Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/O5vcxppH2hWxYYAsqunLkBWcHEA.roa
File: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (raw, json)
Hash identifier: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=
Subject key identifier: 3B:9B:DC:C6:9A:47:DA:15:B1:61:80:2C:AA:E9:CB:90:15:9C:1C:40
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01942521F7BD4B7AD0142238876E80185A67
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/O5vcxppH2hWxYYAsqunLkBWcHEA.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 2a03:6947:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f7:bd:4b:7a:d0:14:22:38:87:6e:80:18:5a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b9bdcc69a47da15b161802caae9cb90159c1c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:b9:9e:fa:88:73:aa:76:e7:8b:71:3e:79:
48:92:b4:c7:7c:e1:b1:5e:6d:0e:d2:cf:48:b4:14:
bd:e7:0e:bf:65:e8:6e:83:53:67:7e:19:2f:e6:87:
4c:39:14:c0:b0:e1:69:12:93:46:7f:5a:1d:cd:41:
f2:a2:7d:e0:61:76:33:9f:47:f5:3e:32:76:83:db:
ff:34:cc:d6:2d:19:58:b3:3b:33:fd:cd:7b:5f:a2:
99:ae:b3:42:30:08:63:0c:08:c8:79:e2:ef:3f:e5:
a1:b8:51:3d:70:b9:4d:d9:6e:a0:00:3d:fa:01:46:
80:fb:51:78:81:41:87:07:ce:9c:dd:4c:f8:b8:8e:
1b:93:1b:82:b9:32:cd:63:18:ee:84:66:81:e0:8b:
28:33:5f:7d:17:d0:9c:18:b9:a2:21:f7:ce:68:47:
38:fb:3b:7c:13:84:4f:9b:d6:bc:60:bb:66:a5:56:
2e:af:17:81:88:4d:eb:6a:07:83:62:ec:14:6f:5d:
ac:71:1a:2d:22:27:ce:ae:45:18:9a:8f:b1:fa:62:
0c:99:55:b5:f8:7b:41:6e:70:ea:4e:e1:05:91:ec:
68:05:ee:c9:e4:53:c5:4a:14:e5:df:11:85:60:4b:
09:a0:e2:0a:6b:04:a1:a1:02:7b:f0:22:58:81:ba:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:DC:C6:9A:47:DA:15:B1:61:80:2C:AA:E9:CB:90:15:9C:1C:40
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/O5vcxppH2hWxYYAsqunLkBWcHEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:600::/40
Signature Algorithm: sha256WithRSAEncryption
44:67:78:08:f4:9b:6b:28:a9:8c:1e:42:05:35:14:3d:60:68:
cc:b4:34:fe:b7:3e:bd:98:5f:41:b2:65:61:0c:26:51:9c:df:
82:17:52:f2:dc:2b:77:f8:54:2f:88:ff:00:bc:5c:53:6b:1a:
38:64:1f:a8:15:85:3e:98:0f:37:48:4a:67:a4:99:2a:93:de:
b0:5f:8c:c2:f5:92:62:53:82:cc:27:00:b1:04:b0:f4:49:de:
bc:91:1c:7c:8b:ff:c6:22:61:e3:29:e7:9f:be:60:98:6b:62:
01:55:04:f9:57:83:97:9f:2d:45:46:9f:da:cb:9c:4f:21:0b:
b6:eb:86:b1:0b:37:8b:0d:55:f9:e1:d6:f1:49:88:b3:1f:85:
5f:ff:b8:ec:6e:fc:52:e9:40:a7:68:2d:83:b9:ce:bc:07:60:
30:6b:d2:04:6e:a3:28:c7:3a:b6:eb:fe:5b:1d:95:a3:65:ca:
68:45:bc:6b:02:c3:07:0e:7c:73:15:66:e8:03:e9:3b:cc:c2:
4c:78:4d:68:bb:a7:80:fa:e8:c4:6b:25:e0:02:86:68:72:c3:
c3:ca:58:f2:1b:41:66:89:41:c7:a1:60:8f:a6:27:fe:ef:ad:
ea:f3:2b:49:84:3d:5a:31:a0:b2:f9:c7:7e:c9:a6:34:5f:12:
9d:4e:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:42:07 2025 by rpki-client