Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rh3_zMgbezSBTPKUxw3ycvpBzT4.roa
File: rh3_zMgbezSBTPKUxw3ycvpBzT4.roa (raw, json)
Hash identifier: NmN4iUHXRovPi2Ra7t9d8+sp3nFa3pFWrpxtWIEnWHk=
Subject key identifier: AE:1D:FF:CC:C8:1B:7B:34:81:4C:F2:94:C7:0D:F2:72:FA:41:CD:3E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBFCC4F55F20F3410B917A31B9C210
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rh3_zMgbezSBTPKUxw3ycvpBzT4.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216052
IP address blocks: 2a0c:9a40:8480::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fc:c4:f5:5f:20:f3:41:0b:91:7a:31:b9:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae1dffccc81b7b34814cf294c70df272fa41cd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:56:eb:4f:a2:3e:f3:e5:62:ac:13:8e:63:
2b:44:37:71:b8:1c:e6:f2:17:9e:c6:51:da:f8:5d:
cf:f9:bc:4c:6a:73:36:fa:c2:10:63:de:fc:84:3f:
2b:b4:9b:ed:49:63:ec:da:c0:c3:ff:a7:ab:49:38:
53:1c:b4:1e:87:e2:f1:2a:bc:c8:ce:b9:00:30:36:
c4:e3:85:a9:b7:32:05:85:5f:99:f9:f7:c1:e9:f2:
c0:6d:6a:07:7c:8c:bb:b8:61:e1:f1:08:96:42:72:
df:ed:e2:7d:9d:60:53:0c:1d:df:25:0b:4e:70:48:
01:57:72:98:56:5b:6c:88:18:c0:ce:e1:3f:f5:b9:
0e:e4:61:0c:ae:ba:fd:75:b4:a3:fb:39:28:7f:87:
ad:5d:af:3b:7e:2d:4d:65:b4:36:19:84:70:3a:cc:
a3:32:60:72:94:e2:07:91:e8:e7:19:87:d5:67:e1:
bf:5a:fb:bb:ea:5c:69:d1:7c:ec:84:0f:80:17:06:
cd:22:5f:be:ab:a5:92:fc:62:d6:02:ce:80:f8:e0:
74:3d:66:09:f9:73:6e:75:54:4d:96:58:de:a1:d2:
7e:94:86:b4:bd:8c:fa:21:a4:5a:5a:86:32:e3:6d:
74:fe:1b:ba:85:5a:39:48:b9:90:7e:60:a0:35:6f:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1D:FF:CC:C8:1B:7B:34:81:4C:F2:94:C7:0D:F2:72:FA:41:CD:3E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rh3_zMgbezSBTPKUxw3ycvpBzT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8480::/44
Signature Algorithm: sha256WithRSAEncryption
17:8a:4d:8c:7a:84:30:dd:1e:77:e9:8a:06:0b:a4:9b:c3:c9:
56:a0:84:4c:ff:53:24:cd:23:97:f0:ee:43:94:a6:36:34:83:
b2:30:f8:4f:a0:13:59:ff:64:96:74:44:a7:af:31:d7:b9:5f:
86:c9:d8:a5:95:4a:cd:4b:f9:6d:ce:23:37:fd:ed:08:b9:c7:
3a:ad:d0:1c:e0:58:62:5b:91:db:50:7d:3c:3f:65:f3:91:16:
e4:43:5e:3c:4e:e9:43:11:30:df:38:c0:3f:45:9d:77:e8:4a:
d4:06:88:b3:bf:2e:c4:c8:b9:da:92:a2:83:e6:36:37:e5:c6:
20:d0:f5:d2:2b:b9:6c:3a:e7:69:89:a4:e8:e5:7f:85:be:70:
ba:ca:98:ec:dd:13:6c:4f:d6:7f:eb:de:43:f0:a8:2d:e5:7f:
28:e5:63:ad:e2:3d:70:e7:e0:93:90:00:79:49:88:d8:59:76:
79:d9:8c:0c:19:31:55:7c:c3:fb:08:bd:b1:98:aa:d8:80:2f:
77:7c:aa:8d:1b:49:85:44:ea:4d:f7:e2:e8:ec:f5:76:6c:3b:
de:2e:ba:c7:88:8d:cd:ad:d0:41:70:e8:7f:7a:72:82:97:84:
52:72:ed:b7:4e:d0:21:72:8b:30:b7:0e:5a:94:7e:47:bc:f3:
b7:cc:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:33 2025 by rpki-client