Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa
File: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (raw, json)
Hash identifier: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=
Subject key identifier: B3:79:47:E8:D2:98:5A:69:B0:26:19:4D:74:10:B4:67:8C:13:5F:BB
Certificate issuer: /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial: 019425FCCD9A02F0E2B997205C784A19A648
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa
Signing time: Thu 02 Jan 2025 07:48:32 +0000
ROA not before: Thu 02 Jan 2025 07:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31463
IP address blocks: 109.71.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:cd:9a:02:f0:e2:b9:97:20:5c:78:4a:19:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
Validity
Not Before: Jan 2 07:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b37947e8d2985a69b026194d7410b4678c135fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:7c:eb:e7:b0:55:6e:de:ce:e2:f3:52:2b:
81:f3:41:b0:cb:f9:e3:d2:59:fb:c1:ee:55:71:d3:
f4:19:a5:67:b3:de:2a:fb:7d:4a:bd:e4:46:39:27:
bd:69:5a:32:64:66:f1:b3:d3:d0:07:56:86:b2:a3:
4c:3e:73:b0:54:a7:45:d6:99:62:34:d9:e8:2f:4f:
ba:cf:e8:56:a5:6c:ce:62:8f:d8:dc:11:1d:ae:36:
29:a1:62:4c:56:3d:d4:4b:2d:01:1b:40:60:d8:61:
d7:e1:fc:4d:46:ef:a2:4b:33:06:56:12:25:d4:f5:
be:07:21:cc:19:27:cb:0d:08:0e:e9:5c:d9:7b:93:
f4:29:b7:dd:cd:50:da:fb:e1:4c:c2:b7:d6:46:a9:
df:3c:d8:75:60:f9:37:3f:c5:6b:f7:18:5a:f5:ea:
9f:02:38:b5:80:1b:79:3d:52:0e:6e:fe:bc:5d:25:
3d:fc:fe:95:5f:dd:dd:27:34:a1:4f:99:d4:08:c8:
85:09:58:54:f8:1b:ea:f7:08:c6:f1:a2:1a:b0:58:
56:82:a1:5b:35:ac:23:be:7c:03:c9:9e:e7:75:a9:
8d:2e:84:18:11:e2:c4:2f:cd:3e:dd:ee:6b:c0:08:
89:00:73:3c:67:0c:a4:e7:db:b2:38:e7:ff:c6:d0:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:47:E8:D2:98:5A:69:B0:26:19:4D:74:10:B4:67:8C:13:5F:BB
X509v3 Authority Key Identifier:
keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f0:1f:9a:a5:71:09:7c:57:d9:2a:61:80:ca:9e:43:2b:63:
38:70:3f:1a:f5:39:55:34:e2:88:be:4b:3c:a9:1a:b6:fb:c2:
d9:d9:1d:98:b4:4f:9d:78:ca:65:25:92:05:fe:93:5c:e8:df:
24:6f:fb:05:5f:d5:dc:53:77:37:74:7c:ca:1a:7c:20:01:41:
ea:e3:9c:8c:3f:ae:f6:72:93:bc:c3:71:55:e2:4d:4e:c8:33:
a9:e2:ed:37:58:e5:9f:c5:c5:d0:bc:9c:b2:59:bf:c0:9e:7d:
df:6c:e5:36:88:59:f1:d8:68:de:93:60:9b:a7:40:68:9e:12:
d6:27:f5:80:5c:94:e6:f2:7b:c9:b7:b4:ca:12:b9:c7:d0:bf:
00:5a:93:a5:5a:97:70:9f:fd:aa:a0:5d:61:e7:24:0f:a6:45:
69:eb:47:a6:58:a1:f8:00:ef:b3:98:c2:be:04:af:5f:33:b7:
f8:fa:f5:7e:53:fc:32:e3:04:96:50:ef:f9:4d:71:66:da:b0:
fb:51:2d:fa:e6:27:bc:d0:8f:77:a4:53:ae:36:35:c1:6e:b6:
8c:06:8a:d7:e3:03:e7:b1:9b:5a:f7:a8:23:23:52:76:ce:4f:
3b:d9:10:e3:e1:f6:b9:67:8f:19:a7:66:9e:5e:64:3c:29:87:
f2:ed:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:48 2025 by rpki-client