Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3o-I-D1-mdws7zG9gUIrxjBqbXk.roa
File: 3o-I-D1-mdws7zG9gUIrxjBqbXk.roa (raw, json)
Hash identifier: GWRGSGpjIoSB3wGyLXU2WlA4KKAqCXbRxZsiPY3j2P4=
Subject key identifier: DE:8F:88:F8:3D:7E:99:DC:2C:EF:31:BD:81:42:2B:C6:30:6A:6D:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282478FBB09AFAEA9D450F05233CA8F3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3o-I-D1-mdws7zG9gUIrxjBqbXk.roa
Signing time: Thu 02 Jan 2025 17:51:06 +0000
ROA not before: Thu 02 Jan 2025 17:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42942
IP address blocks: 87.120.228.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:78:fb:b0:9a:fa:ea:9d:45:0f:05:23:3c:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de8f88f83d7e99dc2cef31bd81422bc6306a6d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:f5:2a:d3:6f:01:50:bb:4b:fe:51:41:13:
75:47:48:a2:68:ce:ab:e7:e7:73:f1:1e:bb:09:21:
80:e9:9f:9d:33:f7:2c:15:95:d5:28:e0:35:cf:0e:
84:27:de:a4:51:6f:f0:61:01:33:83:d0:27:77:b5:
4a:9c:85:b2:62:43:4d:ac:ca:25:c4:57:be:eb:17:
3a:48:ff:34:9f:b0:08:67:23:cd:99:5a:5c:77:0f:
a1:29:36:6a:33:51:21:16:65:79:05:96:03:6a:69:
f9:b6:d7:50:8c:b4:a3:ed:1b:36:e0:eb:e2:ac:2d:
6f:a8:4b:1b:10:ba:65:c6:67:d6:32:6d:83:c9:b7:
8e:be:c1:2d:cf:2e:01:a9:cc:87:03:50:5b:f6:2a:
1a:87:09:70:6b:46:e8:4c:2f:79:89:05:cc:a9:53:
de:63:1f:b0:6c:11:0d:00:bb:ba:9e:1b:72:30:93:
af:4b:a6:57:15:9c:64:8d:66:74:0c:29:f7:fa:2d:
79:e3:e3:c6:8f:2c:32:ab:36:2b:c9:02:a0:eb:39:
2c:ba:19:6e:e0:3e:2e:1b:ea:73:57:8d:39:90:8e:
82:30:0d:ed:dc:59:37:e0:1a:c7:e0:bd:18:62:da:
2e:d3:50:0f:a1:e5:af:e5:58:13:20:e4:aa:8c:3f:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8F:88:F8:3D:7E:99:DC:2C:EF:31:BD:81:42:2B:C6:30:6A:6D:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3o-I-D1-mdws7zG9gUIrxjBqbXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.228.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:9f:4c:67:3c:bc:41:1d:11:9e:dc:28:87:75:a0:46:c0:f7:
11:83:00:df:87:1e:6e:84:d2:72:9f:cd:09:ee:2c:9c:e0:0a:
96:33:62:49:25:1f:2b:12:a3:a4:59:e7:1b:95:cf:67:30:a9:
0b:38:ad:48:2a:36:f1:e8:d6:5a:ab:ac:80:21:35:7d:6a:aa:
b8:9e:ab:c9:f9:be:3e:54:b0:28:ce:69:93:e6:7f:e5:aa:35:
12:4c:de:e4:69:14:1f:a7:53:bc:33:e5:41:b6:3a:02:6c:e9:
09:25:d4:e1:1d:ea:c4:d2:0c:7f:8c:99:0a:18:13:51:04:31:
15:5b:6a:c8:56:b7:90:c5:27:34:e0:6f:c2:f9:03:4b:9a:4b:
41:79:d7:77:e7:d6:26:53:0d:c9:05:ca:13:65:ab:bd:b8:22:
3f:d4:a9:68:6b:0b:68:81:dc:60:d6:dd:94:f4:67:7f:7d:2a:
0f:1d:cb:0d:9a:b0:46:b7:22:d4:7b:62:ee:d0:a4:40:cf:59:
e8:86:a4:df:de:c4:12:f9:81:2a:7c:1e:30:f3:d1:f9:c5:ed:
a8:fd:2d:3a:52:52:a0:aa:ff:59:ff:00:a8:e5:4c:6a:69:da:
02:3a:6b:56:07:5e:c6:ed:b6:99:0d:57:61:44:ed:e0:7f:8c:
6b:75:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:19:09 2025 by rpki-client