Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/3KoZ08OudAS6KvuG2FZSnsO2BFI.roa
File: 3KoZ08OudAS6KvuG2FZSnsO2BFI.roa (raw, json)
Hash identifier: z6ErD5vxdSmYriXdS8fafTnvSaT8pzzMa8namzSoffg=
Subject key identifier: DC:AA:19:D3:C3:AE:74:04:BA:2A:FB:86:D8:56:52:9E:C3:B6:04:52
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825C706594FD938460E79AEACA1AB66
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/3KoZ08OudAS6KvuG2FZSnsO2BFI.roa
Signing time: Thu 02 Jan 2025 17:52:31 +0000
ROA not before: Thu 02 Jan 2025 17:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57631
IP address blocks: 80.79.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:c7:06:59:4f:d9:38:46:0e:79:ae:ac:a1:ab:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcaa19d3c3ae7404ba2afb86d856529ec3b60452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:e1:0f:2f:0d:d7:35:4c:13:d1:3e:bd:52:
a1:3a:dd:4f:72:c7:f7:b0:e6:a8:cc:37:d7:76:70:
62:5b:64:ae:a6:aa:6f:0d:54:f3:5b:72:0c:e2:f2:
81:28:0c:6f:7a:d1:3b:0f:3e:a9:88:34:c0:70:ee:
ae:b6:e8:c8:94:73:17:ad:aa:6c:21:37:d4:f0:a8:
89:48:ba:ac:96:9c:63:ff:63:72:7e:12:63:57:b1:
d9:28:44:bd:06:10:0d:22:aa:3d:4c:82:e6:48:a4:
5e:72:b7:08:b1:ed:5d:f5:34:fa:f5:bf:38:9e:35:
37:7c:3e:14:00:75:31:bb:9c:69:34:2a:02:15:b1:
8e:f9:c2:d9:4c:00:ed:9e:ad:3f:46:7c:af:97:00:
9c:41:a3:9b:e6:8b:f0:61:60:df:b9:9a:63:c4:8e:
9f:00:b1:dc:1a:5e:b4:ff:d3:f3:3c:f1:ef:4f:63:
f3:48:df:46:2c:29:36:5b:15:ef:a5:fa:96:4b:e7:
f2:0b:e7:25:fd:02:41:76:9e:c2:bd:c4:05:da:a4:
5d:22:46:23:08:f8:c2:84:65:aa:38:ff:73:6f:00:
40:bb:bf:fd:2d:63:3c:20:dc:a0:78:22:4e:f0:d3:
a9:56:c4:64:1f:08:e0:61:5d:6c:05:8d:be:ce:41:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AA:19:D3:C3:AE:74:04:BA:2A:FB:86:D8:56:52:9E:C3:B6:04:52
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/3KoZ08OudAS6KvuG2FZSnsO2BFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.254.0/23
Signature Algorithm: sha256WithRSAEncryption
83:c8:b1:ba:fa:33:ac:9c:74:4e:d2:a8:e9:92:59:e6:6f:f7:
76:48:56:18:02:68:b0:43:46:1c:85:d3:43:e4:c2:56:86:50:
59:eb:e3:c5:f7:3d:8a:9a:e1:3b:25:bd:0e:16:56:cd:90:d3:
e1:14:68:ef:6e:31:67:4b:ef:dc:96:41:2a:ec:e1:21:9f:5c:
25:2f:af:f6:92:db:57:f6:d0:ae:32:e3:70:cd:d6:d2:f1:2d:
d7:7f:96:68:ed:d0:ec:d6:2a:ab:10:ad:54:29:63:f2:52:d7:
f2:1b:89:86:e3:80:dc:92:c3:32:43:a1:03:39:7c:c2:8e:6b:
06:87:58:7a:f5:a2:22:c3:03:32:91:dd:7b:31:ac:ff:c1:be:
7d:ae:0a:46:aa:2d:d9:d4:e8:92:07:aa:98:56:dc:ff:ee:a1:
90:b1:36:c3:38:41:6e:03:28:94:a4:09:87:a3:4e:87:d7:c5:
16:8b:75:0b:7c:fa:fb:53:2d:4c:1d:30:3b:2e:ae:e5:6b:19:
18:b6:5c:30:6d:6c:f2:c5:eb:38:0c:5f:f7:2e:0d:a2:28:47:
22:a2:d7:46:57:dd:18:4b:3b:04:59:c7:da:a5:18:23:39:47:
af:ca:33:75:00:b4:f7:66:a5:9f:fd:b4:c8:1f:47:56:a6:56:
3a:2d:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:53:14 2025 by rpki-client