Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/O3desnRLE4eMtaLYXnU5Nh4QOG4.roa
File: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (raw, json)
Hash identifier: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=
Subject key identifier: 3B:77:5E:B2:74:4B:13:87:8C:B5:A2:D8:5E:75:39:36:1E:10:38:6E
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 0194B8DFDDC982A4D09BD4237EBFC2549521
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/O3desnRLE4eMtaLYXnU5Nh4QOG4.roa
Signing time: Thu 30 Jan 2025 20:21:06 +0000
ROA not before: Thu 30 Jan 2025 20:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216343
IP address blocks: 2a0a:280::/36 maxlen: 48
2a0a:280:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b8:df:dd:c9:82:a4:d0:9b:d4:23:7e:bf:c2:54:95:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 30 20:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b775eb2744b13878cb5a2d85e7539361e10386e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:e5:f1:ad:e7:49:04:bc:60:f5:57:db:b4:
5e:4f:3f:a5:c5:8b:2d:9e:db:c7:e8:9c:cc:92:f5:
e2:20:45:c8:ca:50:7b:fe:52:1c:d9:5a:80:88:c8:
a9:5e:3f:75:db:1c:63:9d:c3:17:b5:09:fa:ed:04:
41:48:e4:e2:bc:f3:9b:28:c6:f6:69:0e:52:6a:93:
21:27:b8:e2:2c:ce:c2:74:35:a5:45:50:b1:3d:18:
a5:4f:79:d4:e6:a2:6e:8f:9a:f8:f3:f3:cd:d9:fe:
db:41:94:66:c3:b8:91:4d:8a:f9:96:d4:43:b9:ed:
0d:f0:d8:9d:4a:31:6d:2a:1e:1f:47:70:9f:2d:16:
9f:1c:c7:50:e1:97:b2:a5:44:7d:df:42:7f:8f:c6:
97:75:f3:73:65:c3:6c:2b:b0:5c:22:3f:42:d3:92:
b3:60:75:dc:77:bc:c5:50:a2:97:d7:16:6d:de:aa:
62:cd:76:75:ff:b5:59:d2:38:24:5a:e9:bf:8f:d5:
f8:1f:63:65:23:58:15:42:01:77:4f:f4:ac:18:e3:
11:49:a9:18:cc:ac:92:5f:c7:96:72:34:a4:da:24:
ba:5b:5e:b9:ab:57:43:75:3d:8e:be:80:8a:bd:e7:
40:c7:d1:19:ed:a4:53:f3:6e:7a:c6:67:68:d4:15:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:77:5E:B2:74:4B:13:87:8C:B5:A2:D8:5E:75:39:36:1E:10:38:6E
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/O3desnRLE4eMtaLYXnU5Nh4QOG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280::-2a0a:280:10ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:71:96:0f:34:f9:5c:5b:a7:28:91:a3:e5:7e:e5:bc:27:54:
14:01:55:45:95:40:86:4b:66:c7:67:04:d8:70:64:87:b7:2f:
59:97:e6:ba:d2:bb:4f:cc:25:13:1c:89:03:7c:de:b9:ac:96:
e1:0e:ae:c2:ed:68:c8:7a:d8:e2:9d:f3:bc:5a:05:26:0e:4b:
ed:02:a2:c4:49:b8:eb:e8:b9:b0:a9:a8:8c:05:96:91:9d:03:
27:d8:e9:ef:b1:db:52:85:8c:00:1c:b3:c5:88:ad:0f:a0:f6:
63:3e:90:3b:68:df:4b:e1:bb:00:de:d2:56:fe:33:83:44:85:
27:a3:05:f6:06:ba:cb:6e:26:7b:8e:bd:51:ce:7e:66:4a:77:
cb:d5:f0:08:e0:5c:02:40:66:10:7d:e3:be:3f:28:56:ff:b8:
e5:8e:1c:24:36:ac:2f:b2:b5:84:77:10:73:67:46:41:d0:45:
4f:e2:f3:e4:68:f7:de:c3:4d:2d:ef:ed:1e:7c:44:a9:8f:f6:
0c:76:d0:11:fd:91:06:1c:78:9f:d4:9f:0a:a1:10:56:bb:9d:
c3:50:34:f5:3f:e7:2e:6e:01:45:30:67:f2:02:c0:c3:d3:d0:
8a:68:50:12:37:42:80:e5:64:d6:48:68:23:59:54:58:d5:52:
eb:85:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:11:20 2025 by rpki-client