Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/1-gMcB2tX1aJagc2aIqyie1JosUM.roa
File: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (raw, json)
Hash identifier: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=
Subject key identifier: FA:03:1C:07:6B:57:D5:A2:5A:81:CD:9A:22:AC:A2:7B:52:68:B1:43
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019423D70F11221B46FDB7461BC80FFAFF88
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/1-gMcB2tX1aJagc2aIqyie1JosUM.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197223
IP address blocks: 2a03:8c0::/32 maxlen: 32
2a03:8c0::/36 maxlen: 36
2a03:8c0:1000::/36 maxlen: 36
2a03:8c0:2000::/36 maxlen: 36
2a03:8c0:3000::/36 maxlen: 36
2a03:8c0:4000::/36 maxlen: 36
2a03:8c0:5000::/36 maxlen: 36
2a03:8c0:6000::/36 maxlen: 36
2a03:8c0:7000::/36 maxlen: 36
2a03:8c0:8000::/36 maxlen: 36
2a03:8c0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0f:11:22:1b:46:fd:b7:46:1b:c8:0f:fa:ff:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa031c076b57d5a25a81cd9a22aca27b5268b143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:68:61:18:54:8f:05:79:a7:32:e6:61:cb:bb:
ee:94:5e:c7:51:6d:de:5e:48:9b:86:52:67:cf:62:
0e:12:30:92:9e:6d:af:5b:2d:7c:43:56:fd:d9:e2:
5f:e4:02:78:c8:eb:51:71:bc:fc:bf:e8:55:1b:5a:
e8:5f:a8:56:b3:d0:af:89:06:59:78:84:fb:95:3e:
5c:21:39:c3:48:7a:49:93:d2:fe:d9:71:cb:67:c1:
0b:1f:bd:57:d0:ef:26:41:31:53:d9:1a:a0:81:b2:
8d:3c:fd:67:3e:c0:77:88:a2:67:0b:37:9e:19:9f:
c4:db:4b:96:d8:20:5c:f4:3c:80:c9:58:2d:74:34:
ba:0d:ac:56:c5:a6:f6:d3:e3:c3:b9:6a:c3:9e:0a:
e1:ec:18:59:e7:06:e3:c2:79:cb:3a:05:61:98:6d:
13:26:90:b1:b3:9e:10:5c:4d:df:dc:45:e3:36:08:
87:06:e3:fd:c3:de:83:08:ae:83:32:c1:51:47:8c:
26:93:23:63:84:f3:c0:d6:36:8d:b8:92:a4:0f:d5:
3d:4d:07:66:2e:02:cb:72:d5:18:37:3f:ed:98:98:
5b:31:f2:89:65:6e:39:4b:81:38:69:6e:29:1c:aa:
9a:6f:1c:66:f7:e5:20:ce:0f:7e:ad:98:e7:6a:b3:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:03:1C:07:6B:57:D5:A2:5A:81:CD:9A:22:AC:A2:7B:52:68:B1:43
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/1-gMcB2tX1aJagc2aIqyie1JosUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:2b:61:c3:44:01:a8:42:79:e1:fc:48:c1:1b:7f:4f:da:1e:
03:ab:d3:a8:70:94:e1:31:ee:2c:51:30:9c:1f:09:d3:2b:fb:
ae:11:0c:c0:b1:d1:ee:24:e9:e7:af:06:10:50:54:6a:7b:6f:
e6:b6:86:57:f4:d5:40:a5:ce:dc:81:93:d4:19:bd:9b:56:32:
bf:22:36:94:5e:9e:8d:92:73:5a:73:5f:0b:aa:dc:39:69:1e:
ca:e2:d6:ba:0a:43:6b:91:3c:17:9f:91:48:cc:a1:d4:36:1e:
dc:b9:53:7d:a9:77:55:50:9a:8b:bb:4f:c9:33:72:9e:4c:8e:
90:85:56:1f:c6:68:a5:8e:f7:18:7e:76:04:63:05:88:19:8b:
a4:94:ff:dd:13:40:b3:48:54:d4:a6:46:58:d3:79:bf:00:f5:
4b:98:b5:d0:16:52:27:ef:f5:6d:6b:7d:61:dd:43:b4:7a:f3:
ba:0f:27:82:9c:ee:17:1d:eb:1a:1e:47:dd:84:d1:06:85:40:
87:97:46:95:20:af:4b:0f:c1:23:54:17:cd:51:0e:f4:33:5f:
2a:bf:d3:e6:e2:f5:f6:ba:4a:2b:99:36:61:66:4a:f4:f0:17:
76:32:c7:37:e9:1a:74:3f:98:48:80:a7:6b:3e:96:92:59:ca:
de:67:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:02 2025 by rpki-client