Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/_Zj7OokHAndWw-2CyHBYUS9Xdjk.roa
File: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (raw, json)
Hash identifier: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=
Subject key identifier: FD:98:FB:3A:89:07:02:77:56:C3:ED:82:C8:70:58:51:2F:57:76:39
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019423D71B277EA16CB9081D3E5F530B8A58
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/_Zj7OokHAndWw-2CyHBYUS9Xdjk.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209460
IP address blocks: 2001:67c:918::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1b:27:7e:a1:6c:b9:08:1d:3e:5f:53:0b:8a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd98fb3a8907027756c3ed82c87058512f577639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:5e:83:32:23:e5:33:e0:b8:2c:0b:92:7b:
15:55:36:62:44:44:a8:95:01:31:48:a3:5d:3c:8c:
dc:d2:83:99:fe:8b:76:41:d7:1b:56:b8:70:f9:3b:
7e:c0:3e:02:84:9e:c2:25:21:1d:51:8f:64:ff:c7:
86:df:b0:df:ad:38:76:35:ae:bf:d0:da:29:36:7e:
6b:52:32:c8:2f:0e:fc:da:12:30:c8:7d:e6:15:46:
3b:b9:95:f7:9e:cf:bd:84:cf:ea:fe:e9:63:8a:bb:
72:0d:44:d2:e2:bd:0f:ba:72:24:29:62:15:05:57:
8d:0d:86:4d:e0:ad:26:c8:ad:ce:7a:9a:96:f6:d4:
f6:2b:3d:1f:99:3e:83:fa:92:52:98:3e:ba:e9:bf:
19:c2:38:bd:86:63:c0:54:dc:e6:b1:f8:f3:3a:a7:
cb:81:0c:3b:38:05:9f:fc:06:71:a3:27:5d:0a:d9:
05:8a:b8:8c:a8:f9:49:11:05:fd:e5:ac:2b:da:cb:
01:c3:79:76:b8:b7:48:71:51:67:52:98:87:1a:76:
1b:3d:97:b6:2f:c4:dc:e2:03:4a:d4:c5:4c:4f:59:
1a:7d:13:62:09:d0:21:7f:ca:7e:55:33:e1:11:06:
dd:5e:74:68:f4:93:8a:54:d5:4b:a7:ff:37:f9:e8:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:FB:3A:89:07:02:77:56:C3:ED:82:C8:70:58:51:2F:57:76:39
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/_Zj7OokHAndWw-2CyHBYUS9Xdjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:918::/48
Signature Algorithm: sha256WithRSAEncryption
7e:54:6d:ab:43:30:67:b7:91:10:f5:08:cd:82:90:dc:fe:4b:
52:85:0e:a9:94:d4:94:dd:36:0e:21:6d:9b:1d:22:62:43:45:
30:99:e3:d1:d2:fc:89:90:a3:0c:ff:f4:58:13:4e:e1:b6:5d:
64:e9:9f:ec:7e:c3:36:24:35:e3:af:b6:9c:d4:7b:0b:a9:ac:
1e:62:55:db:3e:8b:d7:af:cd:3f:e4:c9:c9:ad:61:43:4b:da:
71:13:4f:42:ba:56:4a:3e:00:f6:09:87:cf:9a:56:b2:0a:ad:
e3:6c:14:06:65:8b:1e:4f:4b:a8:33:df:22:26:17:cd:26:84:
d0:95:c9:eb:29:a1:72:75:97:a4:c2:7d:22:2c:54:d6:a0:fe:
ff:d2:bd:14:88:d3:b7:4c:1d:5d:27:79:c8:92:9c:05:11:ff:
2a:1a:aa:8a:17:e2:f9:e9:26:d6:65:f1:b0:16:9b:62:37:4d:
52:6a:84:bc:4e:53:29:11:58:73:89:eb:4a:de:03:0c:e5:ac:
05:f2:66:c6:81:88:56:d4:0a:4d:61:41:03:7b:55:fb:21:ce:
1e:e9:0f:c1:f3:98:3f:d8:1d:b8:75:d7:2a:8f:8f:14:36:b7:
6d:4b:e2:97:94:ba:7b:b4:39:3c:0c:8c:9a:65:cb:4e:d6:5b:
87:61:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:18 2025 by rpki-client