Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa
File: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (raw, json)
Hash identifier: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=
Subject key identifier: 26:59:E5:1C:30:72:68:D5:32:D3:E7:FA:06:4E:A9:0B:59:6F:D1:D0
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019427483EF89DC99D1224CD974D4D8A0D85
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206362
IP address blocks: 2001:678:fdc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3e:f8:9d:c9:9d:12:24:cd:97:4d:4d:8a:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2659e51c307268d532d3e7fa064ea90b596fd1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:33:c9:de:f6:39:f7:1e:8d:4c:4b:79:99:
38:7e:19:f0:5f:f8:9a:09:fc:bb:c9:b3:11:e1:65:
3d:0e:1d:33:93:65:be:ed:44:9e:91:f1:f0:64:8e:
00:61:d6:95:c9:bb:ab:68:6c:4f:10:25:ff:44:96:
2d:bd:15:e9:b3:d0:e9:fe:fc:5c:49:f5:07:88:a0:
90:81:e6:09:c4:97:70:d5:95:be:f2:45:7f:ee:fc:
b3:95:e9:0d:94:97:17:32:60:dc:40:5b:1d:f6:c5:
c4:0d:29:22:dc:c4:03:a8:75:16:a2:fd:45:e9:78:
8f:14:02:40:97:20:61:83:43:a8:67:8b:b2:47:1e:
66:5f:7c:e2:4e:24:d6:1e:b4:d0:aa:70:1d:ef:2c:
1e:da:fc:f0:ba:90:0a:07:05:ed:cc:22:76:b4:20:
d2:57:cd:af:d0:cc:44:d4:f4:20:45:7a:40:a4:a5:
da:67:10:1b:04:7e:95:f5:ec:41:d5:6b:3c:ab:e3:
86:d9:33:c2:89:5b:34:bc:a1:40:7d:a0:7e:11:d3:
45:e8:ca:4e:f2:a4:92:47:19:3b:66:5c:a0:49:30:
e3:55:ec:92:9d:77:42:c7:9a:88:3f:b9:44:6f:45:
f9:80:a7:78:e3:5d:8b:27:c0:68:04:21:11:06:2c:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:59:E5:1C:30:72:68:D5:32:D3:E7:FA:06:4E:A9:0B:59:6F:D1:D0
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fdc::/48
Signature Algorithm: sha256WithRSAEncryption
2a:26:09:9c:c5:73:9e:93:f0:18:1b:d3:87:d5:eb:02:96:bd:
bc:8e:1e:cc:aa:c0:78:8e:fa:b1:7e:f4:80:20:a9:a2:8f:16:
9a:55:5d:69:e0:53:33:be:67:df:9b:ed:cf:9d:b0:12:c9:a7:
66:55:4d:51:d0:49:53:34:8a:94:82:68:9e:4a:20:b5:cd:07:
b4:b7:27:15:ba:39:be:cb:65:9d:c2:e6:11:e0:6b:93:ec:4f:
69:50:52:ed:44:81:ee:54:14:6a:bd:9b:39:ad:ef:0d:d4:48:
32:10:be:b2:53:ef:b4:0f:33:7e:3c:69:46:14:7a:17:93:ed:
c4:4c:cb:4c:24:de:09:b6:d5:3f:84:37:d6:2a:2a:05:5e:e8:
c6:42:27:cb:7c:bd:d0:d8:5e:65:d9:6e:4f:b6:3a:c3:8b:d6:
2e:cc:50:7e:e9:fc:0a:92:18:0a:57:dd:bb:0b:47:2d:5c:c9:
6c:68:88:01:f1:ed:83:8a:7b:7c:f0:ce:3c:db:12:c7:23:ad:
ea:24:f7:36:f3:7c:ed:db:04:82:3e:04:39:12:c0:10:a6:bd:
32:12:e0:c4:b6:2e:e3:c0:b8:28:6c:0e:e1:a4:ed:d3:28:ec:
17:39:c4:69:74:67:e2:99:9d:14:ec:d7:d6:f6:46:51:1a:c6:
d4:b9:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:42:22 2025 by rpki-client