Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/3I4C6Ngc7fDqENlrP9MQ3movJoI.roa
File: 3I4C6Ngc7fDqENlrP9MQ3movJoI.roa (raw, json)
Hash identifier: CozQlTp6j6rye5pcJ/4KWGyOSARgztmDQg7ndMeU3mw=
Subject key identifier: DC:8E:02:E8:D8:1C:ED:F0:EA:10:D9:6B:3F:D3:10:DE:6A:2F:26:82
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 01966671685A013588C5C45A911D88215DDC
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/3I4C6Ngc7fDqENlrP9MQ3movJoI.roa
Signing time: Thu 24 Apr 2025 06:17:10 +0000
ROA not before: Thu 24 Apr 2025 06:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28852
IP address blocks: 2001:1a10:9120::/45 maxlen: 45
2001:1a10:9128::/45 maxlen: 45
2001:1a10:9130::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Apr 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:71:68:5a:01:35:88:c5:c4:5a:91:1d:88:21:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Apr 24 06:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc8e02e8d81cedf0ea10d96b3fd310de6a2f2682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:08:77:b8:03:64:f6:ff:bd:39:b0:ae:a6:
94:18:4d:47:25:48:77:fa:db:fc:fb:12:77:ec:0c:
fd:25:7d:56:b0:68:33:de:a4:25:a1:97:80:6e:d5:
cf:70:91:18:1d:94:d6:36:d3:4e:19:81:a0:8d:6b:
13:2e:6e:e1:a9:f6:4a:c4:5f:bf:59:fe:81:2b:c9:
69:d8:f0:ef:f7:04:36:d8:63:b8:94:3b:36:fc:79:
3a:de:62:94:60:31:d1:0e:06:6f:e4:8a:96:68:ef:
33:b4:fb:7e:00:c7:07:8f:b6:f6:33:e9:00:f1:bb:
f6:a8:82:07:7e:f1:c0:09:4a:40:70:45:e1:c6:8e:
64:33:58:15:e9:e2:36:4b:25:d3:80:ee:9a:a8:00:
87:49:b8:31:9f:5d:26:43:be:e9:52:02:3e:bd:ae:
d3:87:4d:66:e9:44:1c:63:00:b7:44:31:a0:04:e6:
d5:bf:54:f0:51:b3:ce:16:8d:8d:c4:5d:34:87:ae:
69:89:53:52:59:fb:a0:c1:60:ed:eb:cd:a5:98:41:
c2:fa:dc:3b:dd:64:c5:c5:d0:b8:6c:37:18:7e:ea:
fe:1b:04:c5:b1:e5:3b:04:f8:71:88:46:e4:c5:86:
78:e1:02:56:b6:f2:f8:0a:42:e1:5f:4b:0e:86:83:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:02:E8:D8:1C:ED:F0:EA:10:D9:6B:3F:D3:10:DE:6A:2F:26:82
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/3I4C6Ngc7fDqENlrP9MQ3movJoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1a10:9120::-2001:1a10:9137:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3a:59:4b:6e:cc:dc:74:87:ee:fc:7b:46:82:40:dc:3f:b9:39:
47:d6:21:9b:ac:8e:b0:30:5b:52:a3:f2:73:f0:9b:80:13:d6:
c1:93:c9:d4:df:db:df:fa:87:63:49:d6:df:22:17:b4:87:bc:
5e:8f:f9:61:2f:2b:8d:9c:5a:5a:db:20:7f:37:df:85:25:0f:
f2:82:5b:d8:0f:86:6d:c2:0b:3d:60:1a:7b:2b:c5:82:73:66:
9f:90:fb:2e:c3:c1:8f:15:5f:bc:62:ef:ce:ae:d8:54:30:d1:
49:3c:1c:05:c3:6e:d6:49:1e:70:f3:3f:a9:bd:fb:85:19:12:
90:a5:83:a7:b1:3a:e9:20:44:03:9c:60:ee:1d:fd:3f:ba:71:
88:99:8c:6c:c8:ab:19:bb:05:65:d2:29:4d:8e:a8:6a:c8:f4:
14:ae:a6:bc:75:a9:47:f4:1d:fe:98:0e:ca:41:2c:82:df:81:
3f:6b:53:dd:0c:44:24:16:c8:af:a3:7e:0a:d4:62:7d:19:4c:
f9:e0:a1:03:ba:56:c4:5a:0b:de:f3:55:03:59:7e:b9:22:54:
18:9a:9c:e1:9c:61:ea:75:94:74:88:e2:61:9a:9a:bb:43:49:
ef:d2:6e:3b:53:81:28:10:23:a0:1f:d4:13:e5:89:eb:3c:c6:
d6:ea:29:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:46:03 2025 by rpki-client