Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/3I5gldML-uQbyv9CkIBz-mgvWWk.roa
File: 3I5gldML-uQbyv9CkIBz-mgvWWk.roa (raw, json)
Hash identifier: eQaCI89QTy4mD37K4tNIxvLzbLgt03MOpzY9mO0sl3s=
Subject key identifier: DC:8E:60:95:D3:0B:FA:E4:1B:CA:FF:42:90:80:73:FA:68:2F:59:69
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01946A1F38F3795FEECC3645D55C28EE3F41
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/3I5gldML-uQbyv9CkIBz-mgvWWk.roa
Signing time: Wed 15 Jan 2025 13:20:18 +0000
ROA not before: Wed 15 Jan 2025 13:20:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213655
IP address blocks: 2a0f:b244:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:1f:38:f3:79:5f:ee:cc:36:45:d5:5c:28:ee:3f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 15 13:20:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc8e6095d30bfae41bcaff42908073fa682f5969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:f4:38:cb:d6:7c:28:61:e1:87:60:1c:ef:
a0:f8:66:26:c4:de:42:ce:2f:63:80:e7:c6:17:57:
60:4c:56:e9:c4:f9:4d:1b:ac:94:17:45:23:21:27:
a5:48:e9:e2:ee:2d:33:9f:1d:5b:7f:e7:55:48:36:
08:9f:48:d4:91:ce:97:74:56:96:4f:2c:09:e2:02:
84:9a:3a:ac:d2:f1:21:88:11:fd:a7:3f:a5:c0:7d:
b9:fc:18:0f:fe:dd:93:c2:09:0c:26:3e:75:74:58:
1f:18:32:ff:2e:95:29:72:81:81:89:4c:f9:3e:0a:
4a:f4:68:40:5a:00:f9:ae:f3:a4:5c:7e:9f:19:f2:
9f:f0:9f:df:9c:1e:e9:90:47:95:8e:34:fe:b0:88:
3d:86:4f:06:62:46:2f:c8:57:15:43:56:ea:f9:be:
cd:b7:22:66:ce:e1:27:2f:fa:68:c7:44:42:82:8c:
1a:75:fc:0f:3c:31:33:bd:44:4d:0b:e1:5b:df:31:
ca:8c:64:3a:5d:45:36:76:36:72:86:c7:f1:08:a1:
27:d5:bc:0b:65:ce:a6:49:35:f4:7d:1a:a0:a2:1d:
98:b2:c7:d7:ad:8d:fa:ab:86:81:b5:45:7d:d5:fe:
87:6a:e8:92:db:03:8b:db:cd:61:d9:da:be:56:5c:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:60:95:D3:0B:FA:E4:1B:CA:FF:42:90:80:73:FA:68:2F:59:69
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/3I5gldML-uQbyv9CkIBz-mgvWWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:130::/44
Signature Algorithm: sha256WithRSAEncryption
5c:39:c2:01:59:cd:49:3e:cf:57:85:1e:c3:d5:6e:fd:f7:e9:
ce:a8:5c:1d:0b:5d:76:f1:f3:f7:65:c8:be:cf:fb:6d:e6:4e:
46:81:07:f6:5d:c2:be:0b:36:c7:76:8e:a2:3d:da:1c:f9:b7:
8b:49:cf:15:61:e7:47:4a:ed:d5:f3:67:97:ac:c3:f3:45:1e:
e6:64:74:75:b6:a6:a9:5e:a8:48:1a:4d:36:96:97:41:18:46:
8a:98:dc:e7:42:db:16:1b:66:86:f5:95:c8:34:e9:63:95:c1:
3d:3c:66:14:2b:7f:6a:da:ee:76:bc:7b:b8:44:ec:96:9a:f9:
f5:97:83:b1:8a:6d:cd:67:80:4f:0a:17:68:1e:31:d9:4b:e5:
a2:2f:ff:07:a9:61:7b:27:87:50:60:8f:0c:49:ec:0f:06:45:
11:81:57:e3:f8:fc:8f:f1:0e:0e:43:38:5a:8e:03:04:fa:68:
04:05:e6:fa:b6:82:91:24:13:9d:7d:4e:13:20:78:07:e8:1e:
c1:cb:4e:46:fa:28:ff:e5:97:af:6f:a5:5f:4a:04:a6:86:25:
49:38:a0:82:f7:41:0f:29:b2:89:e0:13:40:2a:f1:4e:16:bd:
59:01:ac:a7:0e:fc:95:d7:0c:be:c2:1c:cd:cd:66:2e:fa:12:
3f:66:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 15:57:29 2025 by rpki-client