Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3v2InYCdFNN-TOpmC0do9QQ50pc.roa
File: 3v2InYCdFNN-TOpmC0do9QQ50pc.roa (raw, json)
Hash identifier: U+gcuhtUwFzefEos6zVVAjWVyDHz3nYLOOc8VBtvK9E=
Subject key identifier: DE:FD:88:9D:80:9D:14:D3:7E:4C:EA:66:0B:47:68:F5:04:39:D2:97
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE36B7041B785F579FA2C9794205D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3v2InYCdFNN-TOpmC0do9QQ50pc.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208914
IP address blocks: 2a0c:9a46:600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e3:6b:70:41:b7:85:f5:79:fa:2c:97:94:20:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=defd889d809d14d37e4cea660b4768f50439d297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:6b:09:cf:03:77:46:f9:d3:4b:88:8d:96:
6a:74:f5:b8:f4:ee:a4:8b:94:e2:a1:f7:3d:19:be:
72:fc:fa:d8:07:a6:be:1f:e8:66:2e:cd:8d:df:94:
1b:c0:48:b3:43:8e:87:de:df:13:87:1e:aa:ad:df:
66:aa:5e:3c:7a:c4:87:04:6e:37:8d:60:a9:2c:68:
bd:f0:be:86:4b:10:c9:5b:c3:47:83:1c:f5:d3:f9:
8d:e8:67:07:c1:71:09:32:32:87:d1:4a:77:4c:32:
5a:af:43:9d:77:56:89:7b:68:36:db:74:9e:fa:75:
34:35:e9:0c:50:ac:ff:ee:e9:7e:df:a0:3b:69:43:
3f:9f:3c:40:fa:9c:b3:5a:b3:c3:14:f9:14:c7:1e:
b5:9e:41:aa:c2:43:a3:50:47:c7:24:60:03:ba:b8:
04:11:17:d6:42:0d:79:6a:44:8d:9d:a4:2f:46:07:
c4:62:dc:ce:6b:58:95:b8:9d:96:66:ff:88:be:df:
20:ff:cf:3e:98:d1:ba:56:fc:e5:82:e9:ec:49:e9:
93:05:05:ed:9e:79:fa:36:25:7f:35:81:08:62:32:
5f:da:33:07:3a:08:3c:ea:ed:93:e0:30:36:ee:19:
e7:bf:bf:82:de:e0:3e:3e:89:0a:d0:1d:cd:ef:eb:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:88:9D:80:9D:14:D3:7E:4C:EA:66:0B:47:68:F5:04:39:D2:97
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3v2InYCdFNN-TOpmC0do9QQ50pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:600::/40
Signature Algorithm: sha256WithRSAEncryption
b3:67:d7:f0:79:cb:f6:a7:9f:96:c5:5d:bb:36:f9:38:55:ea:
a8:cd:44:a6:75:e9:1a:38:82:0d:37:58:73:a5:67:f1:d0:d2:
1a:d2:9b:9e:35:ee:a2:e6:f6:a6:60:ce:33:f6:da:19:82:9d:
bc:09:9a:22:6b:bc:a2:03:2e:42:93:32:56:98:9a:d1:7e:e0:
c6:16:52:e8:9c:da:5d:5e:30:89:63:f0:9c:5f:f7:d0:27:1e:
3a:11:86:28:f8:68:fa:a9:7c:2e:0a:4d:0e:fb:89:20:b5:5e:
87:70:64:9e:2d:48:7c:42:cd:f8:19:36:cc:3c:bb:a6:4d:e7:
bc:11:a9:e3:8b:53:1a:9e:4d:7e:b6:f9:35:ec:ba:7e:9e:9c:
5f:d3:ca:ea:fa:9f:a9:60:97:df:80:f0:20:4a:32:22:82:ea:
93:22:e8:80:f0:86:01:69:4d:ce:10:b1:41:d8:49:68:31:25:
9b:9e:58:8b:67:4e:49:56:ad:b2:a6:a6:70:b3:ed:88:b4:4f:
a1:5f:f2:81:9b:5c:8c:9f:3c:36:48:51:46:86:49:9b:90:4d:
cd:8f:93:1d:11:a5:96:42:fb:f9:4a:24:61:3d:fc:74:d6:7d:
45:81:81:d6:4f:ec:e6:1a:8a:f4:d4:70:ab:50:e1:1d:2c:36:
a0:4d:24:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:20 2025 by rpki-client