Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/cJCueS7wh5xwouuTn8ByZSqVbME.roa
File: cJCueS7wh5xwouuTn8ByZSqVbME.roa (raw, json)
Hash identifier: OcEZBp8/9nRipKAf9GpLKqeWxEeL2DFQFVsqhpqIU/U=
Subject key identifier: 70:90:AE:79:2E:F0:87:9C:70:A2:EB:93:9F:C0:72:65:2A:95:6C:C1
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369EB6C932B3A9ACFF201EB7AD5538C
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/cJCueS7wh5xwouuTn8ByZSqVbME.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199436
IP address blocks: 2a0f:7802:e000::/40 maxlen: 48
2a0f:7802:e100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:eb:6c:93:2b:3a:9a:cf:f2:01:eb:7a:d5:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7090ae792ef0879c70a2eb939fc072652a956cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:42:5d:43:58:77:6e:8a:89:cc:09:f9:ba:
5e:d5:70:19:97:3a:40:50:ae:64:fd:c8:ba:6a:38:
a7:da:41:53:71:5a:02:c9:44:15:9b:f6:7b:2b:ba:
61:ee:59:08:7e:69:3a:66:47:af:aa:f9:90:f4:b0:
b4:dc:83:ed:c3:1e:98:a3:97:8a:63:a1:29:b7:0d:
54:9d:e8:68:0d:4c:4e:44:eb:2b:97:f2:db:4d:29:
d9:a8:04:3e:91:69:48:ca:b3:70:1d:c2:11:62:c3:
ba:be:38:49:a6:b5:c5:da:88:4d:b1:cf:18:aa:8b:
de:77:4e:8d:9a:8f:5a:c8:46:4f:fa:72:34:bc:cc:
96:0c:d6:a2:a5:48:c0:5a:98:9c:85:87:48:7f:c0:
61:aa:51:6f:88:c3:ba:68:90:7f:21:52:e1:f5:36:
21:c0:02:98:74:84:bb:a4:a9:8f:15:43:dd:da:8c:
63:4b:aa:44:e3:20:46:a9:83:47:10:1e:63:1d:66:
6c:09:a4:0b:ec:ce:95:0c:71:4a:15:c7:28:bf:98:
14:3a:ed:44:fd:7c:49:22:53:c5:9f:96:af:7e:6f:
0d:3b:66:88:0d:5f:d2:1e:73:23:24:32:1a:32:16:
4f:c8:28:74:30:04:bf:99:ed:32:39:37:f4:4e:80:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:AE:79:2E:F0:87:9C:70:A2:EB:93:9F:C0:72:65:2A:95:6C:C1
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/cJCueS7wh5xwouuTn8ByZSqVbME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e000::/39
Signature Algorithm: sha256WithRSAEncryption
5f:54:9a:eb:f2:65:e6:90:20:4f:df:ea:a6:fa:d8:6a:fc:9c:
78:c3:c7:39:9c:26:0b:13:29:f8:70:f0:a0:29:dd:41:5a:c2:
83:c2:74:d3:b2:53:c5:0e:66:20:49:d1:f8:23:1b:70:19:b0:
8a:d8:c1:bd:9a:27:be:90:14:4a:59:ed:d5:9b:89:76:53:bd:
40:f7:21:88:db:3c:fd:29:d7:48:9d:ea:64:97:a7:9b:8f:a3:
99:c5:60:27:17:2f:ad:5e:27:36:9f:71:1b:3d:c4:b7:ae:75:
3a:2c:6c:db:c8:02:d7:08:89:4f:12:f9:b8:80:0c:a3:fb:98:
78:2b:66:bb:82:88:db:b9:3d:73:61:41:3b:db:08:07:a2:c6:
70:ea:41:32:6a:b0:83:4a:5c:6d:2d:ae:1d:52:cc:44:ec:5e:
e8:70:1a:ee:08:29:75:a9:69:7d:1d:2a:28:7e:07:96:95:3f:
c7:50:d5:31:5d:e2:94:62:a2:23:30:e1:cc:63:75:66:2d:5b:
af:09:09:b5:db:57:74:2a:95:94:a8:d0:be:13:12:ce:a1:1c:
44:52:35:22:07:15:46:0b:cd:7a:66:1c:a3:d9:8e:82:a7:9b:
ca:49:b0:30:29:91:5b:d6:92:47:b8:40:da:b9:a0:e0:86:c5:
8b:e6:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:25 2025 by rpki-client