD69C83FD9E5851FF871
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/CLJ-Ccf7b87A2Na9lVT06sqXcjo.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215592
IP address blocks: 2a0f:7803:f830::/44 maxlen: 48
2a0f:7803:fb10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fa:f5:5f:d3:bd:69:c8:3f:d9:e5:85:1f:f8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b27e09c7fb6fcec0d8d6bd9554f4eaca97723a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:be:3a:cb:12:fa:c2:8a:19:19:e6:36:28:
ad:82:ac:f5:de:33:c4:8a:a5:7d:67:96:7d:5a:9e:
f0:5a:80:67:16:32:e3:e2:ca:5a:55:1d:5b:77:9b:
1b:86:76:0b:26:25:0f:ea:18:57:bc:bd:a9:7b:5f:
85:8c:cf:29:84:88:36:bf:53:b3:aa:b0:30:8d:dd:
33:93:a3:eb:ca:f0:e3:6b:08:72:29:37:6f:7c:e0:
84:c7:6b:e9:32:a3:fd:a1:47:da:d2:05:d0:5e:00:
9f:d3:2d:c9:55:70:c5:36:22:cc:e0:84:e8:93:19:
fa:29:9c:04:95:5c:f5:1d:ce:3e:65:36:1b:d6:64:
8b:54:4e:04:f6:6d:a3:e1:32:dc:2e:7b:dd:c3:5e:
d5:67:6f:91:10:29:53:bf:f6:8b:6c:a4:61:51:c4:
8d:3f:4d:51:4b:ea:92:4d:18:b8:74:ed:74:15:18:
89:9e:5b:16:4d:da:cf:e9:d2:65:b5:97:aa:19:11:
71:f0:e6:5e:bb:16:81:94:97:85:b3:14:ca:da:76:
f1:af:d8:db:98:1e:6c:c0:49:6f:1b:25:85:72:78:
0a:c9:db:07:37:cd:db:4a:59:49:41:49:e4:c5:65:
cc:e7:a0:f1:0a:10:3c:53:80:14:61:a1:b9:15:4d:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:7E:09:C7:FB:6F:CE:C0:D8:D6:BD:95:54:F4:EA:CA:97:72:3A
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/CLJ-Ccf7b87A2Na9lVT06sqXcjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f830::/44
2a0f:7803:fb10::/48
Signature Algorithm: sha256WithRSAEncryption
58:3c:ae:7c:f6:0a:61:8e:55:84:b9:6d:73:99:75:f9:01:a7:
d7:a6:bd:2c:fa:62:6e:e4:ff:e2:ca:e5:d6:92:5f:1c:46:e8:
23:a3:21:d8:3d:3e:13:ec:28:35:0f:5d:30:43:35:42:40:33:
39:2c:45:cb:b9:a1:0e:53:82:5d:df:dd:02:2a:d2:f8:ec:c2:
d2:b7:89:0d:18:85:7d:41:f5:71:8e:a1:bc:d2:a9:c3:be:f6:
09:11:d6:7c:45:12:2e:a2:9f:66:7d:84:e1:ac:bf:43:0b:2f:
1a:36:05:a6:99:94:21:e1:6e:30:66:d7:26:9d:07:9b:62:db:
0d:b9:1d:0c:8d:96:7e:19:81:cf:61:38:fc:4b:a9:e6:5e:a3:
af:86:54:61:42:a2:9f:27:4a:f6:16:a3:6d:aa:b9:90:9e:dc:
ce:c0:56:95:f9:cf:72:60:ea:a8:a3:d9:eb:f5:34:c5:09:31:
9c:11:52:d3:64:1b:6e:e7:0b:a9:b5:af:cd:08:25:9a:98:2a:
85:28:bc:9e:4a:7d:bd:c4:01:4b:5f:8b:52:37:21:02:65:e8:
38:61:dc:80:1a:a3:85:93:f5:ae:16:27:3b:b4:02:74:48:c7:
00:d9:52:fd:7b:6d:d7:f1:99:24:fb:0b:a5:ef:fd:a5:70:67:
25:2a:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:39 2025 by rpki-client