Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/3YfXMGxAROTBpSHK0nXhT4XXVLA.roa
File: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (raw, json)
Hash identifier: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=
Subject key identifier: DD:87:D7:30:6C:40:44:E4:C1:A5:21:CA:D2:75:E1:4F:85:D7:54:B0
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D656CD6A5F17BC341CE180B40B8790
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/3YfXMGxAROTBpSHK0nXhT4XXVLA.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204592
IP address blocks: 82.114.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:56:cd:6a:5f:17:bc:34:1c:e1:80:b4:0b:87:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd87d7306c4044e4c1a521cad275e14f85d754b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:50:50:0d:b0:a7:41:1c:90:db:06:b9:d2:
22:11:37:b4:b0:6a:90:01:1b:ba:f7:42:f8:aa:ce:
9f:5d:ea:7d:54:f4:c5:6a:f9:9b:5a:d5:2c:66:61:
91:f0:ef:a1:9e:13:40:24:70:e0:a7:96:75:9e:ed:
4c:de:74:06:24:25:28:01:76:97:c3:31:fb:ab:1d:
cc:ba:35:39:30:63:33:d4:ec:9c:55:e1:19:7d:ea:
cd:e3:ce:00:d1:9e:47:d2:f1:88:6e:0d:3c:e8:8e:
cc:2a:18:c2:8f:ca:ec:0a:9b:cf:8f:f8:3f:4f:1f:
66:65:5d:9f:36:07:a8:3b:7c:3b:c2:3b:67:77:fe:
7e:86:5e:97:9f:0e:ce:d5:ce:f8:3c:8d:1b:4b:83:
d2:7a:3f:f3:2b:09:c9:85:5b:b9:10:44:76:bd:a0:
4e:e1:0d:91:cc:22:3c:97:07:1a:cd:38:2b:58:e6:
71:3c:cf:74:63:a7:63:8a:9e:f3:67:43:78:fd:69:
11:a5:d4:05:2d:89:aa:ec:f4:ae:0c:43:5e:37:c5:
da:0f:15:d8:fd:de:ec:48:d8:d2:82:d7:0c:40:e5:
e5:5e:a6:77:bf:2b:e9:83:74:d0:48:e7:f5:95:a9:
36:f0:46:27:60:26:c6:05:a6:53:0b:c7:54:f6:b4:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:D7:30:6C:40:44:E4:C1:A5:21:CA:D2:75:E1:4F:85:D7:54:B0
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/3YfXMGxAROTBpSHK0nXhT4XXVLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.44.0/23
Signature Algorithm: sha256WithRSAEncryption
24:5e:78:67:0e:83:45:28:02:78:94:84:fd:e2:44:1e:22:25:
7f:63:01:6e:d2:72:51:2e:cf:7c:8a:04:6f:c0:05:16:1b:94:
ea:df:66:b1:b7:b4:d9:12:59:11:af:bd:02:97:53:4a:a3:a4:
65:38:be:41:7d:19:23:23:c9:d7:6c:50:81:9b:50:75:3f:39:
08:f7:58:5f:92:6a:6e:d9:c2:4d:f4:23:0e:3e:9a:52:d7:94:
d2:d5:7b:f4:91:85:74:ed:46:91:c1:ea:cc:aa:50:c4:85:5a:
61:62:e1:0f:b7:dc:0b:69:29:e8:3e:1f:91:5d:4f:dc:30:6e:
81:ab:ec:e4:09:6f:9f:24:d4:06:51:ae:d5:19:5a:18:cd:fd:
16:f4:5a:87:2d:72:42:30:a9:52:48:eb:8c:fb:a6:cf:6a:f8:
82:28:4f:c3:49:88:2c:98:af:5a:5e:be:f5:4e:74:d0:68:00:
16:1a:0c:95:c9:f7:37:3f:c6:6b:47:b3:2a:3e:0b:e2:5d:66:
43:c2:e3:87:a2:c3:59:2f:f5:63:24:e7:ff:65:94:4b:ba:d8:
fc:f5:3c:cc:14:77:ce:fb:56:f6:d3:8c:b9:3f:40:7b:a7:b6:
82:45:80:6f:ae:35:7c:2c:66:3e:94:db:00:0c:aa:94:11:05:
e5:eb:10:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:51:24 2025 by rpki-client