Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/pAFGuOmFiinmNtzDNIWAAHCBzL8.roa
File: pAFGuOmFiinmNtzDNIWAAHCBzL8.roa (raw, json)
Hash identifier: smnkSIWrC+aFHsjL39EpGOubWh1B5xY83hqBzhP60WM=
Subject key identifier: A4:01:46:B8:E9:85:8A:29:E6:36:DC:C3:34:85:80:00:70:81:CC:BF
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019423D6F8CAF225078DF307BF7EAC9833D1
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/pAFGuOmFiinmNtzDNIWAAHCBzL8.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 2a09:9446::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f8:ca:f2:25:07:8d:f3:07:bf:7e:ac:98:33:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a40146b8e9858a29e636dcc3348580007081ccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3a:80:c9:8b:ba:e8:99:ad:f2:09:c2:22:5e:
4b:d3:50:6b:23:30:8a:5f:0a:44:20:4c:dc:e2:44:
58:5a:07:97:5b:6b:a5:ed:4f:c1:15:31:68:06:ce:
8d:d8:0c:11:59:1c:5c:b6:59:9e:0c:5e:da:84:cd:
08:72:55:c7:a5:e0:ce:26:03:40:42:15:6c:50:62:
c0:7e:1b:51:32:2d:16:c0:f7:e0:07:90:75:75:c4:
6a:d8:35:ad:eb:55:4b:ec:d0:5d:1d:8d:47:3d:5e:
0c:05:79:4a:e4:6f:75:aa:ac:39:94:a1:d9:e9:f7:
03:ae:bc:de:5d:ac:2d:83:01:26:c1:aa:e6:71:cb:
05:01:d8:ca:15:8d:30:ca:d3:bb:d7:33:db:1b:14:
b0:16:46:3b:18:d9:3b:3d:5b:c1:7e:c5:e3:b8:b0:
d5:5e:8d:a1:44:8b:91:50:e9:9b:af:dd:21:b9:3d:
ae:ed:9c:ef:cf:36:b9:0f:ca:95:9b:3e:c5:a4:b1:
1f:79:7a:de:20:a5:c8:e7:13:e4:2d:52:7c:81:79:
c5:38:9c:8e:d8:d4:86:46:07:20:4d:3a:76:55:fd:
56:3c:cd:69:f7:71:07:a6:41:c8:4f:80:00:1c:e4:
74:a3:4b:e9:7b:9e:a7:31:a7:b2:05:46:a2:8b:25:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:46:B8:E9:85:8A:29:E6:36:DC:C3:34:85:80:00:70:81:CC:BF
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/pAFGuOmFiinmNtzDNIWAAHCBzL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9446::/32
Signature Algorithm: sha256WithRSAEncryption
b2:fd:c3:61:50:18:cf:4c:23:68:0d:13:5e:bc:38:e9:36:3b:
83:c3:de:c2:9a:1a:4b:4a:f4:e2:3d:a2:d4:f3:62:fc:30:e8:
f3:e0:c1:68:12:fe:9b:33:f1:63:27:3b:66:ba:42:55:da:71:
45:2e:2e:a3:80:81:b9:4f:36:af:62:a6:28:aa:ab:ba:0f:0f:
c6:3c:80:e4:51:34:21:cd:a4:23:93:f3:b7:2e:8c:bb:24:1e:
72:1e:ca:7b:8b:bc:dc:a8:36:8a:e2:e3:18:51:e1:1f:cb:2e:
5d:d5:ba:76:8d:0f:e9:a7:72:1a:37:c4:bf:74:60:84:b9:50:
49:41:2e:f8:84:da:9d:5e:34:02:43:e8:55:28:00:85:96:aa:
83:80:96:dc:37:d0:75:6e:11:a6:1f:04:0a:59:9f:61:04:93:
6d:99:5e:4a:59:1f:b2:dc:26:75:02:60:fa:8c:7d:97:de:04:
0b:49:0f:1e:9d:94:e9:85:a7:05:5b:0f:e3:c7:5a:34:c0:b6:
eb:69:0b:d1:75:69:4e:2d:6c:b5:73:08:04:24:75:eb:76:8b:
b1:22:e9:3a:56:48:7b:a5:4a:cd:b2:fb:69:c2:43:a5:05:8a:
d2:98:76:82:49:7a:62:bd:27:00:12:d1:b6:9b:c8:79:59:55:
b2:7b:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:29 2025 by rpki-client