Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa
File: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (raw, json)
Hash identifier: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=
Subject key identifier: 1D:CD:F1:ED:C3:0C:85:0D:A9:16:88:B2:DA:C6:89:E1:79:65:AD:51
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 01941F8C6E8ACA5C2B0BBE1CA4CA0670A977
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43361
IP address blocks: 37.17.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6e:8a:ca:5c:2b:0b:be:1c:a4:ca:06:70:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dcdf1edc30c850da91688b2dac689e17965ad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:91:46:77:e3:f8:0b:50:4e:ad:55:83:db:
c1:93:15:fd:89:c2:76:66:75:2f:92:bb:2e:13:9c:
71:82:0f:0d:78:45:c9:68:b7:75:a1:dd:75:0f:d0:
5d:a7:c9:74:d1:4f:7f:63:2f:8e:69:58:f6:ab:4e:
5e:a5:5e:c6:ff:4c:d0:6b:51:c9:a8:e9:f9:a3:a2:
9b:7a:4b:3f:ba:50:df:9f:5b:59:25:78:81:a3:a8:
7a:ff:e2:a8:40:e1:bd:d7:d8:9f:de:3a:dd:92:1a:
43:9b:bb:1a:7d:01:b0:07:26:a7:1f:05:19:0a:e6:
af:67:15:ad:31:b7:bf:33:1e:99:34:9c:ce:61:3d:
11:11:6c:26:82:09:34:00:f7:b7:0e:cb:f7:d9:a9:
9e:2d:a7:03:75:2d:8b:4d:8c:5b:cf:9e:f2:5c:9a:
41:87:8d:7d:bc:70:73:e6:63:ee:08:2c:f6:15:bd:
67:73:a7:c0:cf:5f:77:0f:4e:57:dd:43:38:dc:25:
3a:cd:af:90:e5:e9:ed:a6:02:18:20:2c:c8:dd:ea:
b9:81:85:71:83:8e:2a:b3:47:34:7a:be:5f:d5:19:
bb:5f:53:54:ab:56:2d:02:f8:ee:be:86:19:3a:77:
88:31:52:c9:42:8d:b3:c1:de:4c:be:d0:43:24:0b:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:F1:ED:C3:0C:85:0D:A9:16:88:B2:DA:C6:89:E1:79:65:AD:51
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.244.0/22
Signature Algorithm: sha256WithRSAEncryption
55:a0:7c:f3:84:0c:1f:59:95:08:3f:05:19:6e:51:3a:b2:3c:
ff:34:8e:82:65:8d:cd:33:e6:ef:94:75:88:c7:25:25:e0:b5:
a8:00:44:1a:15:c9:23:24:75:4b:b4:de:cc:b0:f4:4c:72:f6:
26:6a:0b:1f:b7:26:82:84:bc:7f:8f:a0:b8:31:a6:16:fd:70:
0b:71:72:d4:89:af:64:9b:32:2a:75:e2:0f:56:f8:46:11:f3:
ea:71:54:52:e1:40:24:fe:4c:d7:be:9c:8b:7f:26:c0:0f:bb:
86:d4:c7:9c:5a:0e:21:4e:76:82:b6:e1:6e:61:4f:a6:c6:4a:
d6:38:7b:55:f6:db:c2:16:86:3e:6b:7c:5e:e4:d7:d3:4c:3c:
cf:a5:e4:c8:89:f7:31:ee:41:98:ab:c5:d9:88:e3:28:ca:3b:
f3:19:20:8d:fb:fa:07:40:a2:86:0d:48:56:f3:97:bb:fb:b5:
01:70:4f:c5:e6:b4:10:f8:28:3b:fc:d3:d5:8e:ff:2f:b8:46:
ec:60:22:2c:84:d6:39:e9:b3:ff:36:88:f3:6d:df:3e:7c:b9:
29:41:ff:1a:05:94:5a:27:58:25:cc:83:64:b8:ac:cc:ec:c7:
8a:d1:62:cb:35:08:18:74:48:67:d2:0c:10:71:bb:34:28:7a:
16:e4:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:44:24 2025 by rpki-client