Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dhck7-R1gIuQoifXomOo4tMMuTc.roa
File: Dhck7-R1gIuQoifXomOo4tMMuTc.roa (raw, json)
Hash identifier: eJEjwHCnXZOXICeOuHe3b/RSL1WIJl2eJrm8QwYIjko=
Subject key identifier: 0E:17:24:EF:E4:75:80:8B:90:A2:27:D7:A2:63:A8:E2:D3:0C:B9:37
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245D9406FB7DD93D7DA1673CE61568
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dhck7-R1gIuQoifXomOo4tMMuTc.roa
Signing time: Thu 02 Jan 2025 17:50:59 +0000
ROA not before: Thu 02 Jan 2025 17:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 94.156.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:5d:94:06:fb:7d:d9:3d:7d:a1:67:3c:e6:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e1724efe475808b90a227d7a263a8e2d30cb937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:9c:21:82:8a:07:e8:6d:01:f4:6e:ae:46:
73:65:4c:17:ba:32:c0:70:59:b8:c0:88:72:d9:4f:
72:fe:ce:bd:93:45:f1:6a:16:00:14:c0:97:61:bb:
9a:1a:c3:87:6c:43:b1:a7:5d:fc:9c:e6:46:21:79:
76:19:74:c1:b3:4c:9a:2c:1c:98:91:3e:b8:b1:60:
bd:55:b2:f0:03:38:18:8b:63:9c:ee:d2:aa:97:73:
76:c9:9a:a1:52:f5:31:1a:b8:a3:d6:c5:3e:df:e9:
ba:16:96:bb:fd:43:2c:8c:28:60:3b:f0:08:59:3f:
67:32:c5:e2:7a:af:7c:a2:1f:f2:7c:86:6b:39:ae:
da:39:37:69:34:7c:9b:b5:3c:52:2f:f8:9b:1a:0c:
12:ea:f5:9e:53:fe:77:4d:02:e0:f4:4f:c7:38:77:
57:8e:d4:4b:85:f2:6d:c6:1b:e5:89:d1:03:c6:cb:
94:1c:df:dc:90:62:c2:e7:21:e7:b6:1f:d5:57:0b:
88:f9:13:79:41:25:4a:1e:bd:64:99:c8:dd:5f:75:
3d:f9:f8:c4:e5:19:d2:76:60:fc:0f:44:b9:db:99:
b9:1d:dc:ec:b9:4d:26:28:94:d2:4d:e7:15:e9:8d:
2b:37:66:85:33:a4:a8:31:09:8f:b5:4d:96:b2:12:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:24:EF:E4:75:80:8B:90:A2:27:D7:A2:63:A8:E2:D3:0C:B9:37
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dhck7-R1gIuQoifXomOo4tMMuTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2d:4f:4a:2e:87:24:38:83:5b:ec:7a:91:30:b9:fe:53:ef:
1d:66:f0:8e:63:80:e8:f2:68:a5:c6:f7:36:4a:a9:81:f0:de:
13:f1:a8:28:d7:39:48:02:6b:f8:d7:c1:74:93:10:be:84:81:
f7:c5:b6:d1:60:af:22:0c:be:8b:8f:08:ff:86:e9:f1:21:29:
61:4e:fb:00:63:c7:e2:06:fc:88:10:6d:12:fd:9e:a3:b1:35:
39:a4:4b:81:0a:d3:bb:0e:68:5b:90:82:fd:25:9c:52:5a:2e:
4c:cc:11:cd:f7:ad:9e:e7:ae:39:b0:18:33:70:1a:c0:67:ca:
90:84:54:81:cc:8c:3e:b4:84:10:3f:10:6d:30:db:8c:ec:22:
0f:bc:a8:d1:8b:0d:ce:70:25:4c:69:84:93:df:5a:77:3e:41:
20:23:2a:7f:66:20:96:95:7c:6b:ca:be:c4:32:63:92:64:5f:
29:27:e7:9b:aa:b4:bb:c0:42:8c:3c:b9:b4:4c:97:72:89:54:
8f:f6:ea:61:34:db:3e:fc:9f:05:32:0a:9e:63:40:20:ca:d8:
4a:b4:a3:ad:10:33:39:a8:b2:c9:74:ef:56:22:23:d5:31:0d:
9a:43:f0:47:6f:6a:33:59:c4:b1:48:4e:14:c8:b4:3a:1f:73:
28:54:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:42 2025 by rpki-client