Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3dgwdFBn2PXVI0JsrotAUEKLYR0.roa
File: 3dgwdFBn2PXVI0JsrotAUEKLYR0.roa (raw, json)
Hash identifier: 7HuR03EpVzgap8e4ae91gdyjM/onEIpLgtNf42Acqus=
Subject key identifier: DD:D8:30:74:50:67:D8:F5:D5:23:42:6C:AE:8B:40:50:42:8B:61:1D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369FB58C6418E1B3E7C5053A3C4E2DC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3dgwdFBn2PXVI0JsrotAUEKLYR0.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 217.28.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fb:58:c6:41:8e:1b:3e:7c:50:53:a3:c4:e2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddd830745067d8f5d523426cae8b4050428b611d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:9c:da:e6:18:88:bb:83:02:78:e1:6c:19:
86:64:86:44:dd:1d:73:16:ce:0d:e3:18:a6:30:50:
88:65:98:0b:37:51:a1:ce:4c:9f:6c:89:38:7a:06:
58:69:aa:53:44:14:42:4a:2d:f2:95:10:ec:6e:30:
f1:a5:31:9b:3b:9f:10:9b:91:64:33:f7:99:53:91:
8d:4b:aa:bc:f5:c6:93:6b:fb:8a:67:80:0a:cb:90:
c0:d3:2e:dd:58:10:f2:6a:ad:70:d0:4c:a0:65:59:
c3:a8:2b:54:1c:33:6b:16:8f:27:64:96:9b:e2:9c:
1a:21:09:cd:66:02:59:00:b8:45:df:fd:c7:8b:87:
44:ab:af:19:e9:ec:37:04:87:a3:0e:cf:80:9b:2e:
01:6d:15:bd:6c:47:67:59:b0:57:ab:a5:23:dc:da:
08:4a:d4:8b:28:9e:39:09:71:42:fd:65:0a:14:b2:
a6:43:2c:80:b2:d3:52:49:a1:1b:26:c4:d7:a9:c8:
2e:64:ee:a4:ed:56:4b:39:6f:38:c1:a4:6c:a4:17:
3b:39:6f:5c:44:30:39:33:26:c9:0b:1d:d6:2b:21:
8f:2b:de:49:4f:b6:f0:5d:eb:b6:f9:7b:c7:af:bd:
d0:9e:05:6c:a5:b4:c6:c4:3f:22:09:79:a1:46:3f:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:30:74:50:67:D8:F5:D5:23:42:6C:AE:8B:40:50:42:8B:61:1D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3dgwdFBn2PXVI0JsrotAUEKLYR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:9e:02:e0:ac:c0:80:4b:d5:41:0f:56:02:65:1e:fe:d1:45:
55:15:1a:af:d8:80:ba:e3:25:fe:25:ed:6a:ef:09:d0:cd:12:
84:3d:7f:e9:8a:2d:ed:af:be:4b:93:ec:60:ce:e9:83:ae:1e:
ea:1f:c2:ba:aa:bc:f4:7f:42:6a:e2:25:4b:7b:e0:3a:93:27:
77:3e:40:c6:d7:4f:e0:99:1f:89:3f:25:90:17:a3:5c:ff:bc:
36:b3:50:90:d2:b1:4f:25:86:e0:d1:9e:50:18:e7:ba:4b:22:
be:6f:c7:21:6b:fb:f7:9f:c3:68:b4:cb:37:3b:3d:56:ee:d3:
cc:5e:b2:37:ba:9c:6b:1c:2f:01:c3:21:80:cf:74:79:4d:28:
e4:03:12:88:66:1d:15:59:ad:61:de:78:b3:cb:e2:e0:2b:6b:
9a:23:51:73:63:82:c9:a0:0f:33:7c:a8:86:88:a9:be:bd:80:
2a:2d:18:c5:e1:d0:63:43:ae:ef:be:27:f4:64:22:27:64:4e:
da:ce:30:73:1d:c0:21:72:5d:c9:3a:20:f2:52:0c:8b:4c:26:
ff:8e:e2:39:d3:1f:04:16:4f:00:25:7e:ce:7b:c3:e0:0f:73:
64:af:5f:96:1f:59:a1:b2:ec:36:11:e8:30:2f:db:99:e8:c3:
7a:2a:c7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:42:50 2025 by rpki-client