Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa
File: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (raw, json)
Hash identifier: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=
Subject key identifier: 7F:C6:A3:1C:C4:ED:94:DA:EB:B3:22:51:49:E4:9A:2D:D9:20:2F:8C
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA877954D3E954BE9CC123920B15F
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215889
IP address blocks: 2a11:a580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a8:77:95:4d:3e:95:4b:e9:cc:12:39:20:b1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fc6a31cc4ed94daebb3225149e49a2dd9202f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:e0:fe:ba:ff:3e:e8:4a:c0:88:e5:a5:f5:
c3:62:0f:35:78:63:36:34:e6:64:d5:dd:f8:87:b2:
b9:58:a3:3f:56:a4:38:dd:ae:80:13:03:f3:2b:bb:
bc:0e:bf:9f:aa:88:4f:81:b5:e5:e6:ca:6b:ec:a1:
71:66:53:31:28:36:0a:fe:8d:dd:72:74:41:30:77:
c9:d7:bc:db:2e:30:e3:c0:69:1a:27:c0:38:0a:88:
78:ef:22:95:70:96:17:e8:ec:76:23:68:f1:54:6a:
93:52:0a:62:a8:f0:2d:4b:c3:f6:70:e0:78:85:79:
03:4f:04:72:61:a6:3c:3e:18:d8:a0:8d:f7:ae:d3:
5c:13:89:27:b9:81:cd:12:fa:8a:45:45:bd:cf:88:
9c:d3:32:0a:c5:4c:b0:c7:2a:3c:80:13:9d:34:62:
b5:b6:c5:a2:c2:3f:22:fd:06:3a:5c:dc:2b:90:70:
67:8f:80:7d:62:35:87:ca:26:db:a7:58:2a:bd:e2:
c2:27:0c:f7:4e:8b:d2:d7:86:3c:65:d3:b6:62:9f:
da:01:4d:fc:87:b2:56:8c:b1:5a:23:ac:c3:bd:42:
6c:3d:22:bc:18:96:18:0f:dd:7d:35:14:5c:89:aa:
a1:f0:6a:de:bd:8c:cf:dc:cd:e1:d2:7d:9b:64:89:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:A3:1C:C4:ED:94:DA:EB:B3:22:51:49:E4:9A:2D:D9:20:2F:8C
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a580::/32
Signature Algorithm: sha256WithRSAEncryption
77:37:d7:7b:6e:7a:d0:b3:f2:b0:db:37:18:66:1c:98:fd:1d:
88:b6:9c:9a:60:43:ce:16:46:a8:21:0f:39:ab:38:04:a7:68:
21:06:d7:b6:3f:3d:e1:10:b3:83:fe:e5:98:43:95:90:22:fc:
a7:60:ac:37:06:36:ab:e7:25:98:34:40:1f:2b:8b:92:49:a1:
ad:06:5e:2c:98:09:e4:93:9f:e1:87:79:2a:b8:b3:78:16:35:
86:e1:3c:35:e3:ea:bc:f5:1b:ea:04:3e:6d:90:3d:1e:84:fb:
4d:6e:d0:79:78:9d:c7:e0:79:af:4f:0f:a1:b4:b5:f8:5b:55:
dc:ba:c6:94:9c:88:19:d3:0e:6e:e3:85:3f:c3:40:e5:c6:0c:
7c:b1:33:d3:1c:f2:06:b0:b3:21:1c:1e:6f:bb:58:da:10:e2:
48:f1:20:5b:36:18:f6:67:a5:3f:f1:97:81:b7:67:f4:55:46:
e3:3d:86:e0:c8:25:08:0d:f5:40:a7:99:e5:e1:c3:23:fd:80:
e4:f7:72:7b:0f:9b:25:dd:f3:b0:63:38:bf:23:13:1a:3b:20:
ca:10:17:2f:e6:66:48:30:21:d1:93:9a:28:25:1d:63:f7:e7:
c7:21:d5:50:ab:c2:76:09:ed:fc:ac:1e:bb:3d:3f:c9:c1:da:
24:13:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:21 2025 by rpki-client