Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/t3jNUSzDOgWIyRpvt1igZNDlkXE.roa
File: t3jNUSzDOgWIyRpvt1igZNDlkXE.roa (raw, json)
Hash identifier: AP30yp3nxumYEU4wFAvro1kcrW7hpyskg8Z2ZUtGt6s=
Subject key identifier: B7:78:CD:51:2C:C3:3A:05:88:C9:1A:6F:B7:58:A0:64:D0:E5:91:71
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01949025D79D03A488B30E17A6D18AFDEC8B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/t3jNUSzDOgWIyRpvt1igZNDlkXE.roa
Signing time: Wed 22 Jan 2025 22:33:06 +0000
ROA not before: Wed 22 Jan 2025 22:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215114
IP address blocks: 2a12:bec4:1190::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:90:25:d7:9d:03:a4:88:b3:0e:17:a6:d1:8a:fd:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 22 22:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b778cd512cc33a0588c91a6fb758a064d0e59171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:fd:c6:f7:76:44:09:e2:5f:ce:97:da:e9:
4f:79:c3:2d:50:ab:09:cf:d3:44:82:4e:b9:13:f3:
67:db:9f:8b:45:88:71:96:a4:ac:e4:71:10:98:ca:
a6:8d:ed:42:d2:f3:a8:9d:c2:97:0e:83:70:89:b5:
a1:1b:02:a0:c1:50:2f:da:89:f1:6f:31:3a:da:d9:
14:40:bd:ff:ee:38:1c:08:41:e1:95:d7:63:b3:3f:
ec:f1:68:95:13:46:4a:8e:49:a9:c8:3b:94:90:61:
df:00:e0:b3:a8:98:ea:13:cf:d2:79:1e:ef:1f:a3:
31:09:75:42:98:ec:c0:9d:09:72:e4:18:b2:e4:4a:
34:47:4d:a1:4e:82:d8:19:cf:52:c1:94:7d:0b:09:
1f:25:f0:df:75:12:6a:53:e9:1c:6f:12:b1:32:4b:
18:49:69:bc:40:06:d7:17:43:6b:64:6d:e9:a8:f2:
fd:83:31:1a:09:bc:9f:12:66:52:03:dc:f0:69:a9:
6c:95:ec:65:a7:4c:08:b5:e6:ce:36:53:af:f4:5b:
90:21:c9:fc:1d:4e:1c:c9:c6:82:c3:cf:61:a4:dd:
bd:61:7c:dc:c9:65:25:81:36:45:6d:a9:fa:3e:6a:
8b:f5:a9:44:57:0c:4d:04:fd:b7:31:6e:b6:d6:e3:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:78:CD:51:2C:C3:3A:05:88:C9:1A:6F:B7:58:A0:64:D0:E5:91:71
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/t3jNUSzDOgWIyRpvt1igZNDlkXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1190::/44
Signature Algorithm: sha256WithRSAEncryption
14:48:4a:0f:4a:53:e1:2c:1c:06:ed:80:b0:26:8f:a4:fe:67:
2e:2d:9c:18:93:6b:88:a5:65:bb:4f:6a:7f:83:d6:ac:25:a6:
7d:f0:ab:90:cb:f3:c3:9c:ce:d5:1b:e8:90:74:e5:63:7c:2c:
84:a5:c2:21:8d:71:a4:37:ac:90:de:c0:3b:a2:f7:67:13:62:
54:cc:1b:43:a5:49:70:78:e0:bd:e3:0e:37:e4:e8:dd:b2:af:
51:49:1e:cc:3c:f7:f2:46:06:23:c7:23:67:bd:4a:d7:20:d8:
2b:6a:31:8b:31:57:35:c6:bc:46:e9:ac:19:b1:ee:38:d0:b2:
f8:d0:dd:1c:d6:2d:bc:c2:31:92:13:92:57:4b:0b:63:26:06:
75:2c:6b:26:a0:f6:2f:14:61:60:70:a3:3f:1f:35:b2:9b:39:
af:d9:a4:d7:b7:68:ba:85:97:86:b6:cf:82:e0:ba:9f:d1:77:
e0:d4:9c:2a:91:1d:73:b7:5d:da:b8:0d:b0:e2:f6:41:fd:0c:
2a:15:55:bf:18:7c:d3:a4:a6:b4:d4:f6:c1:74:08:36:a2:b2:
3a:4c:8d:8d:b1:d7:84:f1:d8:7b:4f:a5:47:a2:ee:2c:d5:d9:
39:21:d7:03:01:60:d8:b1:19:08:da:3f:89:0d:04:b4:a1:5a:
05:7c:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:42 2025 by rpki-client