Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/_TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa
File: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (raw, json)
Hash identifier: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=
Subject key identifier: FD:36:5F:93:54:66:7B:27:F5:CE:F7:3B:69:3C:35:37:FA:3D:8E:5E
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 019426D9DA654A800D951EFB3D55EA203A3F
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/_TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207839
IP address blocks: 84.234.104.0/22 maxlen: 22
84.234.104.0/23 maxlen: 23
84.234.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:da:65:4a:80:0d:95:1e:fb:3d:55:ea:20:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd365f9354667b27f5cef73b693c3537fa3d8e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:ae:98:5d:7e:c3:70:ca:0d:13:19:9b:65:
ae:4d:33:00:c3:10:25:8a:9d:e1:ab:b1:67:ce:ea:
f3:9d:7f:6e:29:da:31:1e:cf:33:f6:57:68:1c:9e:
40:e8:fd:ac:35:bc:b0:8a:c9:d0:f9:61:bc:f1:bf:
84:65:a0:90:76:79:b8:81:f4:05:a8:ad:20:b9:b9:
a6:02:28:d6:5c:06:24:19:dc:f8:77:fb:5e:ab:15:
49:7d:de:cd:e8:8d:66:40:d5:65:54:1a:b6:fd:62:
4a:3f:91:76:a3:6e:d8:32:95:ac:40:ad:9c:13:5e:
3c:60:43:b3:09:c0:55:ac:c7:52:de:c3:12:c5:1b:
9c:81:f3:5d:b9:0f:c0:08:eb:a2:11:3d:e4:1a:46:
32:05:dd:0d:27:f1:ec:b5:e1:b3:fd:29:b0:1e:1a:
09:7a:25:e7:32:ae:f5:c0:1c:bc:c7:53:13:6a:f5:
23:48:29:79:22:97:28:97:ff:63:23:2b:30:d1:a9:
6a:3f:de:ef:57:2a:92:15:a6:98:e5:8d:6d:08:d6:
4a:22:f4:ed:d5:97:92:94:47:a9:c5:71:0d:3c:aa:
fd:e2:18:a1:ea:d9:c3:59:8b:85:04:01:7c:06:7f:
44:7e:16:37:ed:0a:8f:ea:9f:41:e2:5b:21:92:22:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:5F:93:54:66:7B:27:F5:CE:F7:3B:69:3C:35:37:FA:3D:8E:5E
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/_TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.104.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b2:3e:0a:79:18:9f:53:48:d7:ae:ee:24:39:6e:50:94:c4:
a5:48:9e:a2:96:5e:c7:d0:d7:e7:84:6f:01:e5:38:d6:f5:4b:
9b:38:cd:9d:f5:7c:2f:23:59:98:c0:fb:80:b8:f0:2b:e4:31:
18:18:99:d6:02:a9:fd:ba:79:7b:df:7e:01:1e:ab:74:20:60:
69:c3:cf:af:bf:ad:bc:76:b5:d9:70:48:3a:11:0d:f2:72:f2:
ae:32:7d:f7:1e:4c:51:2f:50:09:64:07:ca:a3:e1:c2:d8:01:
d6:e5:ff:65:07:ec:60:a0:e5:cb:66:b5:6e:30:91:d2:a1:27:
63:e2:95:46:f2:2e:a9:5b:8d:c9:2e:d3:4c:c8:28:b7:d3:7d:
0e:b3:f6:d2:91:c0:85:42:09:73:b7:c8:9f:cf:f1:da:e9:f8:
b1:4a:55:8d:e2:96:33:34:23:11:bb:46:1e:ff:d8:12:a2:c1:
51:1e:bf:be:98:78:cc:6a:c3:bb:48:ac:45:5b:31:23:75:7d:
2e:54:28:eb:5c:36:65:50:c2:73:37:dc:7b:43:90:be:f4:c7:
71:af:47:f0:57:e8:e8:79:ec:7b:95:6e:bd:2f:5c:d0:78:ee:
21:08:f0:08:90:e4:a7:af:63:aa:da:79:2e:6c:10:c7:fc:10:
22:2d:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:56 2025 by rpki-client