Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3T46SOv40dIKADWP4NQxWPt4RxQ.roa
File: 3T46SOv40dIKADWP4NQxWPt4RxQ.roa (raw, json)
Hash identifier: sX3aBeyUi03cLVi1r1tTPDGpLX9jDxPahCVwO0XEqTE=
Subject key identifier: DD:3E:3A:48:EB:F8:D1:D2:0A:00:35:8F:E0:D4:31:58:FB:78:47:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252215F0F90B4DDEF64E3D2D88FE5029
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3T46SOv40dIKADWP4NQxWPt4RxQ.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204235
IP address blocks: 2a0e:b107:1410::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:15:f0:f9:0b:4d:de:f6:4e:3d:2d:88:fe:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd3e3a48ebf8d1d20a00358fe0d43158fb784714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:69:7b:83:39:34:b4:aa:2a:8c:d3:85:e3:
95:7f:41:b5:e3:96:35:07:26:31:ce:34:39:44:4d:
24:35:0d:b1:4a:cc:11:58:4d:15:62:0a:bc:66:9c:
0f:0c:8f:95:52:1a:14:72:ec:4a:ca:74:71:02:30:
3f:31:07:e9:dc:50:bd:4f:8a:2d:21:cd:c1:36:51:
d2:12:39:77:85:4b:86:b2:45:f0:7f:70:9c:e0:cf:
2b:a0:35:44:19:01:61:77:2e:d3:9d:6a:9b:fd:14:
69:d9:99:a6:5e:99:10:61:cc:38:f0:38:89:c8:89:
4f:55:c8:9d:b9:f8:14:54:33:82:a2:52:1a:81:cb:
c9:04:09:77:92:3a:dd:3c:4c:09:e9:fa:1e:fd:5d:
02:c9:1b:2f:23:aa:c5:19:2a:24:50:0d:db:10:71:
d4:42:b6:67:f5:4a:83:dc:6e:53:02:2b:19:2e:6d:
28:08:b6:44:d7:ac:78:6b:e1:ee:c2:c5:31:7d:44:
8b:1d:89:ad:9c:31:db:7a:dd:0a:9e:49:ed:2a:46:
1d:91:04:4c:5a:53:d5:e8:ec:5b:04:65:6a:4a:85:
e6:24:16:b6:11:fb:32:0f:71:9a:29:94:60:97:5d:
43:66:1b:c4:bd:c9:01:b7:30:e6:54:5d:42:0d:5f:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3E:3A:48:EB:F8:D1:D2:0A:00:35:8F:E0:D4:31:58:FB:78:47:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3T46SOv40dIKADWP4NQxWPt4RxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1410::/44
Signature Algorithm: sha256WithRSAEncryption
43:94:aa:79:3f:43:00:89:e4:0a:38:5c:c5:e0:d5:86:12:f6:
06:57:8c:2c:a8:ed:dd:1c:0e:82:46:9f:63:ee:6a:3f:b4:0d:
ba:ae:91:c4:66:c7:89:98:33:eb:af:86:f9:fa:de:92:4f:26:
49:3f:6b:3a:02:c0:0d:c3:5d:bf:49:8d:b8:2a:e6:5b:ac:98:
5f:1d:d2:65:71:d7:4e:71:91:c2:91:f0:1d:0f:61:92:0a:dd:
42:91:53:03:00:a1:80:1b:0c:46:f7:29:fa:5f:8f:fa:fe:1d:
69:86:d4:f4:d6:90:9d:73:52:57:6b:0c:f5:60:47:a8:52:e8:
23:94:13:d6:1d:0c:3a:6c:2c:6c:61:9d:4d:39:f1:1b:f8:b5:
49:cd:ae:4f:26:1c:1b:67:28:dd:f9:18:d3:47:85:3d:ec:99:
6b:51:29:3a:6e:44:c8:4e:42:da:2c:d6:0c:14:bf:5b:3e:9e:
5c:f0:8a:db:9d:a2:62:b5:39:54:2e:4c:cc:cb:32:d9:91:42:
d3:8d:26:31:37:f0:da:44:92:95:29:c1:89:60:f5:f6:77:64:
bf:34:72:7f:f8:f7:81:53:09:aa:55:dd:dc:2a:7e:2f:d9:89:
82:27:c7:d4:d9:5f:69:06:ac:f8:26:ed:7a:4e:b6:8f:c1:4a:
70:56:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:41:02 2025 by rpki-client