Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/c3-c5fJFslV7LR358qViU5q30Fs.roa
File: c3-c5fJFslV7LR358qViU5q30Fs.roa (raw, json)
Hash identifier: 3UqF12TqWm5LcBpS7lf32epQDOeNX36BnMR/BtRZXk8=
Subject key identifier: 73:7F:9C:E5:F2:45:B2:55:7B:2D:1D:F9:F2:A5:62:53:9A:B7:D0:5B
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448F722CBA471B109C1E77B6310A55
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/c3-c5fJFslV7LR358qViU5q30Fs.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43992
IP address blocks: 2a09:7:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8f:72:2c:ba:47:1b:10:9c:1e:77:b6:31:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737f9ce5f245b2557b2d1df9f2a562539ab7d05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:93:c6:82:87:d2:6d:22:b1:92:c0:9e:c2:
df:39:bf:04:90:03:93:e2:25:43:52:ef:25:38:3c:
ad:5c:59:97:bd:4f:f5:cb:11:4a:10:63:c6:ed:69:
fe:df:b6:46:13:e5:4b:09:40:45:93:d9:21:f6:c7:
67:c2:60:75:83:53:ec:9e:2d:36:dc:cd:2c:14:21:
bc:25:5d:0d:e6:18:e6:3c:f1:e5:c3:13:90:16:f5:
b8:6c:a4:ff:3c:2d:0f:92:29:17:0c:cc:3e:68:bb:
90:74:bf:68:cd:00:67:f8:81:8e:e9:05:57:64:a8:
80:cb:83:12:0b:5d:4b:84:cd:1e:a9:ba:9b:7e:91:
c1:a2:da:c7:55:72:fd:f7:cf:ad:76:21:5e:3a:57:
63:93:5e:05:41:25:bf:8a:32:dc:0c:ca:1a:83:ff:
ed:27:20:48:0f:15:72:72:d4:ee:bd:bf:6f:45:6e:
36:f0:6b:42:22:b8:ca:30:18:a8:df:a1:54:56:92:
f2:63:17:38:ff:22:88:fa:be:98:33:a5:1d:b2:87:
60:92:4f:d2:fa:a1:5b:f4:36:27:97:99:62:98:96:
e5:c6:df:63:60:62:75:9c:60:1e:38:79:74:4c:ca:
71:6e:42:4d:68:35:42:57:75:da:02:5b:25:b3:42:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7F:9C:E5:F2:45:B2:55:7B:2D:1D:F9:F2:A5:62:53:9A:B7:D0:5B
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/c3-c5fJFslV7LR358qViU5q30Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2001::/48
Signature Algorithm: sha256WithRSAEncryption
99:87:29:ec:27:a0:7e:c2:d5:8a:b9:9f:f4:df:ff:e3:51:ac:
9c:af:39:cc:db:21:84:93:fe:1e:d4:8f:4b:fa:ce:b4:43:5b:
97:e3:84:f3:bf:c8:20:e7:59:d2:e0:bc:14:83:83:91:6e:d8:
1b:3d:d3:39:68:ed:14:38:7b:13:67:52:b8:23:94:3e:9f:af:
8d:1e:f7:19:a8:bd:b5:3d:df:5f:58:33:a2:71:2b:74:6d:b4:
88:61:99:e9:62:44:68:37:f5:fd:fe:43:74:bf:1d:b4:cc:0b:
d6:01:49:11:0b:61:36:5e:00:6a:71:77:7c:93:ec:7c:dd:94:
9c:67:14:33:18:48:e9:58:ff:8c:78:67:0d:98:3c:8d:9d:6f:
d7:56:d9:c3:03:9d:ec:3f:db:29:0a:da:42:ca:8c:b9:fc:31:
cc:ff:25:b9:b8:1e:92:19:3a:b7:a5:6b:10:bd:86:a3:51:4c:
79:76:c7:72:24:e2:b5:17:db:af:1e:19:51:e4:cd:63:1a:01:
c4:36:e2:74:68:41:be:71:db:d4:80:15:bb:9f:73:a9:fd:fd:
30:9a:20:59:f9:7a:7b:a4:95:6b:46:3e:1c:b3:50:c7:29:2f:
67:db:58:6e:a0:71:aa:93:15:9d:28:c8:53:cf:e9:52:58:09:
ac:02:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:00 2025 by rpki-client