Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/OS7c8-e6_IPhh6UsfkxpmetgvVM.roa
File: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (raw, json)
Hash identifier: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=
Subject key identifier: 39:2E:DC:F3:E7:BA:FC:83:E1:87:A5:2C:7E:4C:69:99:EB:60:BD:53
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 0194266B7B3FAB232441CFB27D83DD4E316D
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/OS7c8-e6_IPhh6UsfkxpmetgvVM.roa
Signing time: Thu 02 Jan 2025 09:49:25 +0000
ROA not before: Thu 02 Jan 2025 09:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51603
IP address blocks: 2a01:56f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7b:3f:ab:23:24:41:cf:b2:7d:83:dd:4e:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jan 2 09:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=392edcf3e7bafc83e187a52c7e4c6999eb60bd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:4a:9e:29:39:e9:09:0f:a1:2c:46:20:63:
a9:0a:09:64:9a:ac:a0:a2:62:3b:87:9d:bd:da:60:
4d:c8:87:4c:2d:af:49:16:66:b3:3f:42:5c:65:3f:
80:bb:2e:c5:8e:68:5b:af:19:eb:db:c8:bc:55:d5:
7a:86:52:25:9b:f4:2f:e7:5e:eb:d3:03:48:73:76:
f5:f5:60:68:06:be:ff:1a:39:7c:cc:21:fd:99:e1:
15:0c:41:72:81:82:cb:a5:c7:6f:93:84:52:60:bd:
9f:9d:0a:0d:2d:ac:d7:ac:f0:ab:ab:e8:ba:c2:80:
43:db:9a:3f:2f:93:54:32:d0:a3:2d:51:d0:6d:31:
f2:5f:07:2b:37:4b:11:59:07:3f:dc:d4:ad:14:88:
9e:4b:82:81:f2:a5:65:85:cc:43:40:36:d7:e3:67:
0e:81:ba:56:48:ce:bc:eb:db:31:ed:2b:08:14:28:
b0:c4:65:45:49:44:d2:56:62:1f:05:a5:7e:27:42:
c1:6e:77:13:60:4e:d3:6a:9f:83:63:3f:1d:f8:40:
60:26:c5:25:1b:d4:f0:5d:c2:7b:df:d2:53:48:da:
c7:83:28:c0:c1:e7:01:7e:04:78:ee:36:90:ab:4f:
b5:90:5c:2b:28:e6:04:78:bf:8b:42:57:05:4d:1b:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2E:DC:F3:E7:BA:FC:83:E1:87:A5:2C:7E:4C:69:99:EB:60:BD:53
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/OS7c8-e6_IPhh6UsfkxpmetgvVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:56f::/48
Signature Algorithm: sha256WithRSAEncryption
28:08:70:a1:d3:1c:03:5b:ee:6e:b4:e0:34:08:e1:90:10:68:
f3:9d:f2:c4:5d:ff:e8:25:be:17:56:34:f7:d1:9b:1a:aa:63:
63:4c:b2:ca:8b:1a:fe:77:d0:37:c0:b0:eb:80:55:fd:21:3d:
aa:ed:4e:90:6b:11:6e:04:cb:93:33:08:20:40:34:07:ed:fb:
27:d7:36:e7:f4:9d:9e:5f:b2:06:50:59:13:c6:6f:3b:b8:4e:
97:36:44:e1:02:d3:f7:8d:3d:28:fa:f4:9f:55:7d:42:17:ee:
76:68:82:9b:55:c4:14:9a:58:05:02:7e:e8:8b:cb:ff:fb:93:
60:dc:01:ad:10:bb:b4:77:fa:33:c8:6f:b5:34:6b:a5:a4:37:
f8:d3:39:ad:8e:af:54:58:66:9c:4f:ed:52:ad:c8:b3:d5:8c:
39:a1:24:45:94:d0:fb:c4:b7:8c:69:9e:7b:6b:af:af:93:b6:
db:c5:b0:21:ba:6e:d4:bc:92:20:15:34:bf:91:b2:13:65:46:
4c:52:42:91:c7:b5:d3:67:3e:4c:0f:1c:ac:0e:91:c6:b8:f3:
cb:68:ce:23:5a:69:b8:50:c7:4f:b6:84:e9:23:a4:72:3f:8f:
9f:3e:94:97:c9:2c:89:88:ad:62:97:66:70:f8:6a:37:79:d5:
6c:09:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:23 2025 by rpki-client