Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b3fNOMVLzIHouQffIZCNE7Sos10.roa
File: b3fNOMVLzIHouQffIZCNE7Sos10.roa (raw, json)
Hash identifier: u1H34FgcAJauD7IyEEu52yR22LnxpbuXut4OyYB9yEA=
Subject key identifier: 6F:77:CD:38:C5:4B:CC:81:E8:B9:07:DF:21:90:8D:13:B4:A8:B3:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824BA2250FDB533161F50182D262F25
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b3fNOMVLzIHouQffIZCNE7Sos10.roa
Signing time: Thu 02 Jan 2025 17:51:23 +0000
ROA not before: Thu 02 Jan 2025 17:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210106
IP address blocks: 45.144.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ba:22:50:fd:b5:33:16:1f:50:18:2d:26:2f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f77cd38c54bcc81e8b907df21908d13b4a8b35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:5b:82:3f:18:a7:74:fc:24:b8:9c:37:b7:
47:c0:b8:1e:36:f5:60:7d:a2:6c:ac:7d:72:38:3c:
e9:3d:27:89:ff:e1:98:3f:d1:16:2e:4e:9d:62:2d:
c1:bd:b9:58:e0:f3:26:61:fb:92:0b:24:72:fa:5a:
b6:a9:4b:ce:21:22:ef:81:ed:be:96:14:91:30:7f:
2d:5b:81:e7:50:dc:e3:56:3f:75:de:6b:bd:b7:8c:
bf:ff:2c:bb:af:4f:98:fa:45:15:9d:c8:70:f7:ad:
e5:bb:3d:34:2e:f7:70:3a:b9:69:52:04:76:ff:c6:
8a:a1:6e:c7:b6:25:e5:f7:3f:82:28:59:dd:83:06:
bb:f2:70:dd:1c:45:36:9c:0e:9b:64:a9:6e:00:bb:
37:31:78:36:fd:97:89:b4:ab:27:cb:b9:5e:40:f8:
7f:49:4f:b1:8e:36:32:bf:58:1f:c7:b8:6a:47:db:
14:26:36:6f:5e:0d:8a:5d:7f:74:88:6f:24:72:48:
98:6c:57:df:97:0d:77:90:79:45:de:e3:47:f4:17:
cb:fb:02:22:7e:d0:e2:d9:04:ca:75:2e:54:fe:1c:
1c:d6:74:d0:7f:29:fa:91:28:b0:c3:04:52:a4:08:
85:5a:ef:44:c5:14:4a:1f:9b:18:0c:46:39:45:68:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:CD:38:C5:4B:CC:81:E8:B9:07:DF:21:90:8D:13:B4:A8:B3:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b3fNOMVLzIHouQffIZCNE7Sos10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.155.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9d:39:b0:0b:1c:fa:27:a3:39:a0:cd:0f:a1:9f:97:52:16:
cf:21:cd:15:9f:ef:c2:aa:0a:ea:34:31:a6:b2:98:ca:6e:5b:
ae:85:0e:b4:c5:a1:20:18:ae:40:68:44:3e:7b:44:8d:18:33:
41:ff:9e:9b:cd:75:ac:ce:12:e6:30:22:a6:b5:b5:b4:da:a0:
91:b3:1e:ca:bd:6a:a9:f7:45:f1:dc:d2:24:e1:40:bd:6c:81:
7d:19:37:8b:df:ba:80:51:a5:3f:66:75:e3:9f:b4:d6:fa:cf:
49:2e:f2:7b:80:30:6f:59:21:2a:22:89:39:65:c0:05:e8:e1:
ed:80:f7:98:2a:7f:7f:b2:73:c4:64:55:b7:47:47:c1:61:dc:
fd:df:80:aa:f9:de:91:45:eb:e1:14:db:17:8f:b8:9a:5c:3b:
fa:e0:07:de:20:fc:40:d3:2a:c1:71:b3:a0:37:ad:ad:b2:da:
f8:d6:56:28:5b:77:20:74:40:29:39:c0:18:7a:52:07:d9:eb:
da:52:70:a8:59:5a:4c:f5:37:eb:14:cb:2f:bb:7d:6a:31:5d:
3e:24:23:90:82:76:94:d7:dd:5a:20:2c:6e:12:e4:9f:bf:ab:
b1:60:9f:c2:a8:c8:1f:c5:cb:4c:e6:c6:39:93:b8:bc:ea:48:
bd:bf:d5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:14 2025 by rpki-client