Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3vcmHSgIXrkQ1iWmuuV4km0oi3k.roa
File: 3vcmHSgIXrkQ1iWmuuV4km0oi3k.roa (raw, json)
Hash identifier: JLChSkNDgL5yNI89ePG74K+lzeB30vaGx4H1A8WXURQ=
Subject key identifier: DE:F7:26:1D:28:08:5E:B9:10:D6:25:A6:BA:E5:78:92:6D:28:8B:79
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01969C339DBD1D1475142052DC4F514BBF32
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3vcmHSgIXrkQ1iWmuuV4km0oi3k.roa
Signing time: Sun 04 May 2025 16:49:10 +0000
ROA not before: Sun 04 May 2025 16:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a09:4500::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a13:f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:33:9d:bd:1d:14:75:14:20:52:dc:4f:51:4b:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 4 16:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=def7261d28085eb910d625a6bae578926d288b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:91:91:1b:07:5a:ec:67:da:b5:25:5b:69:
67:c2:ca:75:37:80:97:52:78:71:55:5f:ff:52:c4:
fc:ad:9f:5f:42:52:a5:82:66:8a:52:db:c5:81:29:
b3:80:45:03:97:2e:32:98:ba:99:72:5b:0c:34:32:
e9:36:0a:1b:25:55:02:03:e0:17:f6:9b:82:c0:89:
8d:60:05:fc:55:d4:23:48:23:52:09:19:08:19:1f:
c2:2f:96:2c:0b:43:ec:4b:79:2a:4e:f0:56:e7:2f:
d0:cd:a8:f0:e2:af:cf:1a:15:00:b2:0f:a8:7a:0d:
31:da:68:ea:70:a0:60:10:4d:98:d2:c2:56:17:5a:
96:16:46:24:ca:bd:82:d6:ee:bb:83:7b:cc:11:22:
49:97:ca:3a:d6:25:2c:c4:0f:8d:ee:34:91:9d:72:
7b:c3:75:3b:18:7f:a9:c8:ca:d6:3a:07:17:8c:20:
4f:68:40:8a:a2:b7:11:e8:99:2b:e4:d7:85:ad:97:
4a:72:31:36:82:3e:3c:b1:87:ea:20:41:12:ca:ba:
b2:eb:af:10:18:15:d7:44:ec:48:88:5b:89:ee:ae:
c8:3f:a2:b9:b2:11:0d:b5:4d:52:8a:a7:ba:ae:96:
cc:7e:a1:71:90:05:ee:59:25:92:85:43:15:0a:1c:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:26:1D:28:08:5E:B9:10:D6:25:A6:BA:E5:78:92:6D:28:8B:79
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3vcmHSgIXrkQ1iWmuuV4km0oi3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:4500::/29
2a0f:dec0::/29
2a13:f40::/29
Signature Algorithm: sha256WithRSAEncryption
c9:9e:f5:aa:a0:22:ab:86:49:a7:88:37:27:31:71:39:36:ce:
74:ba:33:bc:cf:6b:94:27:34:75:d0:32:88:b6:69:83:6e:3c:
bc:14:77:eb:e5:f9:ef:2b:68:dd:79:88:77:63:c9:00:ab:6c:
84:27:fa:ef:ff:73:7f:5f:48:f5:6f:9b:d5:ea:29:36:b8:9f:
47:a6:4a:ea:3e:30:3b:e1:c2:10:fa:46:57:08:68:e4:b1:7f:
fc:f0:95:a0:e5:fd:9f:a7:8f:fb:3f:d9:ea:f7:c1:bd:09:ef:
da:eb:a8:55:ba:88:d0:f4:fd:be:7c:55:81:2d:7f:b1:38:d3:
85:9b:c1:5a:4a:a7:e1:cc:2c:8f:81:45:44:ed:97:81:74:fe:
66:a4:43:b0:53:e4:9e:ca:1b:fa:34:f6:c6:a1:da:f3:5e:5e:
d5:57:7e:15:43:5e:b8:71:e7:a1:a6:75:db:a7:b7:f0:27:c3:
81:d7:21:97:be:57:a5:31:99:11:36:14:04:66:3a:1f:d4:93:
2f:a0:3e:bb:1d:37:51:20:6b:23:d0:a6:17:d9:6f:8f:d0:eb:
04:9a:56:42:27:d2:41:3d:b4:06:7e:c0:53:75:eb:df:1e:d6:
05:fe:4c:82:e2:8a:2e:90:df:81:81:66:88:d6:57:4d:1d:b2:
01:20:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:58:11 2025 by rpki-client