Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa
File: 6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa (raw, json)
Hash identifier: uoWydXs46C7pAA7LsT8e6YRW42KQemKKMgQf6yVmG/s=
Subject key identifier: EB:3D:EE:E6:38:5B:11:B2:9A:D1:38:44:87:70:05:AF:2A:A9:AB:24
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: 0194228E1CEA3E96AD53E4256AA06E661938
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31064
IP address blocks: 195.16.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1c:ea:3e:96:ad:53:e4:25:6a:a0:6e:66:19:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb3deee6385b11b29ad13844877005af2aa9ab24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:68:c7:b3:fd:3c:84:10:67:aa:04:da:65:
f9:01:73:64:10:3b:7a:f0:da:83:bf:e8:f2:85:f9:
9c:ca:5b:06:6b:68:9c:58:55:c0:cb:d0:41:68:5b:
99:6b:e4:2c:13:86:6b:d7:de:9b:f5:63:d7:9f:03:
5d:ca:cd:55:cf:a9:b0:96:99:00:95:c2:01:de:0a:
6a:fd:fa:ed:7b:e9:d9:65:c6:35:a8:25:e3:df:45:
c2:b7:8b:f7:23:05:b0:69:7b:c2:7e:7d:07:1a:87:
09:ec:00:9f:f7:21:38:9a:66:ad:14:75:7c:cb:fe:
fc:3f:03:88:30:e0:f4:cb:56:d3:b2:a0:84:f1:2a:
89:86:41:c8:be:62:89:b6:e8:a9:57:a8:26:3b:9d:
65:64:31:58:97:e0:3b:ce:29:87:53:d1:4c:ed:2d:
02:e0:bb:a5:bb:46:e4:49:84:eb:eb:c4:e4:13:61:
0a:84:ce:c5:e2:82:b8:56:0c:e2:3f:32:64:f3:d4:
6c:7c:d9:eb:60:be:68:3f:ff:22:a1:68:05:93:2d:
91:42:d2:c4:24:d5:30:f9:18:73:46:c1:bc:2c:c5:
5b:66:05:8e:1b:77:18:71:6d:e2:c2:55:3a:fc:33:
7c:72:70:f9:b1:61:80:ed:67:c0:01:dc:69:ed:f1:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3D:EE:E6:38:5B:11:B2:9A:D1:38:44:87:70:05:AF:2A:A9:AB:24
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.84.0/22
Signature Algorithm: sha256WithRSAEncryption
df:70:77:e6:17:52:10:a9:2d:3b:79:3e:46:e8:94:7d:8f:0f:
8a:db:ec:c8:f8:5c:d3:f4:27:42:52:58:09:97:5f:bd:c9:ed:
05:e3:29:15:ba:4a:82:69:5a:8c:70:7d:8e:14:e9:11:03:e4:
d9:f2:3c:e5:10:c7:aa:83:7f:14:0e:a1:55:ff:d5:30:fc:e0:
ba:99:8e:15:d9:f4:01:da:73:87:46:3d:18:58:89:f8:98:e5:
18:d7:db:55:5b:99:65:1b:72:84:4b:4d:4c:12:a4:d6:59:dc:
17:d6:6c:b9:1d:14:51:03:6b:08:56:16:72:85:24:4c:92:27:
d7:09:75:b6:dc:25:67:da:0b:30:f9:18:54:d0:47:30:df:f0:
6f:20:a7:b2:63:3b:49:f4:cf:aa:c9:56:22:ab:07:31:58:d3:
6f:da:31:4d:6c:2e:86:08:46:e0:97:fa:a1:46:bb:75:7d:45:
0d:9a:ba:d4:19:85:91:8e:28:00:73:63:d6:3a:1e:12:1f:c8:
f1:eb:cd:49:6b:06:98:ff:a5:17:73:b3:6f:0a:2e:fe:c8:09:
be:66:a4:e7:ab:57:92:a6:4b:69:8f:b6:b6:59:2e:05:09:06:
36:57:8b:03:39:ee:27:45:1f:04:61:3d:68:6b:ed:d9:7b:a2:
1b:53:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:11:26 2025 by rpki-client