Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3jhgcjGXAqcfZ_vef74oP0iD_8w.roa
File: 3jhgcjGXAqcfZ_vef74oP0iD_8w.roa (raw, json)
Hash identifier: VAWoNzTz0ZZXodJ45drsh55JvpPnsAoHDDM0971zQyU=
Subject key identifier: DE:38:60:72:31:97:02:A7:1F:67:FB:DE:7F:BE:28:3F:48:83:FF:CC
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D988F251673D46C113168AB6D7DF1A
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3jhgcjGXAqcfZ_vef74oP0iD_8w.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210344
IP address blocks: 2a03:5840:160::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:88:f2:51:67:3d:46:c1:13:16:8a:b6:d7:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de386072319702a71f67fbde7fbe283f4883ffcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:17:bc:a9:8e:c6:7e:42:71:2e:a5:9a:7c:
79:02:3e:a3:3a:da:d4:4e:3a:3f:17:08:b2:86:8c:
a6:10:7a:f3:3d:3d:ed:6a:eb:94:97:b3:d9:5b:dd:
e9:b3:05:63:9f:16:96:84:9e:47:d2:cd:7b:72:f5:
cb:03:f4:70:1a:82:17:a9:6f:56:b5:84:92:6d:94:
26:c3:da:60:45:e7:c9:1a:c0:36:60:89:22:53:e8:
70:9f:d5:7a:59:71:64:89:03:30:65:57:a5:f0:06:
f6:bf:72:0b:ff:c2:f3:dc:14:2c:6b:65:26:14:3f:
89:82:0f:f7:9a:48:4e:8f:9c:6d:cb:4e:d9:9c:fe:
91:f2:05:3e:08:63:f8:dd:d0:ed:4f:f2:4d:24:75:
28:52:6a:26:96:e8:57:52:25:e2:5d:80:2f:89:1a:
4e:95:78:0e:a2:04:fe:30:bf:b3:95:bd:9a:21:3f:
75:ea:aa:03:65:31:92:d3:02:aa:48:93:95:de:dc:
89:6e:9c:88:18:80:c2:bb:52:4f:21:6b:46:bd:4a:
f9:82:b0:c1:41:be:77:51:3a:63:49:88:49:8d:4e:
c3:55:76:1f:85:bb:da:03:34:89:6d:e8:8e:af:68:
e3:2b:5e:ab:91:25:c5:a6:ec:57:b5:98:1c:ed:99:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:60:72:31:97:02:A7:1F:67:FB:DE:7F:BE:28:3F:48:83:FF:CC
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3jhgcjGXAqcfZ_vef74oP0iD_8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:160::/44
Signature Algorithm: sha256WithRSAEncryption
ab:94:5a:f9:53:8e:64:e0:72:52:1d:be:dd:b7:ad:f1:f7:b0:
73:64:3a:be:18:fc:5e:3a:7d:45:58:66:5b:c7:aa:34:fa:c5:
2f:23:09:ff:a5:df:5d:cb:45:b0:dc:ce:20:83:43:de:b9:ab:
63:c2:09:ce:00:4c:22:fb:fe:5f:10:0f:9e:ab:8e:7c:fd:13:
38:2c:0b:8f:c2:fd:7a:8b:1e:0f:0b:56:76:9e:78:09:54:5f:
85:a6:5a:2f:13:bc:ea:97:94:8b:a1:48:65:84:56:75:ea:50:
5f:38:00:da:9d:e4:cb:71:f8:cd:01:45:60:b2:3d:70:d0:81:
f9:48:0e:3b:da:3f:3e:a3:e8:9d:8e:e2:06:e8:a9:8f:4d:8a:
c5:f5:b9:5c:4f:89:80:e4:a7:0b:1b:9a:f1:5a:fc:fe:de:a8:
83:1a:a7:66:8a:17:7e:cb:00:d4:15:a1:d4:5b:0b:e9:20:32:
17:3d:23:15:84:12:5e:0b:b9:5a:4d:81:33:94:ed:05:8c:80:
e1:7e:03:bb:3b:99:b7:6b:06:86:44:75:82:e0:fb:30:3c:d1:
a1:c2:ec:09:48:14:ab:ef:28:97:17:dd:79:50:42:fc:0e:c6:
9a:95:87:c9:64:c5:1e:97:1c:c6:d3:5a:f0:7b:49:74:ce:72:
2b:9e:47:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2YjyUWc9RsETFoq2198aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjUwMTAyMTE0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTM4NjA3MjMxOTcwMmE3MWY2N2ZiZGU3ZmJlMjgzZjQ4ODNmZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqcXvKmOxn5CcS6lmnx5Aj6jOtrU
Tjo/FwiyhoymEHrzPT3tauuUl7PZW93pswVjnxaWhJ5H0s17cvXLA/RwGoIXqW9W
tYSSbZQmw9pgRefJGsA2YIkiU+hwn9V6WXFkiQMwZVel8Ab2v3IL/8Lz3BQsa2Um
FD+Jgg/3mkhOj5xty07ZnP6R8gU+CGP43dDtT/JNJHUoUmomluhXUiXiXYAviRpO
lXgOogT+ML+zlb2aIT916qoDZTGS0wKqSJOV3tyJbpyIGIDCu1JPIWtGvUr5grDB
Qb53UTpjSYhJjU7DVXYfhbvaAzSJbeiOr2jjK16rkSXFpuxXtZgc7ZkL+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN44YHIxlwKnH2f73n++KD9Ig//MMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvM2poZ2NqR1hBcWNmWl92ZWY3NG9QMGlEXzh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAFg
MA0GCSqGSIb3DQEBCwUAA4IBAQCrlFr5U45k4HJSHb7dt63x97BzZDq+GPxeOn1F
WGZbx6o0+sUvIwn/pd9dy0Ww3M4gg0PeuatjwgnOAEwi+/5fEA+eq458/RM4LAuP
wv16ix4PC1Z2nngJVF+FplovE7zql5SLoUhlhFZ16lBfOADaneTLcfjNAUVgsj1w
0IH5SA472j8+o+idjuIG6KmPTYrF9blcT4mA5KcLG5rxWvz+3qiDGqdmihd+ywDU
FaHUWwvpIDIXPSMVhBJeC7laTYEzlO0FjIDhfgO7O5m3awaGRHWC4PswPNGhwuwJ
SBSr7yiXF915UEL8DsaalYfJZMUelxzG01rwe0l0znIrnkc1
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:38:51 2025 by rpki-client