Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/KcTcayFrsZLodbwf3DiREG7aMgQ.roa
File: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (raw, json)
Hash identifier: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=
Subject key identifier: 29:C4:DC:6B:21:6B:B1:92:E8:75:BC:1F:DC:38:91:10:6E:DA:32:04
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D94C469481E054905DDD2E8F0D9ADB
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/KcTcayFrsZLodbwf3DiREG7aMgQ.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3180
IP address blocks: 2a04:ac00:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4c:46:94:81:e0:54:90:5d:dd:2e:8f:0d:9a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29c4dc6b216bb192e875bc1fdc3891106eda3204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:bb:0b:c9:ce:83:4d:d6:6e:b0:60:9e:96:
c5:99:d0:29:9b:db:cc:f4:03:42:93:c2:df:74:48:
8a:35:c2:ed:41:8e:01:76:90:05:a9:a1:6a:b7:ad:
b3:51:a5:cd:a0:83:19:79:0c:89:c1:20:76:b8:23:
c5:ca:56:b4:85:7c:37:77:8c:fe:71:d7:b1:13:7e:
5e:ec:f6:2f:09:d3:da:0a:e4:62:cc:5f:54:c3:c3:
ab:df:f3:15:f5:54:73:4f:57:c6:8b:2c:c9:59:6d:
dc:c9:bd:0a:f1:7c:72:03:74:fb:53:e6:bf:19:a6:
36:b0:f8:81:f4:3c:eb:d8:25:a2:b1:69:2a:d4:cd:
d5:7f:d0:c5:9a:21:4b:c9:53:3d:48:44:e5:39:f6:
c6:c5:1e:cb:6a:26:0e:77:16:90:10:f2:5c:d4:07:
87:39:9c:c1:f6:62:79:f0:7b:a2:88:3b:11:f9:e3:
3b:11:11:78:3a:7e:47:c5:1b:6b:32:8d:5b:76:b3:
e2:1f:78:a6:80:a7:ba:4e:d2:3c:c0:ba:1f:ab:6e:
7e:61:af:66:3d:ca:7e:5e:75:a2:58:08:90:c7:13:
9c:ef:f5:1c:c8:e4:3b:60:e3:bc:fb:de:91:91:c4:
25:7f:d4:0e:cc:67:60:34:35:a0:f8:2d:1d:87:bf:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C4:DC:6B:21:6B:B1:92:E8:75:BC:1F:DC:38:91:10:6E:DA:32:04
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/KcTcayFrsZLodbwf3DiREG7aMgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:b::/48
Signature Algorithm: sha256WithRSAEncryption
0e:70:12:ae:38:c6:fa:40:ae:67:83:c3:d4:cd:00:5e:8d:62:
c2:b3:7e:a3:ca:29:c9:3e:1a:71:c9:fb:32:c7:a8:2f:d4:d7:
30:22:f5:26:18:f1:10:fc:7b:88:ff:ca:83:61:0a:26:15:d4:
f5:c0:85:9f:10:fe:87:40:74:58:00:c8:9c:47:66:79:88:e3:
1b:b5:98:48:9a:e4:ca:4e:69:ee:af:ed:bc:ca:2b:e0:c0:9b:
14:ae:f8:93:fd:28:63:f1:38:46:50:d1:3a:df:fc:c8:d7:a8:
08:7f:0e:9a:18:68:26:62:e2:81:9e:f5:ab:3b:4b:c7:e2:5d:
7d:cb:b8:e3:78:93:d1:e0:ee:98:64:f6:03:17:a5:cb:24:38:
9e:ea:9b:fb:7f:64:2f:aa:83:ee:f0:02:ae:22:a5:78:e6:42:
4b:d3:e8:3c:22:fa:f3:58:33:c7:e7:88:55:c7:0e:f3:97:c4:
4a:f8:10:59:8d:82:a0:0b:0c:ac:c5:3b:5c:85:eb:01:84:7b:
a1:be:f6:7f:4f:29:7f:11:32:53:27:e3:b9:7c:b8:01:4f:75:
cd:12:0c:96:4f:12:f0:b9:a2:11:99:dc:1b:fc:40:ce:cd:24:
a8:a1:72:be:18:a5:6d:e1:c1:e0:26:f9:6c:e7:fa:f2:1d:33:
15:0b:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:38 2025 by rpki-client