Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7JXxNfBFM3BEqtldsXmEKamRaOk.roa
File: 7JXxNfBFM3BEqtldsXmEKamRaOk.roa (raw, json)
Hash identifier: jvrGG3m259+/aKJ+QVXqTQP0zBO8rA6AZKOWOn1grpM=
Subject key identifier: EC:95:F1:35:F0:45:33:70:44:AA:D9:5D:B1:79:84:29:A9:91:68:E9
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B55B4CDF579158F8A990ECA10EA4AD
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7JXxNfBFM3BEqtldsXmEKamRaOk.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3175
IP address blocks: 2a04:a5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5b:4c:df:57:91:58:f8:a9:90:ec:a1:0e:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec95f135f045337044aad95db1798429a99168e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:80:36:37:f1:9c:e1:f6:d9:05:a6:8a:fd:
0b:78:d6:d9:c3:2e:db:b8:36:fd:d3:73:07:cb:49:
4b:23:7f:f6:14:54:47:a2:f9:4f:b6:69:24:0e:7c:
4a:38:95:c8:e8:87:f1:5a:d2:66:f2:49:4f:f9:14:
61:9a:4e:0c:15:52:6b:14:17:9e:a3:42:11:70:c9:
21:29:44:17:bd:ec:a1:ed:7e:d9:34:4d:25:72:de:
22:05:0b:6f:f7:27:6b:c1:52:47:2b:45:1b:78:3e:
88:3a:b8:fc:73:a7:0b:c2:2b:86:9b:1a:fd:87:55:
81:5a:be:42:dd:43:8b:5a:7e:83:29:a2:9f:83:50:
f7:09:05:a4:fe:09:39:b7:25:df:e1:83:0b:3a:66:
2f:a1:70:66:26:64:0d:36:2c:b4:03:b5:40:8e:72:
9f:08:c9:31:cb:12:cb:36:58:a1:73:47:32:2b:f2:
24:f2:81:63:01:df:32:0b:43:2e:86:eb:28:28:29:
16:d8:95:2b:3f:fa:c1:16:38:b5:8b:c6:04:65:af:
97:79:2e:f8:0d:30:e7:23:57:a1:c0:11:fb:fb:58:
40:a0:f4:9d:5d:a8:b3:d1:e8:fe:46:0a:66:d8:56:
59:94:0f:4a:33:c4:17:ed:5c:4c:61:2e:e7:a7:93:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:F1:35:F0:45:33:70:44:AA:D9:5D:B1:79:84:29:A9:91:68:E9
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7JXxNfBFM3BEqtldsXmEKamRaOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a5c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:98:07:3d:34:d4:30:06:21:4a:0b:88:ce:be:c4:43:00:0e:
e7:ef:28:06:8d:84:c8:e9:eb:73:ee:51:6c:48:71:d4:74:4f:
c2:93:46:ad:b5:db:c8:9b:80:2c:e3:09:7b:cd:61:c8:62:52:
14:28:ae:c1:4a:e6:ba:c1:c5:bd:e3:6e:c3:78:91:1d:61:bf:
2c:0b:00:87:1a:4c:ba:e3:ea:9f:bf:26:9b:41:03:56:42:70:
9a:f7:a2:b9:f3:c1:b9:bf:18:9c:4b:0d:b6:99:d6:72:86:bf:
30:91:48:c8:eb:82:e4:d4:89:8c:e6:a8:9e:3c:a8:fa:2a:c1:
2b:5e:21:fa:c1:cf:e9:bd:66:92:80:27:13:ed:25:a6:b5:88:
f0:09:56:6c:2e:10:85:a6:3d:7c:2b:e5:8d:75:8e:e9:01:1b:
d3:73:fd:08:29:4f:62:74:d8:db:3a:26:a8:57:7a:6b:20:0a:
b3:f8:d6:50:23:1d:b1:31:f3:1d:66:73:63:2e:38:34:6e:78:
33:d6:cb:78:e6:95:cc:88:1b:fd:1c:5d:0e:0b:63:2b:73:84:
ff:f4:42:f4:72:9a:8c:ee:09:30:31:4a:66:42:4c:a2:e5:66:
91:5e:41:8a:6e:02:6b:b1:47:66:0b:6a:a1:55:df:d2:64:3d:
28:80:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:51 2025 by rpki-client