Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3992BHJ1y11rgiKGRzg0N1gDJ_A.roa
File: 3992BHJ1y11rgiKGRzg0N1gDJ_A.roa (raw, json)
Hash identifier: VGwdrCEwBDioavcldojQ47eeTIVOdyKE2y3bAT2CjIM=
Subject key identifier: DF:DF:76:04:72:75:CB:5D:6B:82:22:86:47:38:34:37:58:03:27:F0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369DBDD872E08B015F1D424F5238782
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3992BHJ1y11rgiKGRzg0N1gDJ_A.roa
Signing time: Wed 01 Jan 2025 19:48:47 +0000
ROA not before: Wed 01 Jan 2025 19:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214168
IP address blocks: 2a0d:7340::/29 maxlen: 29
2a0d:9440::/29 maxlen: 29
2a0d:be40::/29 maxlen: 29
2a0f:9480::/29 maxlen: 29
2a10:5d40::/29 maxlen: 29
2a10:9580::/29 maxlen: 29
2a11:3d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:db:dd:87:2e:08:b0:15:f1:d4:24:f5:23:87:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfdf76047275cb5d6b82228647383437580327f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:b5:c0:31:4d:32:5c:7d:0f:14:0e:db:5b:
40:50:08:18:97:d0:a2:44:f5:67:54:b5:ae:28:01:
b4:aa:88:99:7f:80:f2:68:5d:dd:83:dc:96:24:4a:
3f:31:7c:17:ab:5b:e5:5d:3a:bc:66:7a:0a:11:16:
dc:ae:4b:73:be:d4:df:51:06:fe:e7:2e:67:09:ad:
3a:e3:39:66:18:78:1f:89:f0:be:53:b7:51:8a:4b:
95:90:01:70:30:44:f9:80:7d:82:ca:c7:ba:23:63:
ec:0d:78:a9:df:01:96:34:a7:2b:9a:69:98:cc:f5:
da:05:c6:f6:49:a1:6c:92:de:01:0f:9c:f8:ea:3b:
7f:6e:d9:ad:ec:72:22:08:b9:13:d3:26:73:3b:0c:
20:87:c3:99:db:77:02:5a:05:47:94:0f:8e:49:cb:
c1:e5:26:54:32:68:09:f8:5b:3b:f7:a9:c7:11:64:
ee:a9:08:87:bd:25:44:2e:25:b5:da:1c:97:34:bf:
10:0a:60:54:89:a3:99:30:ad:2a:f6:83:69:62:f2:
1a:e3:d8:74:4d:23:0d:b6:1a:65:0c:41:19:ed:c8:
ca:4c:c6:1d:83:95:3c:dc:41:cd:60:07:18:c3:3b:
f0:3e:a6:91:76:ba:a7:e4:9a:e1:0f:d4:bc:bc:83:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DF:76:04:72:75:CB:5D:6B:82:22:86:47:38:34:37:58:03:27:F0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3992BHJ1y11rgiKGRzg0N1gDJ_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7340::/29
2a0d:9440::/29
2a0d:be40::/29
2a0f:9480::/29
2a10:5d40::/29
2a10:9580::/29
2a11:3d40::/29
Signature Algorithm: sha256WithRSAEncryption
3c:6a:da:2b:39:73:96:82:b9:58:13:74:1c:6a:49:76:b3:71:
35:df:51:5d:b0:32:b1:fc:8c:36:8b:65:46:7b:55:e7:0d:18:
0a:e5:3a:4a:02:ef:8e:c9:f3:00:f9:42:7a:56:9f:7b:5e:23:
35:15:cb:ba:77:8e:b4:a1:ef:aa:fe:0e:60:6a:f7:12:d4:eb:
f0:5e:6d:41:02:d1:d9:f4:e7:6c:7f:ed:69:b0:c4:b7:6b:c3:
c2:a2:d2:e5:5c:7c:b6:20:87:b8:bf:6e:20:15:98:a6:45:66:
a7:4f:45:b8:85:c7:4b:88:af:b2:f0:2c:f4:67:53:2e:30:2a:
7d:48:72:69:bc:bf:50:d3:76:c1:5e:7c:d7:16:54:ec:bf:54:
42:98:bf:e3:a3:36:6c:6d:7d:47:33:4d:57:6e:8b:50:7b:91:
82:26:f9:a1:dc:39:8d:85:4a:68:fe:f5:93:a1:ef:a2:4a:a7:
3d:dc:46:ce:f5:ba:e1:bf:e1:fe:17:fe:f4:88:89:cb:d7:ae:
cf:ff:f8:19:89:b0:20:ee:17:21:2e:c9:72:ed:1e:5d:9d:b7:
a8:d0:e6:04:f5:d6:6e:27:57:b3:b2:ab:78:34:ab:50:6c:08:
aa:61:5e:aa:ee:75:9a:c2:cf:2c:2c:b6:4e:eb:fd:3c:28:c4:
62:9c:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:54 2025 by rpki-client