Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DsQ3XuL18x6JXJPIAS7Bywor1FI.roa
File: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (raw, json)
Hash identifier: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=
Subject key identifier: 0E:C4:37:5E:E2:F5:F3:1E:89:5C:93:C8:01:2E:C1:CB:0A:2B:D4:52
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019427B59ECDF50E1D0C2450B99D4B86272F
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DsQ3XuL18x6JXJPIAS7Bywor1FI.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47639
IP address blocks: 91.208.79.0/24 maxlen: 24
2001:67c:2f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9e:cd:f5:0e:1d:0c:24:50:b9:9d:4b:86:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ec4375ee2f5f31e895c93c8012ec1cb0a2bd452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e5:90:3b:4a:e2:32:75:cb:fe:6b:31:8c:f9:
01:ba:7d:73:4b:5c:ad:2d:44:64:03:90:7d:bb:1a:
a9:05:ae:4b:71:94:6a:41:ae:2d:2a:24:ae:97:e4:
0e:93:22:25:da:b9:1e:df:52:8e:2f:55:24:f2:f1:
44:52:e2:ac:21:1f:2c:fa:68:7e:35:33:8f:b2:59:
cf:1f:b8:aa:a2:66:ad:e9:5a:73:a2:3a:03:57:b4:
e3:6d:d4:15:74:f9:81:54:7c:9b:05:09:88:96:08:
82:ee:17:f4:b1:bb:7f:93:cc:4d:b2:6c:9d:6e:01:
22:b3:aa:05:d1:e4:92:45:35:34:6a:f7:e7:92:78:
e5:13:e9:3c:2d:d9:85:23:2b:86:58:f7:eb:3b:0c:
1a:9a:fc:c9:7a:f7:f6:8e:8c:bf:1b:09:70:94:b4:
38:6a:1d:e5:ac:59:7a:a5:40:e4:3b:27:9f:04:65:
5d:be:a4:be:4d:7a:25:76:dd:36:c0:be:ec:01:e7:
d7:74:b9:25:55:36:67:22:0b:ba:d1:41:2b:b8:65:
3c:36:1e:06:ec:30:da:04:4c:fc:e8:2a:3c:31:68:
15:41:7c:66:1d:25:ac:1a:46:3e:af:6b:a0:2c:95:
20:8b:3f:b4:05:70:cb:2f:a0:3f:d5:d5:28:f8:e4:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C4:37:5E:E2:F5:F3:1E:89:5C:93:C8:01:2E:C1:CB:0A:2B:D4:52
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DsQ3XuL18x6JXJPIAS7Bywor1FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.79.0/24
IPv6:
2001:67c:2f8::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d0:f4:36:2f:44:cd:47:bd:fe:5e:a8:0b:a9:94:dd:73:32:
95:d1:f9:d3:4a:72:3e:7b:cd:d8:89:a7:b9:2a:3b:d8:23:9c:
71:56:e6:c1:2d:e3:3e:95:a5:c5:00:66:70:ec:2d:cf:76:63:
b1:dd:3f:f5:8f:d8:63:fc:9d:fc:9f:7c:86:f6:62:d9:18:45:
77:13:a3:9c:1a:c9:61:52:43:65:cd:78:cd:ba:10:e3:d7:ed:
9d:1e:08:d8:db:b4:67:82:c9:95:a8:aa:29:d0:26:ca:fd:fa:
aa:2b:41:3f:d8:19:71:9d:3f:94:be:e4:df:ef:e0:6f:44:2c:
b7:b8:f9:6a:b5:85:87:90:7a:21:19:b7:41:9c:8b:76:c0:69:
9b:63:96:6a:39:e3:2a:d8:89:0b:ea:69:0f:53:56:fa:62:10:
93:cb:3e:01:42:b7:9f:ec:2f:8b:27:d5:98:66:85:c0:24:f1:
ad:da:d9:45:ba:8e:74:05:fa:82:bb:4a:06:92:6f:0c:be:a8:
e4:5e:0a:82:86:60:60:c6:12:9a:26:0c:c6:37:98:c8:d4:f5:
59:d6:e5:45:32:c0:dc:01:c7:6b:1b:e2:11:87:3a:bf:c6:47:
0d:3d:d1:72:e0:00:d1:f4:73:80:cb:d3:0f:91:55:08:0b:73:
a9:b9:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:17 2025 by rpki-client