Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/eLQvZXPU_77wrIDfdDfIdsIHFlE.roa
File: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (raw, json)
Hash identifier: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=
Subject key identifier: 78:B4:2F:65:73:D4:FF:BE:F0:AC:80:DF:74:37:C8:76:C2:07:16:51
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 01962021CA4F17F7E3847FD1D1E173FDB744
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/eLQvZXPU_77wrIDfdDfIdsIHFlE.roa
Signing time: Thu 10 Apr 2025 14:36:47 +0000
ROA not before: Thu 10 Apr 2025 14:36:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31317
IP address blocks: 2001:67c:ff8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:21:ca:4f:17:f7:e3:84:7f:d1:d1:e1:73:fd:b7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Apr 10 14:36:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78b42f6573d4ffbef0ac80df7437c876c2071651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:9d:06:28:96:20:2a:1d:c1:40:6e:25:9c:
fa:fa:ee:de:88:70:28:b9:07:fa:b7:ba:08:62:aa:
f7:76:2b:3a:b9:4a:83:2b:31:c9:61:9e:ee:36:16:
ef:65:2e:e1:9b:99:22:17:40:7b:44:65:57:4f:f4:
f5:04:91:dd:5c:e0:20:9d:c6:5a:ad:e9:a0:0f:64:
03:a4:53:a1:e8:ea:af:1b:b2:3e:c6:52:44:96:1e:
11:91:1a:fd:f4:ae:21:00:18:da:70:6b:55:5c:e7:
a5:99:73:34:fc:6b:36:8b:fb:b7:e4:d0:13:1f:b1:
53:5d:a3:ed:92:f4:fd:95:ef:7d:02:87:80:04:7c:
a5:3c:1d:4f:2f:75:5c:c1:eb:43:e9:19:bd:d7:5f:
95:b4:b0:4b:9a:8e:1b:10:c6:2b:e0:1e:71:83:8c:
1d:ee:4a:47:e5:77:1e:08:91:25:77:dd:86:a0:c2:
35:dc:f7:48:42:ac:1a:49:f6:40:5b:de:f9:c7:6d:
f4:50:ff:5d:79:45:48:4d:d9:c6:6d:ec:73:61:a0:
43:42:59:e2:50:ab:e0:f3:7e:bc:bb:0a:fd:ae:54:
ce:2e:49:cd:b1:0d:1e:e9:c5:39:f6:6f:1e:d2:44:
fb:e1:fc:d7:2b:88:16:64:69:10:32:e5:83:0d:4f:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B4:2F:65:73:D4:FF:BE:F0:AC:80:DF:74:37:C8:76:C2:07:16:51
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/eLQvZXPU_77wrIDfdDfIdsIHFlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ff8::/48
Signature Algorithm: sha256WithRSAEncryption
29:6d:be:c7:8a:ae:cf:f6:b9:25:6a:36:8e:6b:f6:59:83:cd:
ea:29:3f:a6:92:7d:35:b4:d2:d8:fe:f6:37:94:c7:52:e7:95:
37:ab:59:00:5c:d7:29:91:2b:4c:e7:07:a1:af:19:55:b4:e3:
06:9e:2e:d1:ef:3f:42:aa:06:a0:d4:8f:3e:78:3e:c0:52:be:
0f:38:1d:44:ff:40:ed:2d:d1:21:5b:44:b0:e7:db:89:9b:15:
02:49:f4:ab:a1:ee:96:f0:e0:3c:22:b4:90:32:60:88:48:f8:
2a:47:6f:fc:01:64:cc:5f:42:ca:01:85:db:28:fe:d3:e4:81:
c5:7d:ba:e2:30:47:98:78:e9:cf:b2:16:39:90:1c:3e:20:e3:
1c:b1:90:85:f7:a0:18:69:f6:c1:99:f7:4c:69:04:35:d0:7c:
45:c4:c3:bc:9b:b5:de:2e:f5:f7:a6:6a:de:15:46:f1:a9:8e:
b2:dc:12:25:bd:71:f6:16:42:aa:4f:05:03:d8:be:56:ca:23:
fb:3d:8f:ae:6b:ad:39:67:85:9b:ed:11:17:25:92:cd:f7:5a:
d5:3f:46:a3:8e:1c:0f:c2:5f:91:df:c2:73:91:cc:6b:db:72:
60:55:c2:c6:68:41:64:fd:77:4a:bf:f9:27:a6:ed:65:35:b0:
cc:d1:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:27:44 2025 by rpki-client