Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rhFlSYBZIUTZXj7zFeGFgDZs3D4.roa
File: rhFlSYBZIUTZXj7zFeGFgDZs3D4.roa (raw, json)
Hash identifier: 9a/ZaehhijigNe3F0wzH/Ktkdo8hVEM8O7wrLnb7Kqs=
Subject key identifier: AE:11:65:49:80:59:21:44:D9:5E:3E:F3:15:E1:85:80:36:6C:DC:3E
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369FD6E512BD616FCB6E0D94D4779D5
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rhFlSYBZIUTZXj7zFeGFgDZs3D4.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216038
IP address blocks: 2a0f:7803:feb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fd:6e:51:2b:d6:16:fc:b6:e0:d9:4d:47:79:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae11654980592144d95e3ef315e18580366cdc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:0d:5c:44:80:05:ea:7d:e4:05:96:d4:b6:
69:98:25:bf:36:df:f6:8a:29:5f:ca:05:8e:2e:2e:
11:d8:a4:f8:c8:c3:8d:0f:6d:ad:06:ec:65:c5:4b:
eb:50:31:27:5a:ff:d2:75:89:85:51:79:54:52:d8:
d3:28:d7:ee:66:b4:cc:86:81:01:24:6b:33:29:64:
31:84:a5:d0:e3:74:7f:00:e3:43:b8:78:7b:ee:78:
a2:d9:68:90:9a:dc:da:d5:df:e7:ff:d5:14:1d:0e:
b7:09:ce:ba:77:18:8a:16:28:00:c7:36:f6:b3:b2:
f9:ba:a8:e5:67:68:7d:62:fb:58:54:63:ee:2a:57:
e2:db:32:64:b2:b6:c8:e7:9c:46:28:94:c3:cc:05:
37:4d:e0:ef:33:71:65:6b:a2:0a:f2:8e:93:0a:38:
f2:2b:26:1c:b6:1c:ef:13:34:67:63:3b:c9:9e:81:
fd:57:c8:4a:df:70:c6:ea:30:18:9b:03:eb:1f:7d:
e6:60:e0:88:a1:9d:a1:4e:a0:f7:09:a3:c6:48:9f:
78:d3:f2:92:18:cd:43:48:51:07:36:90:dd:32:6f:
8a:fe:69:93:34:fa:d8:6f:41:04:6d:75:46:e6:cb:
77:31:f5:30:f2:92:be:66:da:4a:ba:aa:98:0b:f4:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:65:49:80:59:21:44:D9:5E:3E:F3:15:E1:85:80:36:6C:DC:3E
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rhFlSYBZIUTZXj7zFeGFgDZs3D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:feb0::/44
Signature Algorithm: sha256WithRSAEncryption
62:0d:75:43:27:d9:f3:b7:cd:77:b3:87:71:20:b1:6d:d6:1b:
de:d6:c1:94:0a:b4:fc:91:76:6a:8d:5c:b0:30:2e:d9:68:51:
62:99:5e:14:dd:93:0a:4f:2f:7f:2c:4a:c4:63:75:94:c3:18:
67:68:3b:9c:96:a9:c8:50:8e:12:82:53:1a:43:74:7d:a0:22:
60:d0:b5:ae:51:73:5b:72:d8:24:73:ff:4d:35:2a:1c:bc:fb:
b5:fe:33:13:a1:4f:ba:25:59:c3:db:41:f6:c2:cb:52:a0:40:
69:a6:32:1c:3a:fe:e7:2f:de:51:62:83:34:9d:df:de:41:ab:
88:63:de:02:31:82:26:4a:53:84:82:df:80:eb:8b:79:be:bb:
80:02:b2:f9:d6:26:91:6d:2b:1a:a6:51:63:fb:e6:73:98:82:
3d:86:6f:be:9a:81:4f:2c:e9:fa:95:f7:2d:6b:1f:f9:72:fd:
bb:10:ba:a4:ca:e2:a4:78:38:49:b3:b0:98:56:fd:16:09:49:
ee:51:29:6d:51:26:7f:54:b2:3e:83:67:4b:b0:32:f5:76:25:
7f:8f:ad:ca:4b:39:28:dd:b9:85:4a:55:a6:79:60:87:23:31:
0e:a9:c5:5e:e3:5c:34:87:ed:e7:f4:01:7f:98:13:38:c3:af:
54:4b:8f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:42 2025 by rpki-client