Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n3DRtxeBMA9gyrorlnCpe365jl4.roa
File: n3DRtxeBMA9gyrorlnCpe365jl4.roa (raw, json)
Hash identifier: 3IrMrnlGemwDD4BPpLVrqBrnRX1IDmnOpa2aSLHanIw=
Subject key identifier: 9F:70:D1:B7:17:81:30:0F:60:CA:BA:2B:96:70:A9:7B:7E:B9:8E:5E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA8591C5963587BCDF686ADC010CEE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n3DRtxeBMA9gyrorlnCpe365jl4.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204210
IP address blocks: 2a0c:b641:300::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:85:91:c5:96:35:87:bc:df:68:6a:dc:01:0c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f70d1b71781300f60caba2b9670a97b7eb98e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:97:e2:95:a7:22:0d:85:7e:59:00:04:22:
57:8b:79:e4:90:72:8f:9c:41:ff:78:8e:03:af:12:
ad:48:b9:37:c8:0f:56:10:d6:1c:2e:fd:02:2e:44:
b6:25:c0:3f:c2:62:b0:83:bb:6d:7d:5a:cd:23:92:
c5:74:d5:f3:d4:14:3f:52:ed:c2:18:25:8d:7a:12:
39:a6:ab:64:df:be:f1:8c:cb:70:db:db:74:39:54:
55:75:23:ed:f1:86:11:4d:9d:45:70:55:d3:1d:b4:
9a:12:5f:a9:af:30:32:5e:7a:0c:43:a7:02:32:fc:
75:07:36:f6:04:94:29:e7:95:3b:14:ac:22:af:e9:
de:33:4e:c8:b2:b6:54:cf:4f:7a:b5:84:5c:66:1b:
3d:57:4e:1c:07:04:6d:3e:14:04:41:b1:1e:da:bd:
61:4c:8f:2c:48:57:31:48:3e:4d:d6:a6:9b:f9:ff:
08:d8:3f:96:fc:d3:47:b7:95:7a:49:fa:6c:a1:f0:
df:ee:91:fd:a5:71:7f:05:a7:23:bd:d2:47:81:62:
20:16:2e:2f:c8:34:8a:08:12:e3:aa:ca:46:1f:fa:
07:f9:30:8a:44:05:ad:a6:0b:f9:31:fc:72:54:4b:
24:84:74:54:ac:46:80:69:b8:6a:64:28:92:f7:2c:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:70:D1:B7:17:81:30:0F:60:CA:BA:2B:96:70:A9:7B:7E:B9:8E:5E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n3DRtxeBMA9gyrorlnCpe365jl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:300::/44
Signature Algorithm: sha256WithRSAEncryption
0a:16:36:b3:80:3d:cd:c9:22:e9:43:0e:d2:72:8c:b9:f6:3f:
d5:f0:c3:73:5b:d6:3b:46:fe:80:a0:22:b6:a8:78:1b:f9:9f:
3a:cc:47:28:58:19:d7:47:22:d1:de:2a:27:06:42:27:d9:6e:
dc:1c:55:2d:df:bf:0b:88:98:8a:e5:33:87:81:8f:7f:9f:81:
03:a1:31:f6:b0:3d:e9:bf:71:7a:dc:d8:15:ae:d1:ec:da:ef:
b5:11:50:91:99:46:51:a8:dd:82:21:16:b5:ac:bd:48:c6:f7:
51:d6:c3:11:ae:54:45:39:65:d4:ff:e5:59:bd:e9:29:91:5d:
9a:42:84:cb:3b:c8:72:02:2f:a3:30:c8:f8:18:92:d8:32:fd:
b7:cd:a6:8b:5a:d5:8e:de:5e:88:4e:eb:94:a9:21:b7:26:1a:
81:fc:22:53:a5:1b:84:3e:94:56:5f:26:74:4c:ec:39:06:3e:
93:b0:90:33:07:0e:58:1f:cb:56:ab:a6:f1:3f:8d:8c:c4:d1:
00:4a:cc:4d:15:99:e8:2a:9d:38:39:0f:8a:ab:05:c5:c9:a0:
5a:76:e8:fe:d0:54:27:19:87:37:b6:1b:d7:90:e8:e6:48:56:
32:c1:25:17:5b:f6:ff:29:f1:a4:a1:30:88:b0:32:0e:78:5c:
5c:a5:27:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:09 2025 by rpki-client