Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3PsWzTNRKA3KipfHg4xFzzNyycY.roa
File: 3PsWzTNRKA3KipfHg4xFzzNyycY.roa (raw, json)
Hash identifier: sNlVxKDDs69eat8agwSCYbmBI7SWHMMD+JsI0tGcKHM=
Subject key identifier: DC:FB:16:CD:33:51:28:0D:CA:8A:97:C7:83:8C:45:CF:33:72:C9:C6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B21D94C274ECAC8607272A90440AB0
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3PsWzTNRKA3KipfHg4xFzzNyycY.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51101
IP address blocks: 2a00:4120:8000:c::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1d:94:c2:74:ec:ac:86:07:27:2a:90:44:0a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcfb16cd3351280dca8a97c7838c45cf3372c9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:4e:51:5f:6c:ff:a4:cf:cc:e7:78:cd:8c:
aa:48:27:38:85:5d:a7:bf:90:8a:13:19:89:a6:f9:
4d:ba:40:e2:a6:4e:e7:27:7b:57:ec:77:da:dc:95:
8f:c1:0d:9e:5f:6d:8b:c1:cc:5c:61:ed:ce:54:7b:
22:bb:88:6e:27:3c:91:cb:bc:76:57:f2:c2:dc:8f:
05:9b:39:59:4b:d7:84:4f:ab:a8:1b:9b:9a:6d:f8:
79:c4:43:48:5b:56:ec:8e:d7:d7:31:d8:25:be:cf:
af:71:84:14:15:64:36:97:73:c3:72:ba:56:0a:00:
91:de:e9:73:ff:be:57:af:cb:2c:49:e1:a7:ca:d1:
33:43:5d:12:a7:68:cc:1b:f8:f7:f2:e2:a4:df:22:
29:87:b9:2f:34:bd:70:ec:50:c1:15:1e:64:e2:33:
a5:9d:fa:79:59:d0:79:a8:d5:7c:8b:a7:5a:1b:15:
7f:e1:80:06:e9:dd:61:cb:2b:1e:f9:ed:e0:2a:66:
fe:79:9e:cd:8a:98:1d:34:7e:fa:51:34:3c:07:a6:
56:af:6b:2d:62:d3:07:ed:33:8a:f5:46:6b:c2:80:
53:94:68:3e:dd:66:2b:d4:ba:5b:a0:ec:1f:97:1d:
13:b1:c5:bc:3a:9b:72:33:47:18:06:0f:60:74:34:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:16:CD:33:51:28:0D:CA:8A:97:C7:83:8C:45:CF:33:72:C9:C6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3PsWzTNRKA3KipfHg4xFzzNyycY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4120:8000:c::/64
Signature Algorithm: sha256WithRSAEncryption
4e:5b:22:8a:76:84:40:66:eb:9d:4d:2e:2e:4b:49:67:cc:d4:
82:e6:48:b8:c5:15:d2:af:9d:16:c7:25:d6:24:48:63:13:16:
5e:e5:81:66:ef:59:ce:af:a2:2f:a1:ab:2e:23:48:16:23:e9:
80:59:cb:6e:76:35:df:e9:88:db:73:f4:9e:8c:73:2a:08:4f:
bf:8d:ed:43:c3:f2:17:8b:fe:63:ac:fc:3d:7b:24:56:7b:6d:
91:48:d2:ee:13:26:81:8c:75:f7:62:d0:00:73:6e:18:13:27:
91:6b:d6:90:4d:4c:cd:4c:39:22:a9:3c:3a:4e:cf:d1:c9:50:
ea:4e:6d:0e:7c:40:d0:21:53:a8:3f:e3:6b:a5:b5:f2:5e:0f:
98:3c:ff:50:fd:a3:a5:55:b6:c1:ef:5c:83:1f:c4:12:10:76:
9d:a1:e7:88:25:6c:53:68:2b:8c:a9:22:ff:6d:81:ce:42:6b:
55:49:a0:6a:a5:1f:93:28:96:44:97:ca:c7:55:1a:82:6c:c5:
d0:4a:c3:8b:bf:af:9b:23:4a:f6:af:5e:a1:39:4f:aa:c0:1d:
67:8f:dd:bd:65:72:f9:87:9e:a1:2b:82:49:8e:d8:1d:82:f0:
49:98:1b:8c:ac:4b:98:92:f0:bf:e8:db:96:26:ab:ca:28:d4:
e9:f9:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:17 2025 by rpki-client