Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/OQ3xapSQQrV-80ArCY291PiiOQ0.roa
File: OQ3xapSQQrV-80ArCY291PiiOQ0.roa (raw, json)
Hash identifier: OY/in2kPTUsYYOEPlRa8j7m4biw3RBXISzd1HBiTCII=
Subject key identifier: 39:0D:F1:6A:94:90:42:B5:7E:F3:40:2B:09:8D:BD:D4:F8:A2:39:0D
Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Certificate serial: 01969F995D1A8DDFDBF74047E3506B72F009
Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/OQ3xapSQQrV-80ArCY291PiiOQ0.roa
Signing time: Mon 05 May 2025 08:39:10 +0000
ROA not before: Mon 05 May 2025 08:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 2001:67c:7ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:99:5d:1a:8d:df:db:f7:40:47:e3:50:6b:72:f0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Validity
Not Before: May 5 08:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=390df16a949042b57ef3402b098dbdd4f8a2390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:fb:e9:57:cb:c6:3a:05:26:f5:b8:6f:8b:
35:b0:d5:6b:f6:db:8f:7f:ee:79:74:2c:69:2b:6d:
14:71:e8:91:b2:44:63:55:66:90:d8:ee:60:54:4a:
d0:8d:72:c9:93:07:36:bc:3b:2a:ac:48:7d:7d:6a:
5a:00:d1:27:7c:79:e9:a2:b1:62:08:72:3e:17:2e:
a4:7d:15:82:37:7d:2d:2c:6f:a2:6e:2c:fe:5b:12:
d8:06:3b:5a:6e:be:53:38:21:65:20:a1:0a:d1:23:
e3:23:4a:16:b4:6d:76:6c:8f:ef:76:cd:65:69:ed:
4b:24:28:cd:5b:33:42:b8:63:a9:7a:41:93:eb:6f:
a8:0c:09:ad:70:dd:e0:d3:9a:4d:13:65:0d:e5:3d:
59:2a:29:4c:fc:a3:48:c3:10:ec:2c:3a:7f:35:25:
5a:0f:79:1d:46:ce:f1:cc:8e:de:d4:5e:ea:06:3b:
9d:30:cf:ba:c8:c3:5e:a1:61:f6:8b:40:b3:99:a6:
3b:8d:a5:d0:23:28:4f:a8:ae:64:a6:71:0c:65:39:
d4:1e:bd:2c:12:c0:c2:ff:49:02:eb:4b:f0:5e:dd:
63:72:e1:4b:d4:b1:c0:03:06:d9:75:c2:e1:29:54:
6b:1a:e9:b3:d0:99:1e:20:58:95:63:a7:ca:bd:ff:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0D:F1:6A:94:90:42:B5:7E:F3:40:2B:09:8D:BD:D4:F8:A2:39:0D
X509v3 Authority Key Identifier:
keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/OQ3xapSQQrV-80ArCY291PiiOQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7ac::/48
Signature Algorithm: sha256WithRSAEncryption
50:ec:8d:6f:92:ab:f8:e0:b9:75:2f:59:97:58:44:eb:49:8a:
00:cb:f5:1f:63:0d:99:fd:39:98:53:39:98:ed:52:d1:cb:e2:
fb:8b:6b:a5:3c:15:c9:d8:41:7a:0b:c2:48:13:ae:c4:0a:9d:
1a:24:95:6f:dc:33:74:57:57:22:03:84:a5:b5:c1:98:6f:77:
4e:35:15:59:ae:19:cf:ae:16:8e:c5:86:e2:a6:57:5d:c6:0a:
a4:56:bb:af:4e:52:e9:c6:b1:79:2d:94:b2:13:b0:9c:65:fc:
0d:d7:50:2e:cd:72:d3:88:7c:e3:35:89:10:27:b4:af:67:da:
ab:39:7b:ea:0f:6c:4a:4d:10:18:dc:a8:4b:50:56:f7:48:1a:
41:bf:31:12:80:dc:66:f1:11:75:bb:80:7f:65:ef:7a:d0:40:
a4:cb:39:54:a8:34:dc:5e:14:93:0c:69:ed:02:50:36:95:59:
11:66:f8:42:4b:a7:9f:f1:93:51:26:8a:72:41:f5:9f:89:ed:
61:45:0e:d4:94:eb:b0:41:19:bd:44:07:35:54:6b:07:c0:6c:
0b:e5:fc:d6:57:5e:30:2d:60:72:c0:2c:42:8b:3e:76:e0:57:
a2:d7:07:20:45:3f:9c:50:9a:5a:12:5e:17:8e:54:e9:80:d6:
4b:81:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:00:46 2025 by rpki-client