Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/7BBxm-pOfIQ_PKZVSyNJpMaI0IU.roa
File: 7BBxm-pOfIQ_PKZVSyNJpMaI0IU.roa (raw, json)
Hash identifier: RHWzpm6xp1Dxz5mtJzESRJSHt2NjPD2I75shupyZFg0=
Subject key identifier: EC:10:71:9B:EA:4E:7C:84:3F:3C:A6:55:4B:23:49:A4:C6:88:D0:85
Certificate issuer: /CN=918283d785cc88ef8520862ac161f27b5630bc14
Certificate serial: 0194236A3F6440970F0C0D64CEF9C384BFEF
Authority key identifier: 91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/7BBxm-pOfIQ_PKZVSyNJpMaI0IU.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202739
IP address blocks: 2001:678:1e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:64:40:97:0f:0c:0d:64:ce:f9:c3:84:bf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918283d785cc88ef8520862ac161f27b5630bc14
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec10719bea4e7c843f3ca6554b2349a4c688d085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:d2:08:27:3c:d3:65:8a:7b:41:e9:50:a1:
64:12:c7:f5:8b:9b:9b:20:45:2a:b5:35:96:e3:3c:
91:8e:c2:40:09:58:87:e1:65:fe:bc:08:b7:67:32:
f2:3e:2d:b0:ea:c4:70:39:68:cf:8b:93:a4:20:64:
72:96:58:b6:c4:2b:13:e8:2c:8b:ff:42:6f:4a:00:
43:82:5e:01:79:fd:8f:72:5f:57:ba:85:dc:da:56:
c1:fe:f7:ec:1b:29:21:05:ad:d5:ad:b2:4b:35:fd:
89:10:ed:6d:54:1c:95:ac:df:ca:f6:39:54:56:5a:
a0:50:79:fc:8d:d8:71:de:a0:1d:d7:79:78:33:2b:
cf:06:7f:c7:57:63:6f:d1:07:f0:8d:c7:51:b2:c6:
55:8e:9d:c3:07:6d:e9:3c:66:a8:5a:e5:48:56:e8:
51:ce:1e:0b:2a:6c:ab:6a:72:b2:4f:1b:51:f5:ca:
34:63:78:ce:85:fb:4c:74:2b:80:f7:df:30:86:d3:
23:64:96:f6:a8:9f:f4:5b:f4:c0:a2:4a:eb:76:12:
26:63:27:d9:6d:28:f6:82:13:c0:03:7c:8d:02:18:
d6:48:45:79:3d:4f:0c:26:12:10:5b:d1:a2:9e:5b:
8d:0b:0c:71:f5:46:d5:a2:5e:bc:39:b4:c1:8d:ec:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:10:71:9B:EA:4E:7C:84:3F:3C:A6:55:4B:23:49:A4:C6:88:D0:85
X509v3 Authority Key Identifier:
keyid:91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/7BBxm-pOfIQ_PKZVSyNJpMaI0IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1e0::/48
Signature Algorithm: sha256WithRSAEncryption
59:b4:0b:ac:1b:c5:29:16:2e:11:22:1d:67:6c:02:40:23:ac:
6b:94:ed:26:72:ad:fd:c3:5e:b6:21:91:8e:84:e6:e3:d4:6b:
3e:67:e2:4b:c1:3c:a0:9c:45:57:19:1f:8a:29:07:a9:45:dd:
7c:7d:bd:64:53:a3:91:73:2f:0f:c3:ed:f9:df:64:c2:44:d3:
3d:8a:05:34:30:2f:4b:eb:52:fb:b0:1c:d4:33:82:10:62:96:
9e:63:74:01:e7:f4:f8:b6:da:15:a0:65:94:99:4c:82:b8:56:
08:6d:65:81:23:cd:11:66:5e:74:55:a4:67:79:c6:74:75:ab:
d6:3a:42:07:65:bb:a5:44:f8:3b:38:55:22:62:16:7c:07:b8:
5c:18:51:3d:48:39:5e:9d:99:14:f1:c8:c8:47:82:b6:dc:65:
eb:01:25:55:bb:16:84:c8:6c:66:a5:fd:69:25:06:ad:f3:47:
78:8f:da:c2:42:ec:3f:19:79:3d:83:df:29:21:9f:95:c5:b4:
af:97:87:ba:fc:c8:7e:b3:4c:c7:c8:7f:b0:da:50:74:0a:07:
46:3e:47:e5:79:d2:07:21:76:a0:3f:53:6f:bd:21:b1:1a:c5:
02:51:e4:37:db:94:05:81:c4:cd:49:39:5a:84:3c:8d:3a:a0:
58:01:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:35:49 2025 by rpki-client