Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/3fenuBwvB7wV3uASD-r_76wX2Qk.roa
File: 3fenuBwvB7wV3uASD-r_76wX2Qk.roa (raw, json)
Hash identifier: a5u8qqHNJ/g2qfpTOvTXK85cODmIHay31MoapuJ0tsI=
Subject key identifier: DD:F7:A7:B8:1C:2F:07:BC:15:DE:E0:12:0F:EA:FF:EF:AC:17:D9:09
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0194228DCDCB63E3A9D228948C3BAB0CDB48
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/3fenuBwvB7wV3uASD-r_76wX2Qk.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2003:8:4400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cd:cb:63:e3:a9:d2:28:94:8c:3b:ab:0c:db:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddf7a7b81c2f07bc15dee0120feaffefac17d909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:80:8d:86:f2:9e:01:f7:92:36:a7:12:d1:
bf:3c:fd:6d:ce:a2:06:96:3f:1b:2d:0f:e5:ff:7f:
13:31:22:23:f3:31:b0:2f:17:52:8a:03:4c:2a:15:
15:2f:f0:42:3b:4f:a7:64:88:38:d9:77:21:c7:5c:
45:f5:fe:20:7e:cb:e9:b4:35:69:40:d8:09:38:25:
53:fb:1b:b9:ed:2d:6e:e0:cd:c0:b9:9a:75:80:ea:
40:c0:af:1d:2f:62:ab:f4:41:2f:d1:f0:3a:f7:26:
98:39:58:74:b8:3e:38:ef:fd:29:c6:68:39:a9:2a:
80:d2:77:13:4e:cb:9d:87:3d:a0:e0:5b:98:64:e8:
bd:e9:fb:8c:23:4e:72:b5:4a:73:1e:1a:04:95:da:
f8:58:c2:2d:6b:50:e6:64:b8:95:2a:8d:dd:b8:d0:
5f:22:da:a1:50:57:a2:aa:f5:5c:a2:25:79:a2:4d:
c8:c2:6c:38:90:d0:3d:c0:65:45:ec:48:20:3a:c5:
7f:db:73:99:ab:57:ac:fd:f4:a2:9f:07:57:d2:26:
9e:3f:12:bd:2b:16:e5:a6:cc:72:29:8a:e3:5c:c5:
cc:59:d5:18:79:0f:2a:a4:36:ff:49:4f:4b:5c:01:
1f:d5:ab:ca:58:1c:f7:78:5b:f0:35:b2:01:23:82:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:A7:B8:1C:2F:07:BC:15:DE:E0:12:0F:EA:FF:EF:AC:17:D9:09
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/3fenuBwvB7wV3uASD-r_76wX2Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2003:8:4400::/48
Signature Algorithm: sha256WithRSAEncryption
2e:fd:57:d3:47:db:3d:2d:12:30:90:7d:63:3d:4d:c9:91:91:
c3:79:3c:9e:5c:18:5f:f8:f1:05:2f:59:d8:f8:1a:7c:55:a0:
6c:51:95:fb:0e:59:8f:3a:fc:86:3f:34:60:18:fc:92:43:c2:
3f:ab:49:75:3b:4f:79:f6:78:b6:88:00:65:0e:88:db:ab:c6:
d8:33:c8:26:21:b9:bf:99:1f:c6:e2:35:b5:ba:83:d9:e8:d9:
17:e3:7a:4a:c8:2e:41:25:b8:94:30:da:2a:33:17:03:25:68:
ff:f0:b6:c6:f4:4e:8e:ab:ce:ec:e5:2e:3c:fe:3f:45:ad:a4:
fe:0d:3a:6c:d4:8d:b8:60:2c:5a:a6:a8:00:16:05:5f:33:b4:
83:45:8e:c2:9c:45:52:e6:18:63:ad:ee:2d:fd:dd:1d:f6:c4:
04:b3:77:33:ae:3c:09:be:82:57:7a:fc:2c:07:ad:e7:09:d5:
6e:4b:91:7f:7c:10:8a:8d:69:57:23:cf:9c:f9:e9:66:e1:8d:
a8:c0:74:fa:c2:36:14:d1:9a:08:fb:2d:19:88:0a:a3:7b:e7:
d6:26:f2:c9:a0:60:27:55:f2:9c:56:15:6a:3e:a1:d0:8b:1b:
7d:81:79:d4:b6:97:36:6a:96:d7:b5:d5:35:7b:78:fa:f5:b1:
23:40:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:44 2025 by rpki-client