Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/OcIpHvqAwT2M9dTBJHDbqY1xej4.roa
File: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (raw, json)
Hash identifier: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=
Subject key identifier: 39:C2:29:1E:FA:80:C1:3D:8C:F5:D4:C1:24:70:DB:A9:8D:71:7A:3E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 0194221F98591892A9F1DA7C041FC3A90750
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/OcIpHvqAwT2M9dTBJHDbqY1xej4.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212135
IP address blocks: 2001:678:efc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:98:59:18:92:a9:f1:da:7c:04:1f:c3:a9:07:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c2291efa80c13d8cf5d4c12470dba98d717a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:71:22:e5:0b:5a:a7:81:2a:80:ee:37:aa:
8a:6b:46:dc:9f:e9:99:e1:a7:f5:fa:3b:62:7c:54:
df:fe:5c:2a:db:94:e3:d6:bd:46:22:44:c2:12:6e:
88:65:65:98:95:05:89:8e:23:9a:d0:48:dc:f9:c5:
20:b6:fa:4b:9b:70:cb:5d:ca:e9:a7:e7:8d:5b:77:
63:72:7d:b5:13:b6:33:86:a6:ff:54:91:35:ca:89:
95:55:08:a1:6f:05:83:e5:da:ca:ed:b3:a9:14:24:
76:14:cc:db:a8:5c:25:31:a9:07:c3:d6:7f:0d:32:
8a:05:df:e6:d6:ee:f5:7d:ee:62:9f:63:24:81:c3:
ad:66:12:87:26:d2:f0:2b:48:b1:74:33:a0:cf:92:
82:a3:79:3a:d0:73:9c:ac:24:a2:e6:2c:fa:20:2d:
a8:f7:f6:39:f2:d6:b2:bf:74:b9:b5:32:df:27:27:
8f:2d:26:a5:38:42:44:15:87:b8:74:ab:81:95:f4:
8b:59:d0:30:8f:e0:a7:44:65:37:b5:63:d9:d1:e0:
db:56:c6:58:09:eb:d8:56:12:96:8a:4e:a9:cb:20:
81:ce:36:66:0a:89:66:e7:5f:91:1c:54:2e:a3:33:
4d:9e:fa:49:bd:2c:d6:3b:13:75:7c:e3:66:da:d8:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:29:1E:FA:80:C1:3D:8C:F5:D4:C1:24:70:DB:A9:8D:71:7A:3E
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/OcIpHvqAwT2M9dTBJHDbqY1xej4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:efc::/48
Signature Algorithm: sha256WithRSAEncryption
84:ca:21:78:31:ae:7e:23:8d:a9:f5:94:81:79:2d:23:f7:65:
3d:60:98:f9:97:8f:a1:8d:82:59:a3:9a:39:2b:b2:db:79:76:
2a:29:13:4a:a3:2d:18:00:06:5b:90:d0:c4:48:7a:fd:ed:2d:
85:7a:4f:b5:e3:9e:9e:bd:84:7f:89:56:6a:bb:3d:da:23:07:
aa:8d:54:14:60:22:63:b6:f5:5f:c9:52:dd:a2:8a:7c:ec:e9:
6f:2c:46:22:6d:52:2f:6c:4e:e8:f6:37:12:3f:0d:a1:a3:02:
e2:3b:bd:f1:10:ee:80:c4:34:d2:bb:7e:25:cc:44:9e:17:95:
f2:a9:f8:6f:f4:80:d9:7b:da:c1:15:f4:2e:42:21:8a:43:92:
19:4c:10:26:11:7f:dc:2c:9a:e0:7d:23:7e:de:a2:94:42:1d:
c1:a6:49:23:8d:91:9b:db:ed:a7:fa:fd:3b:c4:ec:e5:a1:59:
fc:27:19:0e:55:ec:f8:91:40:1f:13:f2:db:c2:f5:a1:bf:4f:
42:7c:fe:ac:9c:fe:b6:2f:95:3f:05:01:cd:de:d5:99:a4:13:
c0:2f:39:43:d0:b2:a3:36:fe:02:d6:29:a9:c2:ad:ee:f5:d5:
89:b8:54:e0:40:78:6b:b5:4d:8c:c3:7a:11:02:3e:66:17:fe:
f8:1e:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:09 2025 by rpki-client