Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/P3jT3074ztf6Q9k-tDnLxk1X9xs.roa
File: P3jT3074ztf6Q9k-tDnLxk1X9xs.roa (raw, json)
Hash identifier: OQZGx3r1WGNBtxfpm5AaUYpQMRQcyHWfBZIkT/pZafA=
Subject key identifier: 3F:78:D3:DF:4E:F8:CE:D7:FA:43:D9:3E:B4:39:CB:C6:4D:57:F7:1B
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0195D6F363BB6AB6F366FAC412A761B45013
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/P3jT3074ztf6Q9k-tDnLxk1X9xs.roa
Signing time: Thu 27 Mar 2025 09:33:49 +0000
ROA not before: Thu 27 Mar 2025 09:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 45.149.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:f3:63:bb:6a:b6:f3:66:fa:c4:12:a7:61:b4:50:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 27 09:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f78d3df4ef8ced7fa43d93eb439cbc64d57f71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:28:86:24:aa:08:1f:92:ed:b3:e3:42:d2:
9e:3b:bb:c2:6a:f2:f5:c3:fc:a8:0c:d3:2b:de:4c:
6c:46:92:e2:49:1c:ff:dd:39:1f:26:dd:ca:c8:b7:
25:7a:92:28:76:5b:70:da:9b:41:e7:38:31:26:d1:
18:dd:1d:31:59:24:b9:4e:f8:a8:40:b6:89:bd:2e:
f9:24:eb:59:b2:44:d1:c4:0c:2e:51:c0:b2:f5:fe:
c3:9c:21:aa:aa:a4:fb:3f:c4:04:e6:40:29:1d:2f:
55:72:7c:e1:ac:a3:38:a7:16:59:12:51:3d:0c:1f:
61:8c:59:84:93:b0:cb:46:c4:8b:60:e9:51:d6:66:
52:5a:6e:f1:51:99:16:fc:80:8b:50:61:c6:62:6d:
5b:77:7a:16:0f:6a:33:59:99:4d:99:38:af:1d:f6:
67:f7:66:9d:c9:a0:0b:a2:71:05:5e:9e:a9:68:22:
2c:53:c5:8f:e4:02:54:17:84:e9:53:56:5d:79:84:
94:72:ae:90:bc:ee:24:59:69:5a:5d:08:8f:21:dd:
aa:e2:65:f8:58:3b:e0:72:1e:70:8b:04:76:46:42:
ef:aa:4d:03:e0:d9:26:10:1b:c3:84:b5:59:a5:d7:
d2:5d:9e:4b:b1:4e:ab:eb:dc:0f:33:5b:f8:17:76:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:78:D3:DF:4E:F8:CE:D7:FA:43:D9:3E:B4:39:CB:C6:4D:57:F7:1B
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/P3jT3074ztf6Q9k-tDnLxk1X9xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.27.0/24
Signature Algorithm: sha256WithRSAEncryption
57:85:f2:58:79:9c:43:ae:c1:ef:0d:4b:ec:da:45:16:a8:18:
c4:60:35:60:17:7a:f3:e3:b8:e7:4b:05:ec:21:5e:81:74:c9:
c3:5c:6c:20:85:e7:57:a1:4b:15:e7:9e:9d:59:5f:59:40:02:
df:28:27:b7:c2:a6:85:78:c3:32:0e:f3:93:a6:34:51:b6:18:
eb:25:c1:e4:48:46:ae:8b:da:5f:9c:66:6c:0e:02:15:41:9e:
ae:27:23:ca:d0:27:68:61:30:7d:cf:9d:13:95:d8:61:5b:00:
35:2a:54:15:7d:66:5e:77:ee:46:7c:50:2e:70:98:30:c8:54:
9c:a1:7d:df:00:d4:00:50:c1:0e:2b:9d:32:51:5f:b5:53:f5:
ed:23:09:1d:f0:60:cc:db:18:76:9c:bb:2c:61:5d:84:47:10:
ef:6a:a1:0c:f6:09:d8:d3:ab:ad:af:18:21:14:e8:4e:ae:f0:
6c:52:8f:47:e3:d8:4c:f5:50:4b:de:22:ec:63:21:94:fc:00:
34:11:e8:21:a5:d0:4e:68:d3:97:b8:f1:5b:89:c4:90:7f:2f:
b7:99:5d:01:e8:6c:a2:b8:41:a2:e4:48:f5:53:6d:a1:1f:ea:
ec:4d:24:1d:e7:53:3c:66:09:15:2a:ee:bb:d2:0b:90:15:1e:
e7:28:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:11 2025 by rpki-client