Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/jMa6gCTiwT7u6_nY7rYAamQhAvI.roa
File: jMa6gCTiwT7u6_nY7rYAamQhAvI.roa (raw, json)
Hash identifier: /3kWQVn9yQP77uBrM8AVQhX9Si46/u2UopM8CejUies=
Subject key identifier: 8C:C6:BA:80:24:E2:C1:3E:EE:EB:F9:D8:EE:B6:00:6A:64:21:02:F2
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521A74C7671A7E4BC89CA37E946F981
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/jMa6gCTiwT7u6_nY7rYAamQhAvI.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216056
IP address blocks: 2a13:a5c3:ff30::/44 maxlen: 48
2a13:a5c7:1600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a7:4c:76:71:a7:e4:bc:89:ca:37:e9:46:f9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cc6ba8024e2c13eeeebf9d8eeb6006a642102f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:54:2c:6b:dc:14:ad:dd:c9:39:d4:34:73:
9c:74:e8:e3:1c:00:97:50:f8:d2:ca:7a:72:8e:32:
87:21:76:a8:12:d9:92:30:d1:4b:b0:d3:ac:dc:c6:
ae:a2:c2:72:0c:01:af:28:b5:82:5d:e7:59:46:5f:
33:e0:5e:d2:8b:44:ff:fc:58:67:e1:6a:aa:67:c8:
74:5f:9c:f6:24:f9:cd:1c:dd:98:e6:e2:90:29:68:
96:56:e7:c6:65:68:09:e2:95:da:fe:be:da:5e:30:
a8:20:1f:f5:2c:23:08:82:72:31:88:ee:61:9f:63:
c6:48:ea:dd:6a:5f:af:70:3e:db:45:03:ce:16:07:
81:8e:54:d4:e5:34:16:14:32:d4:06:25:3f:e7:aa:
41:dd:7f:0d:86:8b:25:7a:6d:6d:d2:c0:7b:d1:d8:
a2:51:15:f3:f7:ec:fb:58:b0:5c:d1:a7:27:6b:91:
ec:74:a3:27:e0:b9:95:27:1d:c8:1f:37:cf:1b:97:
6a:cd:0f:fa:0e:f8:0e:4e:ef:75:3f:8e:34:58:b4:
48:ec:cd:bd:e7:20:29:f0:f7:d3:f3:55:9b:b8:0d:
82:07:e0:7f:c8:77:02:c5:5d:3a:bd:b1:c8:47:2b:
e0:f1:67:16:e5:2c:5d:b6:fa:2a:7a:94:14:9b:39:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:BA:80:24:E2:C1:3E:EE:EB:F9:D8:EE:B6:00:6A:64:21:02:F2
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/jMa6gCTiwT7u6_nY7rYAamQhAvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:ff30::/44
2a13:a5c7:1600::/40
Signature Algorithm: sha256WithRSAEncryption
14:d0:90:5e:1f:af:af:72:91:51:cd:ca:2a:38:f5:be:88:0e:
60:83:df:7f:8c:b7:b6:f4:51:8a:48:31:a8:6c:27:7d:8b:51:
4c:c4:b1:e5:6f:25:ed:cb:66:86:73:98:ee:8a:df:f6:b3:ad:
2b:43:9a:72:d7:d4:c4:c7:b6:42:a6:8c:a8:f4:a6:ee:34:a1:
a7:9c:df:9b:a4:a8:b4:16:b9:6f:bb:d1:89:bf:35:19:ce:da:
e9:3c:15:91:90:e8:1a:11:52:67:75:ae:38:f1:11:1e:10:5e:
bb:31:bd:db:8b:a1:6d:2a:ae:8b:df:6e:3b:41:ba:9b:44:88:
de:d2:e9:cc:c6:0e:a7:49:ca:33:99:29:10:08:3f:12:15:4e:
8a:30:e0:3f:90:5d:05:41:f0:d7:52:28:3b:b6:83:dd:d6:2a:
55:5d:65:3f:d8:40:25:9f:dc:aa:9a:e4:c6:70:e0:d1:b2:5a:
8d:a6:a1:aa:e3:e0:7b:52:19:ba:96:94:4e:26:bf:57:74:e4:
d4:f5:32:8d:39:d3:11:40:7e:4e:e1:ef:bc:46:d3:59:b5:3f:
3e:47:54:39:9d:95:69:53:b4:2c:82:0d:3d:b2:c8:a4:d6:80:
5b:60:27:ff:e1:7f:cb:89:cf:a8:34:8e:45:7a:0c:25:45:81:
76:9e:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:55:05 2025 by rpki-client