Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa
File: f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa (raw, json)
Hash identifier: ZfWB0QSC1JhyWEDFyE7CZ6ZmAqPQnN6XecILZVAnstM=
Subject key identifier: 7F:E2:6E:BB:AF:BA:19:8E:8B:EA:3C:57:E9:6E:E1:EC:0D:5E:1E:B9
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 019426D9CA375FC7792D3FF1F5FD0A2D9BAB
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59793
IP address blocks: 2a02:d0c2:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ca:37:5f:c7:79:2d:3f:f1:f5:fd:0a:2d:9b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fe26ebbafba198e8bea3c57e96ee1ec0d5e1eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:af:a6:b9:f5:97:6a:23:04:f6:61:80:cc:
8c:7d:d9:22:9f:f1:18:ca:50:a3:d7:55:06:a7:12:
33:c2:3b:f7:a0:24:5d:1e:39:e4:ba:0c:11:01:e5:
c7:35:6d:1f:24:e9:bf:fa:b3:93:38:4e:e5:05:28:
e0:95:86:03:89:cc:28:80:d6:0c:c8:0d:d7:52:87:
f1:19:5d:0b:1c:9a:5a:ec:b6:61:51:7f:fb:71:30:
73:22:c3:37:ee:18:fc:f2:49:e8:b2:c2:27:92:bf:
1b:8c:5d:f2:b9:1d:ff:14:8f:5b:6c:f0:d8:a4:88:
f2:0e:0f:5f:03:4f:6b:53:eb:a8:7c:98:6f:38:5d:
25:09:32:f1:d0:8f:7e:e9:8f:fa:e9:41:ac:dd:fc:
cc:5a:b9:06:ba:1e:f6:b1:51:48:8a:5a:58:df:6b:
93:0a:31:24:30:12:99:f7:8e:85:95:57:d2:fe:7d:
8d:a7:f4:88:c7:13:89:11:3c:dc:6b:96:a8:0c:c5:
05:f9:d2:85:cc:1e:6c:43:99:0d:13:05:64:d6:89:
03:9b:c8:b8:ad:3f:35:d8:92:e4:22:ce:4e:8d:36:
df:09:ae:0f:95:89:32:67:99:46:9b:dc:c4:bf:90:
f0:a8:06:5f:97:e1:56:6b:27:d3:69:ec:16:45:b9:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E2:6E:BB:AF:BA:19:8E:8B:EA:3C:57:E9:6E:E1:EC:0D:5E:1E:B9
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d0c2:1::/48
Signature Algorithm: sha256WithRSAEncryption
22:6d:27:da:73:ff:68:39:54:05:31:ea:e4:78:9f:a3:df:82:
5f:0a:3e:11:75:c5:4e:4b:e7:c9:a6:91:1d:ff:85:bf:8a:9c:
46:cc:70:22:75:b1:b0:08:26:5f:03:a6:61:f1:b9:d3:ab:08:
e7:dc:e6:b6:87:0e:e9:6c:43:7f:b7:86:18:87:b8:78:6f:e5:
17:0c:97:42:7f:6f:c9:35:6a:9f:7e:1a:65:bf:b8:ab:3c:d8:
97:a4:71:ed:86:38:2a:0c:8b:4a:f7:c5:61:ba:08:9c:c0:48:
9e:f3:04:b1:b9:5a:cf:3c:84:70:39:96:25:42:c2:32:04:54:
0e:05:c5:6e:a2:c1:8b:d0:a9:d4:06:2c:bb:c2:e0:6f:6a:a8:
be:b3:f3:e3:8c:c9:ef:54:3d:59:b5:22:5b:ff:80:9f:47:a0:
34:ee:28:bb:4d:87:e7:25:c9:e4:34:95:61:0f:bd:38:23:46:
9d:46:e3:99:97:7c:f0:d0:71:ca:b8:9b:81:60:a6:36:98:a2:
da:66:a7:65:0f:b8:c7:d5:b8:36:5c:33:b6:7b:2a:c1:7c:14:
fd:47:17:6f:77:1b:5f:a9:0c:74:65:00:fd:64:48:a4:a2:3d:
2a:d2:84:ac:6b:3e:c2:e0:81:7c:3b:75:e7:78:d8:ed:7c:38:
6d:db:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:35 2025 by rpki-client