Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/3nAxOrqe3oi83iVjt7-kMzJ_imI.roa
File: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (raw, json)
Hash identifier: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=
Subject key identifier: DE:70:31:3A:BA:9E:DE:88:BC:DE:25:63:B7:BF:A4:33:32:7F:8A:62
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD5DF476B03D3B84450879B100E63D
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/3nAxOrqe3oi83iVjt7-kMzJ_imI.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207241
IP address blocks: 193.200.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5d:f4:76:b0:3d:3b:84:45:08:79:b1:00:e6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de70313aba9ede88bcde2563b7bfa433327f8a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:e7:ac:59:8e:69:e0:d6:65:eb:3c:f6:0e:
93:70:d8:5d:1f:d3:64:cd:63:48:ee:bf:a4:3b:e0:
87:ee:33:ea:d8:ab:4d:e7:10:5d:dd:0d:01:6c:fb:
01:d4:cb:f0:02:da:75:34:7d:ae:ab:0d:b8:30:35:
0b:f9:22:32:5a:1b:34:b8:dc:db:70:cc:ec:19:be:
b9:a9:32:f2:09:7d:b1:8c:9e:48:a5:97:4a:99:c3:
91:df:b1:39:c9:42:1c:28:d5:5f:ae:1d:e8:fc:4e:
12:12:4f:bf:f3:76:44:7e:a2:45:a0:49:1e:83:17:
19:aa:5b:52:b0:5a:e0:f2:a5:52:a4:d8:36:c9:49:
6a:be:6b:4a:f1:03:91:65:0c:80:a6:54:90:77:f6:
03:e3:47:64:cf:c1:5f:d8:7b:3c:40:33:8e:50:e6:
a2:e4:28:5e:07:24:bf:f9:29:8b:27:ff:f1:bd:63:
92:ac:61:32:b2:3f:88:06:5d:39:16:c8:de:ce:51:
b6:2e:82:90:d4:01:0f:00:9e:3d:b8:f4:c8:65:85:
9a:e6:45:e4:ec:12:0e:60:91:ab:41:64:53:64:9c:
5b:9b:89:6d:c1:11:2b:75:50:55:83:f3:26:a4:d7:
4a:d3:bc:68:36:25:7d:c4:98:ff:13:47:6a:bd:17:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:31:3A:BA:9E:DE:88:BC:DE:25:63:B7:BF:A4:33:32:7F:8A:62
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/3nAxOrqe3oi83iVjt7-kMzJ_imI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b3:14:8e:73:a4:9d:e0:4b:54:d1:71:be:74:49:e9:aa:35:
c4:08:f0:21:8a:77:4d:a4:e3:f6:2f:ae:05:ac:b3:99:bc:78:
3b:cf:15:48:39:fb:20:9d:ad:f9:23:9c:20:47:17:c4:92:ce:
a2:70:d7:e4:f1:05:e3:db:60:62:4d:a9:fb:89:bc:6d:cb:76:
25:c3:eb:9e:93:f6:a7:fb:1d:e4:12:d6:6b:c9:70:a1:31:38:
74:59:e3:ba:0e:74:e2:47:40:7e:78:28:d7:56:16:49:3f:a0:
1f:4a:46:e3:43:4b:c5:4a:6a:19:cb:a2:c5:5a:00:66:4c:16:
c9:95:06:15:2e:66:f3:ba:a7:a1:e8:eb:6e:ad:e0:17:fd:42:
c1:00:06:c5:60:2b:6b:be:8a:3a:8d:51:56:b5:e4:b2:71:47:
ca:5d:57:d0:df:10:e2:08:fa:bd:a5:47:04:01:be:94:2f:80:
59:e9:8f:cd:3c:99:33:c8:ad:36:ff:de:ec:84:24:c4:61:03:
22:b3:57:29:5f:35:9f:e2:96:61:57:2a:06:08:90:d2:cc:80:
6c:1c:b6:ca:b9:3e:be:94:17:1d:53:b4:77:48:64:74:33:d7:
9b:5a:85:df:65:6b:ae:94:e0:c0:7b:39:6e:86:bc:af:33:4e:
67:c4:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:11 2025 by rpki-client