Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iJ-DYlMJYaBfGlykm3HCMas-De8.roa
File: iJ-DYlMJYaBfGlykm3HCMas-De8.roa (raw, json)
Hash identifier: Eypa5GsebYqxK0I9mCDl9oakgHwxq2ezpZzQqjLVGpg=
Subject key identifier: 88:9F:83:62:53:09:61:A0:5F:1A:5C:A4:9B:71:C2:31:AB:3E:0D:EF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195FFF8066332FA3C060E0D5F1AA5363DA7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iJ-DYlMJYaBfGlykm3HCMas-De8.roa
Signing time: Fri 04 Apr 2025 08:43:19 +0000
ROA not before: Fri 04 Apr 2025 08:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137357
IP address blocks: 217.145.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:f8:06:63:32:fa:3c:06:0e:0d:5f:1a:a5:36:3d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 4 08:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=889f8362530961a05f1a5ca49b71c231ab3e0def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:7f:27:bf:87:db:58:b6:d1:ad:00:83:3c:
8a:6a:3d:29:7a:5e:7e:bf:4b:15:2a:ee:97:9d:13:
44:95:fa:d2:2d:16:a2:d7:5d:a5:14:85:d1:0b:67:
13:bc:02:1e:a4:4b:82:29:dd:4a:fb:72:e6:fe:48:
6f:15:21:80:68:76:0f:02:b1:6c:8f:02:6a:50:61:
74:26:6e:77:57:c3:be:d0:08:db:73:6f:bc:0f:95:
f9:98:08:22:bf:9b:6a:5b:d1:ed:ef:a1:75:1c:0b:
20:6c:12:f5:70:dc:6a:1f:65:8f:91:7f:83:40:45:
96:8b:8e:52:4b:53:93:88:2b:2d:61:f9:9c:ee:ef:
f8:74:11:c9:d3:d4:a6:47:02:4c:c0:09:a4:08:70:
f1:4c:11:7e:67:dc:7f:0b:a0:4e:a9:51:a9:6d:aa:
b6:b3:4b:c3:85:4f:f8:3e:a4:57:d8:e0:c3:dd:b5:
81:d6:1d:c3:72:62:d5:64:62:7b:9a:62:a4:44:bb:
d4:76:6b:3a:c0:93:fb:cf:e6:61:04:62:fc:66:9f:
f1:95:77:c7:83:f1:d9:00:49:55:76:99:a6:fb:fa:
57:e0:a7:4b:bb:2a:a8:f4:d3:4f:3e:ce:f2:6e:4e:
7f:4c:6e:8d:1d:f8:f1:56:ce:ed:29:e6:27:b9:2d:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:83:62:53:09:61:A0:5F:1A:5C:A4:9B:71:C2:31:AB:3E:0D:EF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iJ-DYlMJYaBfGlykm3HCMas-De8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7f:4a:04:58:a8:75:bd:3f:ff:80:e2:39:21:02:ae:72:62:
be:72:fd:d3:7e:e9:8d:ff:f3:d0:3c:50:e0:b9:f8:f0:8a:92:
61:d5:08:37:1c:b8:08:10:62:9f:59:80:95:61:ec:e7:da:e8:
da:20:b8:f0:77:b3:1f:5f:aa:34:db:e1:21:7f:27:f9:ec:5f:
c6:c7:84:97:98:34:ca:8b:f7:9a:79:e5:d6:bb:ea:ed:c8:15:
b8:57:34:14:64:08:46:31:d8:d9:64:a2:7e:7e:61:c5:a8:95:
b7:f0:3a:33:50:47:6a:bc:40:c5:0e:09:05:ac:9e:8d:ca:7f:
8e:e3:78:bd:56:a6:e4:8c:ae:03:06:7b:c0:3d:0e:d7:a5:b8:
bb:82:96:de:1b:ab:21:ca:f4:a2:f2:1a:b3:54:fa:26:8e:bd:
fb:55:0d:2f:96:55:10:5f:16:14:6a:c0:2b:a5:a8:83:9f:e9:
14:81:43:bf:62:77:3a:33:28:7d:89:22:9e:c8:d7:8f:54:02:
23:16:a0:23:0d:bc:b3:2e:87:a5:03:37:21:b8:36:9b:d5:4a:
38:91:30:e9:54:64:77:b8:50:aa:56:e6:ac:42:a7:77:92:31:
76:b5:e8:67:dc:79:25:6a:3b:56:e3:cc:e8:a1:40:f5:0f:36:
50:ea:db:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:33 2025 by rpki-client