Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/3r_ETONky6E0ht04dT8KlE05aWA.roa
File: 3r_ETONky6E0ht04dT8KlE05aWA.roa (raw, json)
Hash identifier: 5YqtEwAOo33bp6YyDMyktpU2orZ8oIMLNsWxsJ5Pw74=
Subject key identifier: DE:BF:C4:4C:E3:64:CB:A1:34:86:DD:38:75:3F:0A:94:4D:39:69:60
Certificate issuer: /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial: 01941FFA1C42651384A918C16B216C38B7F3
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/3r_ETONky6E0ht04dT8KlE05aWA.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49453
IP address blocks: 2a0c:de80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:42:65:13:84:a9:18:c1:6b:21:6c:38:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=debfc44ce364cba13486dd38753f0a944d396960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:34:76:ef:74:29:9b:fd:eb:0d:ae:da:19:
6e:52:e2:e0:c3:5d:cf:72:ab:d7:51:3e:41:87:2d:
b4:db:5f:9d:d9:d9:9a:9f:0b:77:0c:fd:fd:aa:48:
7b:4a:d8:45:f2:61:27:18:5c:7b:5b:78:b0:9f:76:
95:09:7f:58:0b:ce:33:5c:d3:b2:5f:39:ba:79:a2:
5a:bc:1b:f2:7b:e5:19:c8:33:1a:9c:e5:e7:0b:3c:
4f:49:1a:61:1b:8d:4b:f4:ac:f2:da:86:44:53:97:
81:c8:77:16:e7:32:d8:3b:80:9f:5a:88:c8:6a:7d:
44:05:d2:fb:50:13:8e:8a:a0:69:64:48:6e:1b:6b:
23:7d:50:64:ce:dc:c8:51:ac:57:3d:65:bb:ab:98:
47:90:2d:61:1e:8f:fc:46:8d:87:0b:16:a3:e0:58:
be:c6:33:ea:af:22:e8:19:fc:4d:f3:8f:b3:40:51:
1f:cb:e0:5d:b7:78:8b:cd:7c:68:47:9b:5b:fc:8e:
41:ce:67:47:b0:94:66:0e:e2:0b:da:90:2f:be:c4:
b4:d8:4d:b0:ae:d1:f8:34:aa:04:e9:7f:af:eb:ec:
c2:61:4d:9b:39:be:75:d6:f7:9d:80:7f:3a:03:68:
57:3e:23:cb:6b:30:a5:50:8b:80:53:c3:f4:c3:27:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:C4:4C:E3:64:CB:A1:34:86:DD:38:75:3F:0A:94:4D:39:69:60
X509v3 Authority Key Identifier:
keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/3r_ETONky6E0ht04dT8KlE05aWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:de80::/48
Signature Algorithm: sha256WithRSAEncryption
c9:11:a5:8e:70:2f:1d:b8:7e:81:ca:23:8f:79:7f:e3:12:42:
03:75:9f:60:4b:d9:db:b0:ac:06:f8:91:0b:ea:f1:f3:39:2c:
86:35:8f:ab:28:8a:f5:33:a1:27:56:92:51:22:d2:e6:38:18:
65:65:0a:6d:ec:bf:61:eb:94:f0:5a:00:10:83:40:b2:24:01:
77:a6:1e:e6:a5:c8:cc:0c:ec:07:2c:08:68:7c:84:0f:9c:b4:
44:64:80:a4:fd:52:3f:04:0d:7e:84:b5:d4:5c:35:8a:d3:36:
67:db:07:3f:07:17:18:22:ee:90:a8:86:b6:66:c9:e3:28:db:
b6:8a:4e:3a:eb:66:66:8d:a6:85:ef:94:34:dd:33:32:17:7b:
43:23:e1:b2:60:78:56:78:64:0e:8b:8d:26:0d:d8:d9:80:cc:
84:ee:24:2a:cd:e4:fe:89:10:dc:dd:b4:ec:33:93:8d:8c:99:
80:e4:7b:24:09:94:59:4e:b2:74:f6:dc:f7:a5:26:5f:78:ee:
b0:5f:d4:7c:4a:14:c5:13:3f:a9:9f:7b:47:97:31:14:dd:08:
f8:ff:38:61:73:c6:30:da:ac:fa:9d:f9:d0:8d:a6:c8:90:a3:
91:46:a1:d1:b9:ad:15:86:7e:1f:72:61:38:71:9b:4a:c7:7c:
7b:8c:38:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:09:36 2025 by rpki-client