Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Dw3X8fWhKPYb3Mn-3k0h1r_9KbU.roa
File: Dw3X8fWhKPYb3Mn-3k0h1r_9KbU.roa (raw, json)
Hash identifier: TMxwGgTVPG6mIC+cdCWlxe1kZRGY132KC9x3rO2T5lU=
Subject key identifier: 0F:0D:D7:F1:F5:A1:28:F6:1B:DC:C9:FE:DE:4D:21:D6:BF:FD:29:B5
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 0194258ED91FDC761F12EF8213F9E78CEA81
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Dw3X8fWhKPYb3Mn-3k0h1r_9KbU.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207359
IP address blocks: 2a12:7a40:990e::/48 maxlen: 48
2a12:7a40:991e::/48 maxlen: 48
2a12:7a40:992e::/48 maxlen: 48
2a12:7a40:993e::/48 maxlen: 48
2a12:7a40:994e::/48 maxlen: 48
2a12:7a40:995e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d9:1f:dc:76:1f:12:ef:82:13:f9:e7:8c:ea:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f0dd7f1f5a128f61bdcc9fede4d21d6bffd29b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:b0:55:88:d0:8c:e8:be:20:f2:ed:61:7f:
e1:8c:df:dd:90:c5:1e:81:1e:0f:a6:4d:37:d9:bf:
a3:be:76:e2:8d:8f:03:47:5b:9d:e2:4c:7b:17:7d:
21:55:be:a1:52:92:56:aa:8c:30:6e:8f:ef:0e:3b:
80:47:e6:ca:c9:6f:2f:70:20:e4:17:02:9c:08:66:
0d:32:ee:79:42:2b:8d:32:37:1d:1a:9e:3a:5f:69:
cf:df:5e:99:2b:86:31:68:e5:b6:6a:dc:ca:f1:09:
37:71:bf:88:9b:6d:54:4c:14:14:bd:0a:44:fc:fb:
48:02:79:f6:7f:f1:11:ef:94:a7:c2:38:0d:e0:0d:
cd:3d:c1:4d:6a:44:51:81:08:f3:7a:38:b0:74:ae:
da:73:dd:27:47:44:6c:6c:2e:03:76:cd:73:06:04:
c9:e5:08:7c:d9:7a:de:b5:bb:85:c5:4f:58:81:6a:
d2:86:58:4b:32:f4:47:97:6a:61:05:c1:c8:8c:be:
66:0a:39:93:0d:36:d9:7d:0d:f9:ba:cd:40:e3:5c:
59:55:bd:e8:8b:f7:8a:b7:f5:8d:dc:6e:bf:6a:e0:
e9:e5:97:c4:f9:13:45:b8:67:79:76:d4:62:38:51:
2e:fa:c0:3c:2c:5c:0f:4e:13:a2:31:cf:7a:96:c3:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:D7:F1:F5:A1:28:F6:1B:DC:C9:FE:DE:4D:21:D6:BF:FD:29:B5
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Dw3X8fWhKPYb3Mn-3k0h1r_9KbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:990e::/48
2a12:7a40:991e::/48
2a12:7a40:992e::/48
2a12:7a40:993e::/48
2a12:7a40:994e::/48
2a12:7a40:995e::/48
Signature Algorithm: sha256WithRSAEncryption
58:ca:cd:d1:84:95:b9:d6:f0:47:1b:f3:ad:29:17:b1:62:a5:
72:05:ca:ea:4a:c4:5f:f5:48:4e:e2:13:40:6e:c1:82:f8:f2:
a4:d8:f4:7d:44:f0:8d:ae:6e:bc:a1:f1:40:47:df:a2:68:c7:
45:19:20:9e:b1:51:33:4b:d5:10:48:25:eb:ac:38:82:3f:11:
14:99:cc:56:73:f2:4a:1d:34:3b:b6:1c:db:c6:71:07:15:ff:
66:04:3c:cc:90:b5:37:84:3d:6d:87:a9:7c:01:f5:0b:1a:c3:
5f:41:1d:7a:4a:e5:5e:69:88:6d:85:0b:c3:2a:3f:40:eb:52:
52:3f:a4:35:51:cc:16:31:33:8c:be:8d:d9:be:e0:96:0a:2a:
76:7c:13:bb:69:90:f1:f5:14:5c:35:06:e8:12:20:ae:df:1d:
89:dc:fd:db:69:b8:d7:04:f4:60:37:63:64:8e:9b:18:33:32:
99:50:7f:14:00:85:1d:5d:6d:13:b1:f3:57:79:82:ff:af:09:
74:58:34:61:69:75:f1:1b:53:ae:64:d3:6d:b3:63:90:68:0a:
c3:11:2d:7b:bf:63:73:76:7d:c3:53:6e:b2:70:cf:6b:14:77:
3d:89:c1:98:8d:05:00:57:bb:d4:3f:3d:8d:8f:a7:03:ee:cd:
02:a7:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:43:29 2025 by rpki-client