Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3EbDHVpUGPClmvm3J9iIFuXcrd8.roa
File: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (raw, json)
Hash identifier: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=
Subject key identifier: DC:46:C3:1D:5A:54:18:F0:A5:9A:F9:B7:27:D8:88:16:E5:DC:AD:DF
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55D4E8F24475A24A57F5BF149F376
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3EbDHVpUGPClmvm3J9iIFuXcrd8.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205021
IP address blocks: 2a10:4646:1e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5d:4e:8f:24:47:5a:24:a5:7f:5b:f1:49:f3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc46c31d5a5418f0a59af9b727d88816e5dcaddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:dc:d1:b6:a9:ac:fb:5d:62:4e:00:aa:1b:
a6:b4:b7:c2:c1:1d:33:45:3c:63:83:d9:e4:70:d2:
6d:48:f6:c1:1f:8d:89:8a:dd:14:6e:89:1b:da:37:
0a:14:7a:cf:1e:4f:a4:fe:35:69:14:92:ac:ef:6f:
c2:dc:71:ac:87:8a:0c:b0:cb:5f:75:54:99:7f:92:
c8:42:ea:f4:a8:1a:c3:11:8b:6b:0a:59:d7:14:7c:
71:fa:5a:40:03:ec:ee:5a:7b:2c:88:62:26:6a:d5:
49:6c:0c:9c:82:b7:7a:8b:86:69:61:4f:8b:95:fd:
03:6b:c3:31:6f:4a:aa:cf:b6:e6:e2:84:04:01:3f:
67:f9:e9:f2:bc:9e:9f:61:3f:54:84:1c:f7:37:29:
24:d3:f5:1b:70:be:41:45:25:18:9c:4a:05:19:c1:
f7:8f:17:87:23:79:a8:cd:de:8d:9a:32:3c:59:1e:
c6:4f:e6:74:cd:f2:10:d9:85:58:5d:f5:9c:99:1f:
19:b3:a9:76:84:39:00:f9:55:c6:46:42:17:af:50:
51:36:45:fa:af:e2:30:b7:de:13:17:0c:6b:4f:e1:
6f:25:a2:13:7c:c6:c5:c9:7d:bd:f8:3c:1d:1e:ab:
e5:43:1d:f2:dc:fe:30:20:73:19:e3:22:a2:9a:7b:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:C3:1D:5A:54:18:F0:A5:9A:F9:B7:27:D8:88:16:E5:DC:AD:DF
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3EbDHVpUGPClmvm3J9iIFuXcrd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:1e0::/44
Signature Algorithm: sha256WithRSAEncryption
5c:06:87:13:4d:9f:33:c6:2b:3d:9b:62:1a:5e:7f:c5:61:d2:
09:59:ad:52:b2:31:24:fc:c5:46:f6:ff:e8:83:38:08:52:c9:
b6:91:56:0b:db:e5:75:cb:13:22:22:3e:2a:28:42:0b:77:77:
3e:69:84:d1:84:21:0f:35:81:86:2d:4e:e4:53:b7:5b:b4:34:
b6:0c:d3:a5:27:5a:ba:bd:3f:e1:32:2d:1e:0a:ad:d5:a9:1c:
49:ad:c0:bf:50:b9:f7:1c:78:40:f7:e2:b4:6d:ab:8c:65:2d:
39:89:a4:e5:d6:d2:fd:58:43:b1:2d:31:7f:f9:d4:aa:c4:5f:
a9:ca:4a:72:50:5d:8d:cc:90:f3:f5:dc:35:51:98:b1:27:41:
72:51:19:09:6c:ef:85:02:f5:d5:79:eb:c8:f0:6a:d9:5d:d1:
11:75:00:79:15:1c:e8:f9:62:19:00:45:f6:90:29:1d:68:f3:
47:32:9b:55:3f:a2:af:4e:ed:b8:03:6d:23:02:26:95:5b:de:
b5:16:0e:08:57:89:db:a2:2f:4e:1b:b5:75:5e:cd:aa:11:d0:
46:5d:91:bd:75:0e:14:e0:64:f9:f1:7f:49:e0:fa:54:41:60:
63:98:b0:40:20:f1:45:96:1f:d9:96:25:73:5f:71:f7:00:06:
7c:f7:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:19 2025 by rpki-client