Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/mt3gB2c0raC2BMh6rEGbJNYm3Ug.roa
File: mt3gB2c0raC2BMh6rEGbJNYm3Ug.roa (raw, json)
Hash identifier: OmreYbE9KnMOLnziJ5RPsRhv3maIT4ojXqoVqKrQUcA=
Subject key identifier: 9A:DD:E0:07:67:34:AD:A0:B6:04:C8:7A:AC:41:9B:24:D6:26:DD:48
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0196E9FC55A56DAD45107AD3478A5DCF6760
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/mt3gB2c0raC2BMh6rEGbJNYm3Ug.roa
Signing time: Mon 19 May 2025 19:19:10 +0000
ROA not before: Mon 19 May 2025 19:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30788
IP address blocks: 2a11:2c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:fc:55:a5:6d:ad:45:10:7a:d3:47:8a:5d:cf:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: May 19 19:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9adde0076734ada0b604c87aac419b24d626dd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:a6:2c:cf:e2:77:4d:44:83:00:d8:35:ba:
e8:f1:68:9d:3b:35:2d:50:25:96:3b:d5:49:92:0a:
6f:c0:96:95:0c:5d:7c:88:25:3c:a1:81:36:54:a9:
fe:54:15:34:61:a0:9d:56:44:d9:b1:4c:5c:e5:3a:
f5:5c:16:79:4f:2f:09:98:ce:16:d2:3f:64:71:ab:
f9:4f:51:a5:cd:b1:0f:34:7a:6f:33:e6:ff:f1:e5:
7d:bc:c7:91:32:83:99:df:6f:12:6d:d1:2d:bb:21:
c6:56:c0:96:9f:e2:09:da:d7:69:18:50:c5:9e:8c:
e3:5b:e0:b6:73:a8:23:20:a4:a7:47:d2:40:f7:a0:
ae:f1:66:a7:93:b7:3f:18:68:8b:a4:45:74:a5:f7:
1d:7f:c8:8d:84:23:39:fd:f3:0c:56:9b:96:65:96:
04:c3:ac:b7:07:55:f7:2d:01:f6:a4:34:a9:2d:e8:
47:c3:25:64:16:fc:00:3c:30:6c:ea:d0:b9:a2:f1:
89:bb:e7:16:2d:fb:0a:5d:5c:45:9b:3b:cc:7a:d8:
50:ea:b9:ac:c7:f0:4e:22:b3:8f:41:73:0c:af:48:
72:f5:7d:85:d6:59:a4:a8:e0:e6:62:ff:6c:7e:3b:
9f:2f:35:85:0a:42:c0:7b:40:00:1a:bd:a0:2c:23:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:E0:07:67:34:AD:A0:B6:04:C8:7A:AC:41:9B:24:D6:26:DD:48
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/mt3gB2c0raC2BMh6rEGbJNYm3Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
d9:90:47:af:6a:ec:0d:ca:4f:bf:1e:93:38:0e:20:30:e0:18:
be:65:d2:bc:e5:c4:63:38:17:69:81:39:5b:52:6d:5c:64:0f:
b6:33:6a:f0:44:93:df:e8:e4:23:a1:53:1a:80:cb:ce:af:72:
4f:b0:cf:81:9f:2c:44:b9:f9:06:b3:50:60:c0:0d:a5:07:b1:
6c:0d:06:00:bc:86:58:dd:85:e3:77:0d:f7:4c:ea:4e:9a:fe:
ec:36:24:be:04:12:06:66:09:d1:af:61:83:87:8e:6e:9b:9c:
7f:84:dc:e2:b3:1d:69:07:04:eb:67:a7:6f:a7:b9:cc:b2:42:
3a:d9:85:c8:12:a0:76:ff:76:d5:04:c4:77:7e:f3:b8:95:6d:
3d:8d:b6:d4:9f:57:5d:ef:8b:23:13:ac:6a:fa:e7:04:67:33:
e0:d8:8c:ce:53:c3:46:46:c1:0d:4b:01:ea:5a:39:76:ec:3e:
a0:7c:19:8a:44:a1:e8:61:37:b9:1d:fb:e8:b5:c4:47:8f:50:
6c:af:91:ce:3d:bc:6d:f1:54:a5:a4:14:9d:b4:50:45:73:54:
db:0d:9c:3e:f0:33:17:89:a0:69:4d:ac:f4:99:5b:92:54:61:
0e:1d:03:03:2d:f6:33:7a:05:bc:dc:cb:b8:f0:a0:9f:43:2f:
d3:6a:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:35 2025 by rpki-client