Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/D8t9LetVYSLLb_TLh9xUmyS0_cE.roa
File: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (raw, json)
Hash identifier: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=
Subject key identifier: 0F:CB:7D:2D:EB:55:61:22:CB:6F:F4:CB:87:DC:54:9B:24:B4:FD:C1
Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial: 0194252165D6FF44F608F6AD449FB01A5366
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/D8t9LetVYSLLb_TLh9xUmyS0_cE.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47430
IP address blocks: 2a01:ed00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:65:d6:ff:44:f6:08:f6:ad:44:9f:b0:1a:53:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fcb7d2deb556122cb6ff4cb87dc549b24b4fdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:e7:77:fc:c5:14:fb:aa:a7:b6:73:c1:ab:
07:39:be:04:7a:bc:51:18:ea:32:ee:28:12:35:d6:
df:2e:cc:81:03:0a:94:a6:ee:87:b3:d0:b5:2e:d2:
db:7e:e5:4b:2f:4e:eb:04:a4:0c:9d:0f:62:02:59:
aa:66:bc:37:8b:50:69:bb:ca:42:3c:92:3a:73:53:
5b:93:17:37:9f:3c:5b:ce:a2:ca:10:e3:12:7e:d3:
7d:41:21:bc:28:e6:52:19:c8:da:93:86:be:0b:c5:
2c:a0:c0:3b:6f:17:a1:68:5f:13:75:27:79:2b:c8:
27:a1:c9:1e:cd:f0:29:7b:a4:c4:ce:3c:48:67:80:
c4:57:9a:d0:af:b5:cf:47:7f:6b:1e:42:7b:2e:e5:
5a:96:54:91:e5:0b:bd:11:07:74:d2:8d:37:c0:7a:
18:ad:0c:18:0b:f8:00:f3:26:25:d6:02:cd:82:ac:
05:39:21:f8:db:7d:3e:3d:b6:d3:c1:ca:c7:a5:78:
c9:81:bf:77:dd:56:c5:27:0b:77:3e:29:d5:5e:41:
ea:de:58:55:af:fb:f2:50:c1:7c:09:40:21:3d:9d:
cc:68:30:ad:82:e3:5f:1d:af:c4:37:d0:e2:eb:5a:
35:fc:ec:ad:28:a7:7d:d6:1e:99:6f:90:0c:dc:34:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:7D:2D:EB:55:61:22:CB:6F:F4:CB:87:DC:54:9B:24:B4:FD:C1
X509v3 Authority Key Identifier:
keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/D8t9LetVYSLLb_TLh9xUmyS0_cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ed00::/32
Signature Algorithm: sha256WithRSAEncryption
42:58:24:a0:2e:72:2a:bd:ea:73:d3:22:33:1b:1e:27:be:05:
bd:4d:3e:bd:05:31:2f:80:68:a3:25:83:9b:cd:0f:c6:a6:36:
25:31:d6:c7:12:08:dd:8b:a7:5e:7e:79:23:55:39:64:ff:27:
eb:29:06:01:6b:e9:64:63:15:dc:bd:ce:3a:19:53:c7:2c:4e:
15:93:49:f0:aa:b4:89:79:63:58:b0:be:52:e9:bf:60:b1:ab:
37:00:ef:fc:c7:3a:80:25:fb:7f:93:0f:47:78:bc:b4:c3:75:
86:94:d7:24:13:aa:50:fe:6d:9f:69:43:7b:84:88:4b:08:15:
11:11:6f:b5:89:1b:fc:78:6e:16:c3:6c:7f:40:9a:fe:28:7a:
d4:51:8e:8e:30:b5:7e:26:f1:da:b7:72:10:91:17:e9:4d:ee:
ae:e1:e2:bb:23:77:8b:5e:bd:88:3b:5d:03:99:ff:b1:ad:b4:
db:c2:62:8e:8c:1f:87:30:5b:53:5b:8f:b6:af:c8:67:99:02:
d9:e2:4c:03:3d:77:52:25:c3:56:f1:4c:07:93:ce:3f:01:75:
34:08:0e:05:21:03:4b:e1:86:32:92:cf:0d:f5:6d:2a:2f:10:
05:83:91:d5:b0:d9:da:ca:20:e2:e2:96:a1:51:4f:25:92:bb:
51:49:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:34:17 2025 by rpki-client