Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DaDDKDVb6wIYIceRMrsxxRSQAKA.roa
File: DaDDKDVb6wIYIceRMrsxxRSQAKA.roa (raw, json)
Hash identifier: QCw6QxJWklgeaWRjab4uyB4Y3VI+GuC+AVq8a7hQFcY=
Subject key identifier: 0D:A0:C3:28:35:5B:EB:02:18:21:C7:91:32:BB:31:C5:14:90:00:A0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826ADC8D5B7351ACD5B0BEE26FD1C4F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DaDDKDVb6wIYIceRMrsxxRSQAKA.roa
Signing time: Thu 02 Jan 2025 17:53:30 +0000
ROA not before: Thu 02 Jan 2025 17:53:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20454
IP address blocks: 84.32.46.0/23 maxlen: 23
88.216.44.0/23 maxlen: 23
88.216.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 23:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:ad:c8:d5:b7:35:1a:cd:5b:0b:ee:26:fd:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da0c328355beb021821c79132bb31c5149000a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:a8:3b:60:dd:4a:95:45:19:2b:e4:06:7e:
5f:e7:ca:bf:89:7f:36:7e:a5:43:ce:12:0e:96:b9:
d1:fa:0a:aa:30:04:89:a7:8f:6c:99:fa:b5:0b:4d:
d7:67:9c:7b:ce:ab:66:ac:3f:06:74:16:50:d3:38:
00:c3:d3:ef:77:67:5a:88:98:77:13:f5:bc:2a:69:
33:3c:6b:87:64:3e:ca:85:cf:a7:52:44:cc:75:31:
93:19:82:ce:a2:12:b0:0d:c6:b4:c8:a4:bc:2a:d9:
3c:8e:b1:1a:10:0b:8a:1d:f0:d0:e0:af:4d:68:2d:
99:39:2c:c6:b5:c6:82:d1:22:b6:67:63:0f:3c:56:
5a:63:7e:b4:71:bd:ac:0d:12:fa:64:3c:cb:15:0a:
e9:cb:dd:7f:d8:10:d9:4d:0c:f7:15:2a:30:17:b9:
c3:97:6c:2c:b7:80:20:28:3e:5a:ea:f0:0e:be:ae:
91:fd:34:39:5c:33:15:97:51:3e:e9:e0:f4:6b:9f:
08:4c:dc:f4:08:5e:8f:1d:5f:5f:c0:3c:09:a2:4d:
c0:09:dd:3a:b9:5d:ee:fa:9a:1f:33:fc:a9:15:f8:
f9:df:7a:e7:7b:d0:4a:c6:2f:bc:60:83:79:3b:9f:
80:cf:74:83:5d:a7:fc:f9:1b:f5:ed:fc:b5:4d:63:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:C3:28:35:5B:EB:02:18:21:C7:91:32:BB:31:C5:14:90:00:A0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DaDDKDVb6wIYIceRMrsxxRSQAKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.46.0/23
88.216.44.0/23
88.216.134.0/23
Signature Algorithm: sha256WithRSAEncryption
95:df:08:48:7c:c3:33:79:1b:3f:bb:45:8d:d0:2b:c6:45:39:
3b:ea:b4:98:af:13:ef:db:ed:98:e0:b1:4a:27:0f:fc:8c:ae:
60:fe:79:25:5f:f4:7f:fc:c9:d2:35:5f:b0:8e:17:3e:7c:f5:
5e:84:56:3b:5a:a3:96:80:af:86:0f:df:19:c3:a8:80:83:b0:
9f:c8:f3:57:54:43:7e:c0:72:ef:28:ca:a9:12:de:0a:d3:e5:
9c:f3:df:3a:12:ba:71:3d:75:c3:b6:f2:33:96:d9:ac:61:76:
b8:60:e6:16:68:1a:c4:80:de:02:7b:6a:75:0e:3b:8c:02:58:
c2:e8:34:5c:28:3f:78:8a:51:90:0e:e7:ae:96:7f:82:f3:26:
9e:67:5c:ee:9d:9b:69:52:f6:5d:2c:09:4b:8c:28:07:2d:81:
f3:52:09:a1:78:d8:88:14:d9:ed:e0:85:b8:14:f2:34:e4:e5:
5d:26:7a:d4:d1:21:a6:70:c1:7b:fb:c1:d8:ec:e7:1a:a5:80:
77:bc:68:a1:de:26:fa:3e:07:10:0a:29:a6:2c:1a:f8:61:8f:
1e:a0:61:fb:81:38:65:67:d1:4f:c3:64:f7:6d:c6:12:25:32:
dd:77:8a:be:eb:69:af:c5:f2:58:f5:10:4c:04:3d:52:bc:4b:
85:d2:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:25 2025 by rpki-client