Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/g3iHQw8tiDmUAUTfxUd1KY_SsKY.roa
File: g3iHQw8tiDmUAUTfxUd1KY_SsKY.roa (raw, json)
Hash identifier: M3QQ/b3+sSGZcThQEcxwjhN0/8J2niXHwWq9ZuM6+yM=
Subject key identifier: 83:78:87:43:0F:2D:88:39:94:01:44:DF:C5:47:75:29:8F:D2:B0:A6
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222023827E30A7CD2B491D787C031119
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/g3iHQw8tiDmUAUTfxUd1KY_SsKY.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38230
IP address blocks: 2a0e:8f01::/35 maxlen: 48
2a0e:8f01::/48 maxlen: 48
2a0e:8f01:104::/48 maxlen: 48
2a0e:8f01:10b::/48 maxlen: 48
2a0e:8f01:10c::/48 maxlen: 48
2a0e:8f01:1f0::/48 maxlen: 48
2a0e:8f01:1f1::/48 maxlen: 48
2a0e:8f01:1f2::/48 maxlen: 48
2a0e:8f01:1f3::/48 maxlen: 48
2a0e:8f01:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:23:82:7e:30:a7:cd:2b:49:1d:78:7c:03:11:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=837887430f2d8839940144dfc54775298fd2b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:a0:f9:38:81:46:d2:9b:1d:b2:bf:08:4c:
a4:de:34:97:65:bc:5d:35:4c:7c:d6:9b:c3:7a:43:
92:d4:13:9c:a1:1d:ab:d0:01:fb:81:61:68:6d:80:
4d:9b:72:36:8a:a8:1b:15:4e:31:31:e2:80:68:f8:
3c:48:18:b9:ac:b5:d9:1b:4e:00:dc:4e:d8:94:e1:
0c:6f:3e:57:24:6c:c9:dc:ff:dd:03:06:42:6e:68:
e9:61:6e:4d:fd:c0:9f:db:ac:9b:55:45:01:c2:9e:
89:e6:fa:06:4c:17:86:84:a2:a2:e5:36:18:e2:ce:
c0:4a:a3:06:e6:12:ee:80:47:cb:b2:90:eb:9b:01:
9e:bd:ef:aa:44:c9:68:9d:bc:1f:57:fd:b1:56:1c:
f6:54:09:e5:8e:cd:dd:8b:83:e5:18:25:a0:7c:94:
96:30:d8:39:ad:49:20:20:9b:ac:56:26:59:5c:ba:
e3:b1:c0:2d:76:f5:13:06:2e:2c:d3:f2:6b:21:7b:
af:52:ff:2a:b7:09:17:dc:af:80:c7:ed:ce:b2:2c:
79:1d:b3:19:2b:60:8d:ca:b4:1a:1f:f6:04:c6:c7:
7a:93:c3:f4:f8:91:d8:70:48:46:42:1e:5b:48:45:
8c:50:38:62:47:e6:c2:27:d8:2a:1d:48:c7:e3:75:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:87:43:0F:2D:88:39:94:01:44:DF:C5:47:75:29:8F:D2:B0:A6
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/g3iHQw8tiDmUAUTfxUd1KY_SsKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f01::/35
2a0e:8f01:8000::/48
Signature Algorithm: sha256WithRSAEncryption
29:f8:04:bc:ab:8a:2b:4f:c6:f6:70:f2:df:a9:57:9a:0e:e1:
20:b3:3c:e7:cf:c7:48:e7:b1:d6:12:ec:ae:96:80:08:23:a9:
5e:20:de:44:9b:99:2c:cd:3a:1d:c9:4a:52:bd:e6:9c:64:70:
88:05:4d:5f:21:46:c2:6e:5c:87:78:09:e3:d5:ac:62:6c:05:
12:17:de:3e:2e:24:e6:31:14:ec:ef:9a:9b:50:db:a0:11:d2:
f8:40:d8:b1:58:4f:cd:e2:c8:32:da:0b:ae:ed:15:bc:33:13:
f0:e1:97:a0:cb:db:0e:a6:32:ab:8f:2c:82:71:63:a6:db:cc:
7d:61:0e:10:ae:56:ca:2a:12:24:20:87:6e:ca:81:ec:d6:43:
b3:6a:fe:10:05:11:db:fa:d4:cd:f5:5a:5b:b3:5b:64:76:2f:
e8:27:89:45:19:e1:ac:e5:0e:90:ba:9e:16:df:44:2c:58:a6:
7f:06:80:d8:63:02:89:28:c4:8e:56:83:2e:0f:60:56:76:2a:
f6:08:da:23:5e:d8:1e:87:75:94:9a:71:8e:7e:1e:73:2a:c4:
0b:00:82:83:75:7a:5c:96:ef:26:fd:bd:2a:3f:9d:2c:fa:2d:
bd:55:e9:13:d4:a3:3e:ba:5b:47:bc:3b:72:d6:90:eb:02:44:
a8:14:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:35:55 2025 by rpki-client