Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Kj3D8YAPi4rA9XUWdSOamKbFV18.roa
File: Kj3D8YAPi4rA9XUWdSOamKbFV18.roa (raw, json)
Hash identifier: BVc6EwErDffWh7dsaPUmwaCXoLvzxASeOV2hlt2Ehnc=
Subject key identifier: 2A:3D:C3:F1:80:0F:8B:8A:C0:F5:75:16:75:23:9A:98:A6:C5:57:5F
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5DE30CD6E0EBFFF6005A47624FF7
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Kj3D8YAPi4rA9XUWdSOamKbFV18.roa
Signing time: Wed 01 Jan 2025 19:49:20 +0000
ROA not before: Wed 01 Jan 2025 19:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3333
IP address blocks: 2001:610:240::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5d:e3:0c:d6:e0:eb:ff:f6:00:5a:47:62:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a3dc3f1800f8b8ac0f5751675239a98a6c5575f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:a0:0b:9c:45:08:23:35:28:37:f3:23:b3:
91:84:5d:7f:f4:26:4e:92:ac:17:f2:9a:0a:3f:bb:
e9:5b:3f:a9:81:54:f1:6e:01:15:08:f8:fc:22:fa:
6f:56:6e:c8:82:10:42:2c:57:a0:f5:4a:d6:fe:b5:
ca:93:76:33:95:4c:4d:da:1b:43:6e:bb:e6:b4:aa:
6e:28:ea:ca:7a:1b:e6:7c:75:e2:30:73:14:fa:a5:
28:5c:f6:d0:97:87:c5:b3:b7:f7:e8:e2:22:75:fc:
86:49:2b:2e:6c:ed:dc:1f:9b:15:43:b0:2b:93:40:
75:f3:d5:6e:4f:44:9d:fe:79:be:b0:56:ec:55:f6:
8d:fe:80:7e:64:8c:ca:95:c3:03:0c:3e:9e:8c:89:
34:ff:18:c1:c5:10:5d:70:fd:cd:2e:6f:27:2f:52:
df:be:c1:7e:2b:13:73:a8:c1:4c:49:e1:6c:32:cb:
81:9f:c0:bc:c3:a6:13:f0:26:6e:71:ca:91:91:0e:
80:d6:71:2c:e7:25:4d:2d:19:64:dc:3b:46:ff:a1:
f4:ee:ba:ce:03:7b:82:d2:72:7f:ae:00:ad:e4:9f:
3d:ab:29:59:ec:36:f9:65:32:46:3a:e0:52:88:82:
e8:96:b4:a9:66:2e:67:1e:63:51:b9:c1:b7:98:0c:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:C3:F1:80:0F:8B:8A:C0:F5:75:16:75:23:9A:98:A6:C5:57:5F
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Kj3D8YAPi4rA9XUWdSOamKbFV18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:610:240::/42
Signature Algorithm: sha256WithRSAEncryption
9e:71:b2:cd:0c:94:8e:88:2a:75:be:f3:65:57:89:03:0c:6a:
7b:b2:6d:18:65:9a:aa:97:f5:65:a6:97:80:f0:bb:98:ee:0e:
e5:6b:a9:e9:e1:9f:46:c3:38:85:ec:d0:99:68:52:ff:7e:47:
77:d0:01:df:dc:25:3e:07:ae:94:e6:0b:52:01:5e:98:33:1d:
35:da:35:a7:e9:e9:ff:ea:3f:59:21:76:aa:18:c0:0c:30:3e:
5a:1c:ad:12:98:57:60:eb:32:5f:90:76:8a:55:bf:8f:2a:8d:
bd:36:de:47:51:f0:30:f1:7d:42:23:f9:16:45:d7:1a:64:11:
f5:99:f4:98:e9:72:5b:cd:5d:a3:38:4c:00:b9:b7:ca:00:d2:
c2:4f:20:55:99:32:2b:21:34:00:d1:92:f9:19:9c:6d:20:d4:
bc:5d:5f:71:00:8a:48:3e:32:4b:c4:b7:aa:e3:2d:4d:f5:c8:
aa:01:43:43:6a:54:c5:3b:91:15:29:9b:a8:71:e8:2e:b4:62:
29:15:f2:47:31:c8:ea:ea:46:73:33:48:b4:95:2c:82:68:e2:
bb:1a:fe:6e:bf:59:26:22:d2:b1:ad:8e:af:c4:fd:b2:25:0c:
64:8d:e0:6d:71:e0:96:20:ec:84:82:8c:b2:c6:9c:09:af:48:
06:69:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:35:56 2025 by rpki-client