Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/dS8Rkw8dzyED62hL_7OXnHLvH04.roa
File: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (raw, json)
Hash identifier: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=
Subject key identifier: 75:2F:11:93:0F:1D:CF:21:03:EB:68:4B:FF:B3:97:9C:72:EF:1F:4E
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 019420D638F7AFD8415D95FF7554ECAE3571
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/dS8Rkw8dzyED62hL_7OXnHLvH04.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42504
IP address blocks: 2001:678:d38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:38:f7:af:d8:41:5d:95:ff:75:54:ec:ae:35:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=752f11930f1dcf2103eb684bffb3979c72ef1f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:9a:fa:3a:1f:00:45:e0:b1:ee:7f:63:60:
dd:fd:23:73:f5:9d:a7:83:4e:d3:c7:00:0a:7f:a6:
41:1c:3a:d0:1a:51:f5:58:f0:b7:5d:98:18:f4:4f:
cd:8a:bb:9c:47:3e:1f:52:c3:ed:a1:81:b5:94:c0:
0c:27:5e:3a:08:94:4b:0f:63:9f:72:87:fa:ec:31:
5d:81:5c:23:98:d6:37:ae:6a:aa:8f:f8:8c:e6:b6:
a5:de:3a:0d:10:ad:69:a4:34:d1:8c:8f:bd:23:40:
1c:91:54:9d:8f:03:d6:f9:60:9d:76:d2:da:b4:c1:
eb:90:31:6a:39:dd:b1:de:b9:5c:29:70:45:8c:cf:
27:51:71:9b:4b:00:4b:44:42:34:c8:f1:0d:c4:c2:
1a:26:d9:e2:c6:98:75:79:90:eb:da:cf:78:e9:cc:
1f:c2:4b:33:df:18:b8:e1:e0:2e:4e:30:a5:b7:66:
f5:4d:87:8a:62:86:fd:70:51:05:35:05:ee:9b:eb:
1f:d7:e2:2b:b4:db:68:da:36:ec:21:f9:44:bd:3c:
1f:39:72:d3:9d:3d:52:2e:1e:78:36:93:6a:5f:8e:
a4:57:3c:15:f5:f5:0a:ec:eb:b7:49:49:fe:b7:b8:
37:e0:18:86:16:58:0b:da:a7:9d:ad:92:f8:ec:0e:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:11:93:0F:1D:CF:21:03:EB:68:4B:FF:B3:97:9C:72:EF:1F:4E
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/dS8Rkw8dzyED62hL_7OXnHLvH04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d38::/48
Signature Algorithm: sha256WithRSAEncryption
42:2b:c0:fe:eb:e4:33:43:ea:b5:c0:70:fc:2c:21:d6:28:80:
7d:bf:72:45:35:39:74:3c:1f:9a:d7:8e:40:f8:17:c3:51:27:
61:d2:d8:52:66:2b:dc:79:8b:ba:eb:4d:4a:00:1f:4d:b3:59:
0a:51:f6:95:b8:60:32:dc:9e:36:cd:76:92:52:1a:27:6f:e5:
98:63:58:f3:91:af:ce:6a:9d:31:86:e1:41:68:b3:14:e5:34:
52:44:c5:e2:e8:c4:9d:c1:b9:5a:e0:3b:df:8b:5f:9a:cb:13:
0e:2a:d7:f9:cd:b7:7f:eb:ea:19:aa:f5:da:61:73:30:20:f1:
17:c5:16:bb:24:b6:de:93:ca:aa:4f:69:e4:f1:81:59:d0:13:
b8:8a:dc:49:6f:4c:7c:64:75:37:9b:74:2e:74:26:4d:85:8a:
93:de:5b:de:63:e0:79:4e:de:12:76:b2:96:8c:c4:97:6a:b6:
75:ee:07:68:ab:41:5a:1d:bf:30:b9:8b:9f:12:9e:57:8e:e3:
ac:4b:fa:f1:f0:a8:c4:3e:81:53:f7:31:db:97:24:5d:5e:f5:
6a:f7:26:46:ab:d0:e3:44:97:e0:05:ae:75:23:22:2f:9f:ff:
67:89:3d:20:a0:d5:9b:78:4f:30:b8:aa:fe:66:65:dd:49:7d:
c0:09:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:33:47 2025 by rpki-client