Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/fv18O4bn8ClOlAw3EqxhUtMaRVY.roa
File: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (raw, json)
Hash identifier: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=
Subject key identifier: 7E:FD:7C:3B:86:E7:F0:29:4E:94:0C:37:12:AC:61:52:D3:1A:45:56
Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial: 019425FDC1ED40CDF24F6616A5F2718B03A6
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/fv18O4bn8ClOlAw3EqxhUtMaRVY.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39086
IP address blocks: 195.66.80.0/24 maxlen: 24
2001:678:7c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c1:ed:40:cd:f2:4f:66:16:a5:f2:71:8b:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7efd7c3b86e7f0294e940c3712ac6152d31a4556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:17:28:94:65:2d:85:e7:28:ee:04:17:14:
7f:b8:ad:12:b3:3b:5a:d1:78:62:bc:e4:ec:90:27:
fa:0c:fd:74:0d:10:a4:eb:09:ec:3c:39:63:a1:01:
60:5c:45:56:60:9a:44:97:78:ef:bc:ff:a8:da:f8:
dd:c5:38:55:5f:ec:d5:0d:ad:da:9d:eb:f2:ed:e5:
c0:65:17:2e:36:ad:8a:02:64:bf:03:d7:81:d0:c5:
7b:a6:74:dd:74:c8:6c:7c:82:2e:30:f1:98:92:d5:
2d:3d:2a:34:25:ba:a5:79:c1:10:d1:4f:87:8d:82:
08:3a:a1:f3:6c:72:c8:1a:24:f3:90:8a:9e:63:55:
ca:35:44:44:24:6e:5f:d7:84:a6:f3:2d:e3:90:2b:
0b:b9:4c:d2:05:82:ba:cb:10:7f:30:98:08:44:d9:
74:07:e7:32:92:e6:14:2e:25:f2:3f:b9:8f:1c:0d:
c0:ea:13:6b:17:c6:37:ee:f7:e3:b4:e6:71:48:61:
03:fb:4b:41:60:61:c4:4c:14:aa:ff:ab:04:e1:57:
35:82:e7:82:4f:91:8c:08:77:b1:7d:34:ab:5d:b4:
18:99:4f:b0:83:f6:49:d2:ee:74:0d:65:49:d9:05:
61:50:c8:36:c3:fc:47:88:fd:00:88:df:4c:12:7c:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FD:7C:3B:86:E7:F0:29:4E:94:0C:37:12:AC:61:52:D3:1A:45:56
X509v3 Authority Key Identifier:
keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/fv18O4bn8ClOlAw3EqxhUtMaRVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.80.0/24
IPv6:
2001:678:7c8::/48
Signature Algorithm: sha256WithRSAEncryption
6d:75:d5:ff:1e:97:3c:64:d7:6c:06:cf:9a:7f:1d:5d:3d:fd:
c0:9b:63:75:44:40:05:45:68:ec:f4:04:ea:36:ef:50:0a:b5:
1e:0b:83:63:cb:ae:ef:0f:03:f2:65:cd:1d:03:9f:8b:67:01:
97:11:e7:98:ea:bc:07:46:fa:8f:5b:2f:5e:3c:19:86:36:18:
76:9f:e2:a4:fa:42:0c:50:f4:df:f7:91:9e:6f:bc:80:64:49:
fe:48:79:2f:41:e8:5b:05:ff:99:53:4f:7b:e6:f7:ef:39:a7:
5e:b8:50:9b:39:d2:bd:af:58:0b:8d:40:d1:d9:43:f0:ed:64:
0a:bf:5d:7e:a1:e1:93:12:35:5a:6f:0c:13:ec:78:18:97:8f:
18:da:77:f4:fd:0d:06:3d:bf:4e:3d:28:5d:e5:99:b1:97:09:
9b:ff:8a:5f:6a:4d:87:86:5f:fe:4d:b6:89:ff:e6:c0:a4:49:
d0:bf:cf:4c:a8:8c:53:96:83:ba:14:03:e0:8d:ed:7d:5c:b6:
bb:ca:53:4a:52:5d:e3:8c:4f:6e:44:04:ad:6a:c1:48:1b:82:
b4:3c:cf:e5:8c:86:94:a3:26:ce:b1:9b:81:9c:46:4d:83:86:
de:30:15:e4:62:d4:f9:c0:62:85:de:9a:00:74:3b:8b:f2:1c:
b1:20:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:13 2025 by rpki-client