Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/aI9PtDrL1wGCUURcBpHMKfTf4hE.roa
File: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (raw, json)
Hash identifier: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=
Subject key identifier: 68:8F:4F:B4:3A:CB:D7:01:82:51:44:5C:06:91:CC:29:F4:DF:E2:11
Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial: 019420D5A4C6C2E23C18BBAC79D2909B5CA4
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/aI9PtDrL1wGCUURcBpHMKfTf4hE.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21371
IP address blocks: 2a03:6c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a4:c6:c2:e2:3c:18:bb:ac:79:d2:90:9b:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=688f4fb43acbd7018251445c0691cc29f4dfe211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:af:f9:08:f8:91:9d:d9:23:a6:84:d1:6e:
a0:9e:65:6f:5d:00:3b:2a:ca:e8:39:ee:39:5b:79:
4d:90:cb:85:e7:c6:cb:be:a9:ee:a3:0a:64:6b:a8:
5f:bf:b3:9e:e7:53:19:e3:9e:25:a8:da:bf:ec:e4:
47:3c:fc:77:52:b7:ca:db:eb:aa:cf:e8:a9:de:9f:
81:e1:3a:02:42:59:ea:85:f9:c2:f0:2a:af:ba:f4:
90:7f:86:35:a7:69:dd:99:f9:f9:cb:ef:42:d6:bc:
2e:62:1a:92:d7:d3:42:11:c6:13:b1:4f:5d:bc:b9:
53:9d:94:b2:38:c2:2d:9a:4c:01:40:6c:2a:0c:4b:
a8:d1:4d:44:0f:bb:0d:59:bb:d4:8c:21:4a:6e:dd:
a0:71:19:9c:6b:5c:ec:4c:5a:af:86:c8:d4:ed:ab:
4a:6a:5a:6a:44:dc:26:a3:5c:7a:4e:7b:92:40:88:
04:43:e8:b2:a4:b9:18:08:9f:a1:85:ce:81:2a:3b:
e5:bc:d2:1a:f0:a7:1e:0d:e4:b8:8f:25:a5:92:bb:
d2:f1:e4:8c:3c:d2:c3:78:b7:7b:6e:f4:2c:30:e0:
c0:46:af:54:f8:21:9a:44:9a:f4:29:c8:0a:54:48:
61:d0:b3:bd:e9:48:16:c7:f3:ae:75:1e:ee:f3:b8:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:4F:B4:3A:CB:D7:01:82:51:44:5C:06:91:CC:29:F4:DF:E2:11
X509v3 Authority Key Identifier:
keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/aI9PtDrL1wGCUURcBpHMKfTf4hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6c80::/32
Signature Algorithm: sha256WithRSAEncryption
7b:35:5d:bd:29:e9:54:49:39:b2:78:7d:c8:10:6b:c6:e3:ef:
cc:62:8a:98:ed:fd:ba:cf:64:8c:a0:6b:5e:52:b0:24:bc:15:
54:d7:67:d1:b2:27:cd:a6:46:e0:82:09:e9:00:bc:f2:41:a1:
55:39:80:c7:92:fe:3d:f1:26:d4:24:90:1f:3a:72:a6:0d:02:
a2:1d:d1:34:ad:0f:51:73:c4:e5:cc:05:dd:45:30:59:a7:42:
49:03:3a:57:a5:e1:84:d4:c8:b3:e9:ce:de:c0:d6:eb:9d:1c:
bc:a1:c7:fd:20:21:1e:e4:93:19:d2:7e:de:03:ef:0e:39:cb:
8a:7b:4c:e3:c5:48:9e:af:be:29:9a:8a:f9:89:27:13:a9:ef:
b4:bd:17:cf:13:e0:2b:ce:44:ad:9e:c1:72:6d:37:ae:f2:35:
45:2b:72:75:41:fc:34:58:28:b7:76:9b:f8:d1:31:ae:27:6c:
1f:df:a4:bc:b1:5a:81:9d:24:d4:40:e7:dc:c8:78:cf:3a:8f:
cd:f8:f2:15:93:73:90:32:02:b4:f5:f4:a8:13:70:02:fd:f9:
0b:c8:10:87:cf:7c:1b:08:ee:47:68:45:52:70:7a:96:3d:c2:
aa:93:42:55:7b:73:df:02:3f:2c:93:fc:81:a5:26:0c:ec:65:
28:0a:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:42 2025 by rpki-client