Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa
File: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (raw, json)
Hash identifier: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=
Subject key identifier: 1C:45:13:01:2B:04:27:55:DA:11:B1:8E:98:7E:D7:E0:9C:1C:F1:60
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019424B278E398A97CB9AE32417DDD6C6585
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa
Signing time: Thu 02 Jan 2025 01:47:43 +0000
ROA not before: Thu 02 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 2001:2000:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:78:e3:98:a9:7c:b9:ae:32:41:7d:dd:6c:65:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 2 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c4513012b042755da11b18e987ed7e09c1cf160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:7c:10:8d:1f:5a:1b:27:26:04:2d:95:75:
ed:35:2f:06:0c:60:78:84:86:22:7b:20:8f:f0:e6:
95:dc:a8:d8:03:db:23:02:a5:82:54:ca:75:e9:d3:
77:2a:e9:07:3e:d3:62:79:cc:b4:8b:6e:a3:b0:42:
3d:12:68:3c:46:15:03:29:17:bb:74:30:16:34:05:
24:2a:b5:0d:cd:80:84:a0:91:6c:5b:6b:fe:b4:5e:
d4:60:53:b8:55:fb:22:09:e1:87:32:67:2b:a7:03:
81:ac:ae:00:0a:f8:cf:8c:7c:6e:8c:20:21:d1:5b:
dd:94:e4:ff:e2:61:e4:a0:70:a2:29:d8:b8:a9:52:
bd:1b:15:01:77:fb:45:81:d7:e6:97:bf:f1:0d:79:
09:bf:c8:a6:24:c2:b3:63:50:ca:a9:4c:38:f7:75:
6c:a2:26:3c:68:b7:33:87:bc:73:48:2a:a9:3f:83:
8a:90:da:7b:00:86:1c:89:75:29:be:bd:2c:ed:64:
7d:37:c2:1d:76:c0:ac:3c:7b:9d:18:74:26:d7:ee:
4c:27:1d:44:02:66:98:85:46:28:55:f8:fc:a5:4a:
a2:f8:a5:af:38:0c:2f:17:b2:d5:05:52:0e:69:42:
a1:39:a4:2a:a9:d0:57:bc:ba:d3:36:e5:2a:66:3d:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:13:01:2B:04:27:55:DA:11:B1:8E:98:7E:D7:E0:9C:1C:F1:60
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2000:3000::/40
Signature Algorithm: sha256WithRSAEncryption
41:58:84:6d:e3:95:80:b5:91:0f:99:8c:c4:09:c1:f5:0f:d8:
39:39:06:30:1f:19:1b:cd:24:98:0b:39:a4:8c:c9:fe:de:51:
7f:5e:bf:26:bc:b4:e1:15:5a:f6:b4:75:c5:d1:d8:9a:9d:68:
b7:99:d7:42:2e:9c:5b:af:79:a5:2a:7c:eb:fb:f5:bb:f2:99:
60:4d:51:bb:76:94:09:39:f2:7f:14:ad:60:68:93:b7:4e:e3:
6b:f8:c7:a0:41:bd:78:75:9b:c8:5b:22:73:7a:1b:d3:15:20:
73:36:ce:57:02:f8:b9:1c:ac:27:08:d6:ab:11:5a:97:0e:2b:
79:b6:35:4f:e2:c4:9f:44:e7:7d:de:2c:b9:f5:41:06:6d:b1:
07:5d:04:2a:f3:9a:fd:f2:3a:b9:2a:b9:51:90:fb:ee:26:25:
f4:e0:43:3c:bc:e0:22:21:ce:ed:e6:8b:e6:32:52:7b:89:ac:
6c:f2:34:27:00:da:d2:51:4e:9e:e9:2f:3c:0c:c2:30:98:a7:
f8:f8:95:1a:97:63:74:d1:68:81:fd:91:0a:88:da:8e:44:1d:
84:9b:87:cc:7a:34:a8:f3:d5:a0:6f:db:69:58:db:e0:5d:30:
a2:53:ad:6e:14:30:03:a9:c7:a8:3c:e7:cf:04:60:fd:6f:32:
eb:d7:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:56:36 2025 by rpki-client