Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/3lX45zxcjM7CBQIUfA3UEiMkVKs.roa
File: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (raw, json)
Hash identifier: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=
Subject key identifier: DE:55:F8:E7:3C:5C:8C:CE:C2:05:02:14:7C:0D:D4:12:23:24:54:AB
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 019422FAFD516B0569C9F467004033774162
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/3lX45zxcjM7CBQIUfA3UEiMkVKs.roa
Signing time: Wed 01 Jan 2025 17:47:41 +0000
ROA not before: Wed 01 Jan 2025 17:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 2a02:f181:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fd:51:6b:05:69:c9:f4:67:00:40:33:77:41:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 17:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de55f8e73c5c8ccec20502147c0dd412232454ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:a4:d2:bf:bc:ed:d0:4a:77:8d:c1:b3:17:
c9:05:90:e6:24:7f:11:3a:76:d5:30:e0:cc:aa:fc:
e9:fc:92:d0:6e:c7:ae:a7:3b:8a:c1:ad:c2:48:64:
f5:1d:bc:39:7c:9f:e0:8c:81:6b:7b:cf:20:9d:c0:
0a:5a:1e:5d:71:7f:3e:44:ab:b5:cc:c8:b1:c9:36:
b9:c9:6f:99:65:63:82:7d:4b:95:c1:5f:f7:4b:3d:
b7:35:74:20:0a:c1:45:d8:7f:5b:31:e3:67:45:8c:
eb:d7:73:19:5c:d1:3d:30:92:a1:d3:dc:03:52:47:
8a:77:11:40:f0:47:58:b1:ed:3c:db:d8:f4:8c:7b:
cc:89:97:a4:7d:26:05:85:e1:3e:71:7d:7d:18:83:
51:9a:04:22:b2:98:9f:26:a0:5a:c8:2a:69:9b:62:
76:77:f0:bf:21:43:14:4e:51:a4:1e:a9:1a:1f:d8:
b5:04:bc:0f:67:91:08:3e:c5:c0:87:50:b0:39:7b:
04:ca:89:a2:9b:38:f8:7f:3e:b4:d0:10:91:22:c7:
9a:8b:f5:95:99:f9:e2:78:27:69:33:d7:6a:83:97:
74:09:65:f1:2a:15:f4:86:c2:b9:2d:73:50:4e:ec:
af:26:ee:be:83:de:b0:10:d5:19:33:78:89:38:7e:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:55:F8:E7:3C:5C:8C:CE:C2:05:02:14:7C:0D:D4:12:23:24:54:AB
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/3lX45zxcjM7CBQIUfA3UEiMkVKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f181:1000::/48
Signature Algorithm: sha256WithRSAEncryption
7c:f9:4b:23:f8:42:22:40:ad:40:73:57:69:8c:0e:f5:da:2d:
6d:56:42:39:86:5a:43:44:b5:e3:f9:8b:af:7f:44:5f:c8:b4:
18:7b:9b:1b:07:f6:15:cc:4b:10:07:b8:7a:21:4c:d9:6e:a7:
5a:12:53:85:42:97:57:93:08:3c:6c:f6:e3:5b:73:9b:66:ab:
61:b6:ed:5c:75:c9:16:93:95:85:e7:d1:bb:1a:78:4f:95:2d:
e4:73:a2:6e:f2:9c:ea:ad:31:5e:e8:e5:50:22:63:4d:1c:0f:
20:18:d2:0b:f8:45:a3:a4:52:1c:a9:54:f7:7d:9b:0b:2b:34:
f4:7a:8f:26:6f:5e:08:d4:0b:31:b0:95:44:7f:85:d9:51:6d:
eb:e4:0c:55:fe:4b:fd:22:10:82:33:77:8a:ab:67:d7:fc:55:
e2:56:ad:6e:cf:9e:76:49:0f:de:43:97:12:ea:18:38:d4:ab:
7c:c8:54:1b:6d:d6:9f:94:90:e4:19:2f:9c:02:8b:63:f0:f4:
b5:0e:c7:f2:eb:63:d0:79:02:43:ae:0b:e5:18:29:c2:b7:e9:
0c:a5:59:f3:d8:9b:6b:4c:15:5e:12:6e:22:46:b1:f0:10:85:
10:e4:65:d0:b2:0a:26:25:f2:e3:76:76:e6:f1:2b:7c:fa:b9:
41:b8:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:53:28 2025 by rpki-client