Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/42kA1PGA8no_1otOl8ofpG12v3U.roa
File: 42kA1PGA8no_1otOl8ofpG12v3U.roa (raw, json)
Hash identifier: xUXq/2K3klfSiQDOaLNutcuHJyhv84PrwrhgM3PQUAM=
Subject key identifier: E3:69:00:D4:F1:80:F2:7A:3F:D6:8B:4E:97:CA:1F:A4:6D:76:BF:75
Certificate issuer: /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Certificate serial: 019425FC4408265687C3A40DEE015C90BCB8
Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/42kA1PGA8no_1otOl8ofpG12v3U.roa
Signing time: Thu 02 Jan 2025 07:47:56 +0000
ROA not before: Thu 02 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16314
IP address blocks: 217.116.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:44:08:26:56:87:c3:a4:0d:ee:01:5c:90:bc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Validity
Not Before: Jan 2 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e36900d4f180f27a3fd68b4e97ca1fa46d76bf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:94:43:55:3f:50:3f:d9:ea:0d:61:ca:38:
f0:3f:cb:f8:29:be:82:55:76:bb:55:9a:f2:19:0e:
f8:f8:50:de:f4:77:7f:bf:22:a8:9d:f1:f6:bb:32:
5c:50:b4:91:89:f2:d4:ef:6d:8c:88:a6:0a:3c:ff:
ed:f2:b6:47:b7:c5:4c:76:92:e7:88:f6:02:f7:51:
1d:7d:03:66:91:7a:65:de:78:38:a2:4d:73:a4:74:
f4:24:b4:aa:66:70:97:3e:3c:b2:66:a5:24:de:6b:
d0:f6:3d:bb:81:38:34:08:a4:9f:81:36:80:22:22:
d5:da:c8:bf:4c:aa:b9:50:26:04:98:7e:8b:4c:2f:
90:d0:d7:f5:86:86:5f:ca:a1:d7:d7:d1:da:a4:8c:
f3:7a:6c:64:6c:86:0e:5d:49:30:4f:cb:4b:67:2a:
31:2a:7b:d6:8a:f3:98:fa:36:d7:37:b7:d8:c4:f3:
47:93:59:15:b4:3d:eb:73:dd:93:95:a8:7a:76:13:
80:e4:5b:67:6b:93:5d:50:9d:dd:66:b2:e1:57:e8:
f9:de:b3:e6:28:33:13:bd:e6:8c:e7:2b:7d:fc:ac:
70:34:6d:8e:9a:6a:87:aa:40:b2:9d:55:9d:af:e0:
8f:a0:48:9b:de:a3:e6:98:1c:e3:d8:7d:5d:08:c2:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:69:00:D4:F1:80:F2:7A:3F:D6:8B:4E:97:CA:1F:A4:6D:76:BF:75
X509v3 Authority Key Identifier:
keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/42kA1PGA8no_1otOl8ofpG12v3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.116.64.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:0c:05:dc:cb:5f:f3:33:b3:aa:d1:6c:20:c4:52:00:38:f1:
b5:d1:50:5a:45:fe:bb:aa:5a:2a:4b:7f:5d:c6:69:25:fc:f8:
18:77:25:8b:5d:1d:05:6b:88:d3:cc:cb:3c:20:f2:64:ab:08:
57:9c:af:a4:1d:ee:c9:d9:15:1a:39:06:15:54:23:f7:77:d1:
73:7e:06:4f:bc:2b:f3:1a:db:db:c5:c5:b1:03:9a:a0:2f:3f:
7c:81:8b:84:35:f6:1f:96:1e:da:30:38:60:3b:a2:84:ac:db:
b0:ac:a4:3c:72:4b:dd:96:0f:fb:39:e5:09:6a:16:39:1b:ec:
44:85:59:f2:dc:33:71:f5:ee:d1:1d:45:ed:1c:56:52:fa:ed:
aa:cb:35:54:2e:44:aa:29:78:60:a3:17:7f:6c:c2:87:7c:47:
b6:ed:fc:f0:a5:61:87:d4:4e:dd:7a:69:ad:6a:c4:08:81:14:
38:74:a7:d5:29:6f:d1:76:7b:a9:e2:3d:42:03:1c:b4:ec:06:
9d:6d:d4:e9:04:2c:74:c6:74:bb:5a:2b:99:ed:d0:13:c1:11:
fe:f0:6c:a0:b1:36:a0:e5:fd:4f:f5:04:a3:4c:14:30:92:9c:
40:6e:d3:a4:1f:e5:41:f7:7c:b4:6c:4d:82:00:ea:45:89:f1:
1f:f2:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:00 2025 by rpki-client