Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/_3NlYGtAccp6zaeP-Zhm_oVq4fE.roa
File: _3NlYGtAccp6zaeP-Zhm_oVq4fE.roa (raw, json)
Hash identifier: 7Ai+yD0w7Uc4wl5Kdh07MB6GvX74tuDak744pWBhJkk=
Subject key identifier: FF:73:65:60:6B:40:71:CA:7A:CD:A7:8F:F9:98:66:FE:85:6A:E1:F1
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019423D7D9CF23FF320A9CF644808DE87702
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/_3NlYGtAccp6zaeP-Zhm_oVq4fE.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 128.139.4.0/24 maxlen: 24
128.139.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d9:cf:23:ff:32:0a:9c:f6:44:80:8d:e8:77:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff7365606b4071ca7acda78ff99866fe856ae1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:0e:76:3d:78:af:86:5a:63:94:66:2d:34:
26:c9:68:72:f0:bb:b5:b2:4f:12:dc:69:89:a7:28:
df:78:a4:a5:a6:b7:de:7c:69:04:1c:79:ef:39:a8:
18:86:0e:53:c5:39:5a:98:fa:d1:d4:e7:86:20:01:
6d:4a:a7:63:b1:23:9b:a8:d3:48:b7:f0:00:05:9c:
3d:3d:3b:c1:23:27:d5:bc:9c:cb:de:27:19:2a:05:
ec:ae:81:44:e3:82:92:79:53:e8:fc:c7:4e:82:50:
4b:5b:dc:9b:ca:a6:12:c4:f7:c6:11:b4:0b:84:83:
2b:df:15:ed:07:56:78:c3:fa:5a:d3:63:78:bb:9d:
4c:07:7b:a6:eb:80:fb:6b:5a:18:76:3a:65:51:84:
e3:9e:f0:b2:5f:b8:d2:bb:7f:67:1a:8a:30:dd:59:
0f:e6:8e:92:91:6a:f5:fe:f8:41:f0:f8:2e:73:55:
d8:10:50:aa:03:be:45:22:55:68:af:df:4a:6a:df:
8b:61:f1:a0:7f:99:60:64:e8:59:8b:e5:1d:53:d7:
24:a9:67:1e:fa:b0:8e:a2:eb:96:ce:cb:3a:dd:ae:
77:95:df:49:03:11:ce:1d:b1:2f:8b:7d:95:c4:3f:
68:18:ea:82:6a:4d:1d:8b:e4:78:01:e0:98:12:b1:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:65:60:6B:40:71:CA:7A:CD:A7:8F:F9:98:66:FE:85:6A:E1:F1
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/_3NlYGtAccp6zaeP-Zhm_oVq4fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.4.0/24
128.139.6.0/24
Signature Algorithm: sha256WithRSAEncryption
92:18:e4:fd:0e:b3:ea:5e:3c:f8:62:3d:ab:a6:33:1f:7b:95:
63:70:c0:f3:ce:fc:d8:be:d3:67:6f:b4:2e:c2:0e:7f:d2:f9:
31:06:0a:84:cc:ef:1c:4f:6e:b7:61:83:3b:ed:c1:f7:ba:32:
fa:92:49:0c:cc:5d:88:db:a7:e6:54:39:3f:d9:97:64:7f:4d:
e1:3e:d2:87:f8:2e:d1:e1:df:b0:1e:9c:31:29:24:6e:19:f4:
63:b1:f6:67:29:74:ed:e8:73:de:7f:c4:0b:77:bf:c4:01:51:
dc:52:3a:43:fd:b2:d6:0f:53:e3:82:48:fb:e4:8b:eb:26:84:
f4:bc:06:91:95:b9:ae:54:93:ec:5a:33:a2:1c:ca:12:47:83:
91:52:b8:8f:ab:2f:d8:e7:6c:44:26:1e:6c:03:61:6b:ba:f8:
b5:7f:ad:f4:82:d1:8e:29:7a:a5:28:af:79:e7:0c:d9:cc:52:
a2:59:de:50:6b:30:cc:15:fc:c2:24:88:ef:fa:7e:2c:62:8f:
2a:fd:11:87:9c:c2:16:63:57:5a:9e:d9:fd:b8:6d:34:88:10:
8d:c8:84:ee:92:07:55:08:ea:8c:54:a5:9a:22:32:5d:03:89:
df:c6:7f:0b:9b:b5:8a:55:bd:ed:c4:21:3d:9c:b5:87:86:92:
ef:f4:dd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:22 2025 by rpki-client