Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/48wCHW1eNK8DvsPh7RG4Hpdj_Xw.roa
File: 48wCHW1eNK8DvsPh7RG4Hpdj_Xw.roa (raw, json)
Hash identifier: jXJhrj4xj/xBs+K5BJ+xTzqh3BMzp/gIBjax1++f1OM=
Subject key identifier: E3:CC:02:1D:6D:5E:34:AF:03:BE:C3:E1:ED:11:B8:1E:97:63:FD:7C
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D989DD9901AF1B7A909F9FABDE2912
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/48wCHW1eNK8DvsPh7RG4Hpdj_Xw.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213073
IP address blocks: 2a03:5840:100::/48 maxlen: 48
2a03:5840:10a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:89:dd:99:01:af:1b:7a:90:9f:9f:ab:de:29:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3cc021d6d5e34af03bec3e1ed11b81e9763fd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:2f:6b:43:c3:14:30:96:27:cc:7e:f9:9b:
28:65:b9:e6:08:52:06:6e:e6:82:23:81:b6:8a:c7:
e9:4e:3f:42:31:a1:fb:88:fb:3b:ac:ba:4d:04:f3:
12:e3:6b:5b:a0:76:0d:b7:29:7d:4d:4d:91:b0:d3:
12:1f:15:37:e5:5b:a9:3c:b3:2d:c8:77:d9:90:90:
08:2c:c1:5a:be:f7:7b:b6:9e:85:c5:1c:7c:43:53:
4b:14:e1:b5:9f:c2:a2:75:61:ee:ed:54:6e:6b:f3:
b1:6e:d8:53:96:14:11:9e:26:7d:77:05:6e:cf:f7:
7a:97:5e:88:89:8e:07:49:af:ae:9a:43:85:48:80:
90:bf:cc:7c:b3:f1:38:81:85:fb:e6:5f:50:ba:26:
fa:ee:da:a9:d8:4b:e9:7c:34:cc:3c:7c:1b:86:ba:
d0:c4:62:da:e9:bc:bc:ca:f6:e8:c3:5c:c3:87:34:
6f:e0:1b:a7:44:96:2a:19:e8:7a:b2:91:a8:8a:3e:
ed:a5:77:52:35:1c:2d:84:1b:a2:80:fe:88:e7:29:
0e:7a:18:f4:d0:5c:f8:57:92:70:6d:12:fe:83:71:
0e:81:66:5e:a9:74:d8:d4:86:c2:fd:15:8f:83:f8:
3e:04:71:51:2e:8a:85:4c:cf:d0:17:02:6a:38:a5:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:02:1D:6D:5E:34:AF:03:BE:C3:E1:ED:11:B8:1E:97:63:FD:7C
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/48wCHW1eNK8DvsPh7RG4Hpdj_Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:100::/48
2a03:5840:10a::/48
Signature Algorithm: sha256WithRSAEncryption
1f:04:4c:07:bd:5d:62:47:ad:5e:63:00:30:7e:bd:ff:62:77:
6e:46:e9:e7:a5:a3:dc:db:e5:95:74:91:97:25:24:ca:a7:1c:
9e:9b:99:5b:10:1c:66:52:94:25:2c:6e:fb:51:7f:6c:2d:ee:
aa:65:9a:34:cb:26:bc:4d:36:63:a3:f7:fc:85:46:65:b5:a6:
6f:df:b5:06:54:99:2f:85:01:03:6b:8f:41:6e:ee:e2:88:ee:
87:b2:0b:e1:87:97:5d:08:13:47:ce:2f:39:94:18:ea:21:92:
43:0e:19:0c:c4:b9:6f:10:4d:04:8c:8a:8e:89:4b:77:26:50:
da:0b:31:21:5a:50:4f:72:52:9c:82:e0:4f:43:62:01:83:4d:
6b:b9:0b:11:9e:a3:d3:15:69:19:43:58:a3:5e:90:32:5d:b5:
5d:25:ae:df:e8:47:66:e7:1b:9a:93:11:13:03:f5:dc:3c:75:
1a:e6:5d:39:12:46:6a:a3:51:63:4d:f2:c7:ad:3e:ae:66:bc:
5b:81:96:31:e6:7a:aa:c0:12:8e:7c:4c:b1:a3:5d:d6:47:64:
57:61:b2:8d:97:86:8b:cf:98:76:4e:ef:ed:04:b2:09:8f:10:
d4:05:b7:c6:09:54:8c:e2:72:fa:3c:7a:0e:e2:01:b9:99:63:
79:36:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:36:46 2025 by rpki-client