Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/3k6upSOdWy9zCNJpe2jRV6jVFps.roa
File: 3k6upSOdWy9zCNJpe2jRV6jVFps.roa (raw, json)
Hash identifier: KymeToQI2DhxJPw828I+qq4ysUMrfZXU0uXAbAf0KTU=
Subject key identifier: DE:4E:AE:A5:23:9D:5B:2F:73:08:D2:69:7B:68:D1:57:A8:D5:16:9B
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C870BE28FD15F0900C4BC7B68E45
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/3k6upSOdWy9zCNJpe2jRV6jVFps.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211139
IP address blocks: 2a05:b0c6:6000::/48 maxlen: 48
2a05:b0c6:6006::/48 maxlen: 48
2a05:b0c6:6007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 19:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c8:70:be:28:fd:15:f0:90:0c:4b:c7:b6:8e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de4eaea5239d5b2f7308d2697b68d157a8d5169b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:c6:58:87:f6:56:89:bc:ad:19:25:0f:f0:
1c:76:ef:2e:59:33:1e:da:72:e0:27:43:bd:14:3d:
5d:01:bf:18:fc:49:9e:09:71:a6:27:b0:b2:28:03:
d6:2b:2c:3a:47:a1:9d:33:cd:47:6d:25:33:3c:9e:
b3:48:1a:dd:8b:a9:7f:db:e1:45:2f:0b:f8:71:e9:
27:62:ef:70:bd:60:70:d7:d2:8c:dd:b9:6b:c0:fd:
62:6d:1a:2e:4c:be:f1:f3:bc:64:d8:14:2d:7f:0f:
c6:ef:23:da:9f:aa:4f:1f:14:28:8e:72:3a:e5:fb:
97:65:14:ae:1a:19:fe:8d:47:fc:a6:5c:ab:91:36:
09:b9:c4:0f:dd:1b:8c:2b:95:e8:98:3b:f0:3a:bf:
94:db:b5:3e:72:36:24:2f:58:66:14:4b:f4:e4:22:
7b:ae:77:29:c0:b4:52:64:e6:16:e5:6e:a0:9d:9a:
09:4a:0c:c8:3e:4f:83:a5:8a:a6:81:9c:8e:4f:74:
84:94:4a:dd:0f:98:7b:61:01:30:a7:49:80:94:7e:
08:91:63:1f:c6:b5:a7:c2:b8:2a:50:e3:73:c4:80:
4f:e8:c4:05:44:91:96:5c:e8:0b:65:ed:33:61:a1:
8b:de:26:b5:f9:b5:c7:46:e2:f8:68:77:cd:a0:4b:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4E:AE:A5:23:9D:5B:2F:73:08:D2:69:7B:68:D1:57:A8:D5:16:9B
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/3k6upSOdWy9zCNJpe2jRV6jVFps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:6000::/48
2a05:b0c6:6006::/47
Signature Algorithm: sha256WithRSAEncryption
25:c5:70:5e:24:df:08:54:f3:56:b6:34:6a:2c:12:67:df:d6:
81:f9:d2:5f:bc:63:32:41:34:d0:cd:9f:92:59:3d:dc:b7:67:
a7:5c:0f:a6:08:fc:69:88:96:c6:af:55:06:db:e3:46:dd:6d:
c9:a1:9e:87:c7:66:f0:40:be:4c:88:d2:bb:44:2b:cd:ea:a3:
fb:4e:a8:ea:87:03:50:73:3d:ee:ef:3b:c5:66:ba:08:ed:06:
15:9c:34:21:a6:20:15:a7:42:ea:a0:dd:78:dd:4c:27:de:87:
26:12:85:8e:97:5d:84:04:b5:c7:f4:4f:64:52:1d:b4:f1:93:
ad:4d:2e:2c:96:01:37:19:6f:ea:64:db:18:11:d9:a7:81:f3:
05:c9:06:c9:aa:3b:5e:51:1b:d5:e2:dc:90:00:b4:50:1b:19:
1d:b1:cf:4e:80:a9:3d:89:3d:27:5a:22:de:44:44:38:30:f6:
d1:90:8b:fb:b3:f2:3b:30:34:a1:95:fd:66:bf:21:d0:82:d8:
bf:cd:eb:b7:f4:c1:18:e6:63:0d:a3:55:85:39:82:3b:12:c7:
28:ab:a9:47:92:84:f2:67:fa:08:42:2c:0e:bd:fc:90:a9:36:
44:8b:a5:e3:7e:c4:61:be:b4:62:92:0b:65:7f:39:46:57:37:
16:01:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 04:26:03 2025 by rpki-client