Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/PzRiqf6-YVqlskQDhqkV86tLS2k.roa
File: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (raw, json)
Hash identifier: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=
Subject key identifier: 3F:34:62:A9:FE:BE:61:5A:A5:B2:44:03:86:A9:15:F3:AB:4B:4B:69
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 01942444B39BCDDD909342A057875DD91100
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/PzRiqf6-YVqlskQDhqkV86tLS2k.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16262
IP address blocks: 2a03:e140:3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b3:9b:cd:dd:90:93:42:a0:57:87:5d:d9:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f3462a9febe615aa5b2440386a915f3ab4b4b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:07:ef:1a:23:8a:a4:13:e0:cb:da:54:22:
75:af:fd:48:d2:14:f6:d3:05:80:e0:d8:70:cd:77:
43:f4:6a:c2:e6:19:0c:36:d9:a6:a7:a8:26:2d:aa:
03:e7:bd:11:15:77:89:d2:e6:4f:a6:e9:d1:9f:a9:
d3:b7:b3:a3:72:a2:2d:c0:1a:de:20:d2:f6:e1:cb:
10:89:8e:82:3f:3e:57:e4:09:6d:a0:ba:79:38:c0:
3a:4b:4b:49:83:e9:37:da:ce:42:9d:4b:e5:4e:cf:
53:0b:da:f1:a8:9a:d4:4a:4e:5e:cd:9a:d1:23:0b:
e3:ad:05:2e:8b:77:91:ad:43:0b:19:dc:36:0e:ef:
d1:1e:9a:af:74:06:88:d0:1c:bc:76:df:88:40:51:
0c:e2:2a:39:79:82:09:53:e5:a1:55:26:ed:4b:bd:
2a:07:48:e5:b6:f8:f5:15:24:5b:8d:c9:56:e2:11:
4b:0b:90:ce:44:e0:76:87:c7:d8:f4:b3:d7:a2:69:
b0:6c:73:9c:a2:25:0a:41:b9:0a:59:57:8e:e8:54:
87:ae:9a:2b:79:aa:84:d5:6c:da:5b:26:d5:25:36:
5a:44:d6:56:45:7f:cb:07:c4:94:67:31:cf:53:7d:
c3:d4:a8:f9:7f:5b:25:22:29:27:61:fd:83:72:78:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:62:A9:FE:BE:61:5A:A5:B2:44:03:86:A9:15:F3:AB:4B:4B:69
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/PzRiqf6-YVqlskQDhqkV86tLS2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e140:3a::/48
Signature Algorithm: sha256WithRSAEncryption
6e:80:57:c9:46:ae:4a:d6:ae:26:9c:01:df:99:d3:57:fe:60:
38:5c:91:18:e3:be:65:1f:35:1d:54:f3:57:4c:b5:7c:41:59:
ed:75:dc:8f:d5:d0:50:f3:54:35:d1:61:f5:a8:02:2b:9e:63:
a6:88:5e:1c:79:41:c9:8f:35:ea:ec:e9:49:85:1e:cb:d8:ea:
50:c7:1d:c0:a1:49:92:b3:e9:d1:1e:f9:1a:10:b8:96:82:55:
f7:22:d5:29:ce:50:e8:49:47:b5:62:3b:3f:39:3c:36:ce:6c:
b0:66:f8:80:1d:1b:1e:3a:99:a1:22:2b:41:13:25:10:03:98:
22:cb:24:d9:e1:34:75:31:7a:4f:20:15:51:83:19:d5:ff:ee:
1f:90:dc:e4:fa:4a:a4:3b:c5:1a:70:fb:98:f4:17:57:2a:98:
12:9e:29:6c:18:0b:ba:fa:05:e9:9a:61:df:84:da:20:7e:77:
ae:14:bc:b8:bc:52:85:c8:5a:35:eb:a2:f1:f2:18:c7:38:34:
25:3c:1a:01:13:48:bd:66:41:fc:53:7e:42:2d:4b:52:a1:13:
29:e2:ef:8e:b9:56:13:a6:87:ff:6a:3f:8c:20:c3:9e:c1:92:
ec:44:74:5f:d3:89:e8:ad:27:33:7a:34:db:ad:6c:5d:04:1f:
b1:7f:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:58:37 2025 by rpki-client