Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pp3VJwb_RXJSozaYFsc6saD_XK4.roa
File: Pp3VJwb_RXJSozaYFsc6saD_XK4.roa (raw, json)
Hash identifier: NNfy+VwXVkkla8VV6zjpfNbDGtptsFSyR9y3uoDtFaQ=
Subject key identifier: 3E:9D:D5:27:06:FF:45:72:52:A3:36:98:16:C7:3A:B1:A0:FF:5C:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282481B69CA9BF846234FA97EE62C0BF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pp3VJwb_RXJSozaYFsc6saD_XK4.roa
Signing time: Thu 02 Jan 2025 17:51:08 +0000
ROA not before: Thu 02 Jan 2025 17:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47969
IP address blocks: 45.9.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:81:b6:9c:a9:bf:84:62:34:fa:97:ee:62:c0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e9dd52706ff457252a3369816c73ab1a0ff5cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:2d:24:ff:6b:4b:c3:f8:4c:86:16:44:b1:
53:52:70:55:e3:5b:36:bd:f3:43:85:e2:23:51:71:
e8:a3:e7:40:b6:66:1d:a3:24:6c:ae:a1:fc:c8:1f:
dc:ce:86:eb:09:00:b5:4d:5e:4d:f7:ea:ab:27:7d:
a9:b1:1d:cf:26:3d:1e:ad:5f:04:38:b9:31:65:02:
ed:9f:e1:bc:0f:ea:ce:ee:d0:d7:46:de:c5:aa:73:
75:c0:13:ae:28:51:3b:33:4b:c5:af:66:09:03:e9:
aa:46:35:db:0b:64:49:38:7d:50:ee:ac:81:7f:3d:
2b:7b:1a:cb:e5:62:27:77:eb:21:f2:d7:7e:a8:5f:
82:46:97:7b:9d:13:d8:b1:0f:cc:c7:04:df:ed:a6:
41:76:86:09:f3:f1:c8:fd:55:28:58:1c:04:09:bb:
af:8e:43:6d:25:a6:b7:c6:01:5b:9c:d5:ad:4d:0a:
49:fd:5a:e2:40:2c:71:6d:ea:57:ee:c4:54:b8:af:
37:2c:11:c5:c8:41:55:44:ac:8f:43:94:b8:1f:8c:
04:01:d1:a8:6d:88:ab:53:7b:4a:67:55:70:7b:2a:
70:a5:8c:ce:76:68:7e:bf:8f:a6:7e:ef:ee:2f:9f:
db:86:55:2c:c8:0a:66:1e:8b:79:14:6c:85:56:15:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9D:D5:27:06:FF:45:72:52:A3:36:98:16:C7:3A:B1:A0:FF:5C:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pp3VJwb_RXJSozaYFsc6saD_XK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.158.0/23
Signature Algorithm: sha256WithRSAEncryption
55:6b:f7:19:24:5f:42:a7:9e:31:aa:db:dc:d3:54:93:ad:17:
d6:95:5b:c5:13:bc:83:35:8a:f1:8a:21:e8:ea:57:e1:eb:8b:
16:96:bb:0f:5a:cd:7d:a0:2a:2a:2a:d5:55:db:9e:65:e6:c0:
d1:fd:dc:d0:9e:8e:49:3b:62:83:c1:28:92:3a:02:0a:76:0b:
16:4c:59:58:27:d2:ab:9e:0b:3f:7a:4c:0a:15:d9:4f:91:0b:
06:ec:3c:3b:36:7a:0e:d0:44:df:d8:b6:dc:d9:6f:c3:bf:8d:
69:01:63:16:56:84:02:1a:44:c8:6b:74:82:2d:fd:7a:d4:a8:
6a:10:76:0d:ae:ed:74:a8:fe:42:d9:23:a9:0e:fd:8a:1b:4c:
f3:67:36:d7:25:b0:a3:8c:75:7a:86:18:a6:9c:af:d4:c6:a6:
53:c0:ea:2b:63:2e:19:51:56:46:d5:51:f1:34:42:be:ac:31:
97:b0:11:9e:0f:62:43:86:45:e8:3f:1a:99:a3:d7:b4:68:ca:
ae:08:e8:ad:c3:bf:73:c6:36:0d:14:fa:ce:c1:ef:35:f6:bd:
a1:41:37:d8:ce:6f:e9:91:89:25:c9:0b:94:a3:6c:cf:34:e0:
7a:1e:b0:bd:35:80:af:1b:4d:ee:3b:e6:76:85:63:ed:eb:1f:
c5:bc:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:43 2025 by rpki-client