Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa
File: 3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa (raw, json)
Hash identifier: mHlRrwC758D0HqzkPpUCJ65f9p+erZHSEHy+5VU4L4A=
Subject key identifier: DD:95:84:8E:01:69:95:A4:79:92:02:23:68:2A:82:3F:AB:5B:8E:C9
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 019425212DBD538F806AF4D63EF319166A76
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa
Signing time: Thu 02 Jan 2025 03:48:38 +0000
ROA not before: Thu 02 Jan 2025 03:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.14.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:2d:bd:53:8f:80:6a:f4:d6:3e:f3:19:16:6a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jan 2 03:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd95848e016995a479920223682a823fab5b8ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:8a:14:af:e4:d1:ee:76:a4:0b:57:03:bb:
be:9a:dc:57:0b:57:e0:da:7e:95:04:46:c2:9c:ba:
03:30:70:fb:ce:57:60:6b:69:d8:24:bd:c6:c9:d9:
20:d8:da:cc:b2:94:6c:7e:9f:c5:88:b4:67:d1:71:
86:3e:99:57:b2:00:34:80:ec:9e:ba:45:10:a7:2d:
71:4b:0b:5f:06:95:9a:b8:80:f7:f8:60:03:84:9b:
63:3a:82:76:84:7c:e1:fa:24:f8:6f:b5:f0:64:c9:
23:cd:54:8e:22:53:76:4d:ea:5c:68:61:ae:4c:4e:
a7:61:39:e6:74:8f:3f:32:56:d0:ab:79:6e:4d:30:
f0:da:a4:47:09:e5:98:0f:2b:0a:5d:49:40:cc:72:
03:a7:4d:57:57:da:91:f9:eb:d5:ac:78:72:fa:fb:
08:ca:a1:8c:2c:bc:12:85:fa:27:4e:13:e2:79:79:
fb:d5:aa:f8:11:e4:c6:3c:bf:5d:22:48:71:9f:a9:
49:c5:4d:0f:31:0a:c7:e1:12:18:d0:2e:e6:de:45:
a6:88:e3:f3:cd:5c:fa:d5:73:69:9e:cb:f1:ca:4c:
1a:f7:4d:a3:3e:2e:bd:c1:90:0f:6f:81:e4:73:58:
ee:a0:55:f4:e6:0f:5f:d6:3f:62:1c:b4:da:fa:2a:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:84:8E:01:69:95:A4:79:92:02:23:68:2A:82:3F:AB:5B:8E:C9
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e7:fa:dd:1d:0d:02:0c:b1:3f:38:11:b1:3a:d0:e2:01:41:
f2:0e:21:e3:51:b6:8d:8e:0b:5d:9b:a3:4a:44:26:08:bc:27:
54:9f:ae:9a:3e:1d:24:e2:b0:39:0e:30:39:a0:bf:1b:16:1e:
c2:22:53:a3:bb:5a:57:ff:50:56:ef:75:a2:ed:c9:56:b4:d1:
a8:84:28:86:54:79:51:30:f8:72:39:65:10:2f:ce:40:37:3e:
38:69:50:96:b5:e8:b5:bd:ae:c3:de:8e:65:15:9c:cb:bf:1b:
12:40:70:78:d9:6b:15:9f:11:3b:63:69:5f:e7:08:1f:a9:ff:
a2:c4:d8:10:a4:18:cb:69:22:6e:3a:e4:12:dc:b5:34:e7:69:
e6:9f:83:c6:45:44:42:a5:6d:1a:77:e6:e3:17:2b:ea:0a:fc:
17:34:38:27:93:71:db:74:79:a1:db:ed:38:03:c3:9f:0a:14:
2b:02:7b:c6:09:53:83:87:b0:27:89:3c:df:03:51:44:54:a3:
95:87:f9:9e:e5:22:bd:e1:35:a7:68:2b:5a:97:27:e7:d6:a4:
da:01:b9:51:1b:1e:55:e6:ce:77:f2:10:97:03:7a:70:9d:09:
6c:06:a3:00:85:4d:34:6d:93:8e:b0:37:53:e9:3f:c0:e7:0e:
18:c1:d8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:03 2025 by rpki-client