Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/3WE6dfLNxFsfmDokXfTCR3HDgJA.roa
File: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (raw, json)
Hash identifier: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=
Subject key identifier: DD:61:3A:75:F2:CD:C4:5B:1F:98:3A:24:5D:F4:C2:47:71:C3:80:90
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 019428265619D9F8F318F118D824CE88EC2E
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/3WE6dfLNxFsfmDokXfTCR3HDgJA.roa
Signing time: Thu 02 Jan 2025 17:53:08 +0000
ROA not before: Thu 02 Jan 2025 17:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206241
IP address blocks: 212.87.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:56:19:d9:f8:f3:18:f1:18:d8:24:ce:88:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 2 17:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd613a75f2cdc45b1f983a245df4c24771c38090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:e7:e3:69:78:8e:23:8f:0f:72:09:a4:be:
87:f1:93:9a:05:94:b2:07:b3:54:23:1c:de:9f:c2:
91:e3:22:3d:a9:87:6c:17:04:54:da:04:1f:0d:d6:
d3:6c:1d:7a:4e:e9:86:3c:ac:65:8b:39:8c:77:7d:
f4:e2:be:34:11:48:7b:0c:72:09:5f:1b:f9:89:20:
b5:13:5d:30:d5:24:87:68:c1:ac:7d:cd:e3:a6:d5:
f8:0d:48:b1:81:4e:de:8e:c7:67:94:be:5d:2f:b7:
77:e5:58:9d:b0:4b:43:c5:62:e6:ba:02:b2:e9:42:
be:de:60:f3:c6:81:f2:5d:2f:a5:7e:d9:30:80:35:
f1:c1:2d:52:e8:d2:fb:de:31:1b:e5:f3:95:82:42:
6b:79:5b:30:db:1c:3d:99:3f:ab:35:0a:c9:84:29:
62:a4:c9:e8:96:5e:8e:c2:16:a5:af:16:2f:02:63:
e7:1b:c7:bd:f2:5a:53:a9:16:2d:85:52:f0:47:65:
3c:3b:8b:dc:0f:13:4f:f6:19:41:b6:e5:38:c2:7a:
51:be:10:4e:5a:80:e3:19:55:f6:38:5b:5a:68:0d:
27:68:ac:e8:d2:f7:1b:e5:2d:2f:25:8b:3a:d6:20:
4c:3c:3b:a8:51:8f:b3:de:0f:70:43:5f:13:09:4d:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:3A:75:F2:CD:C4:5B:1F:98:3A:24:5D:F4:C2:47:71:C3:80:90
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/3WE6dfLNxFsfmDokXfTCR3HDgJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.254.0/23
Signature Algorithm: sha256WithRSAEncryption
69:62:ba:16:02:33:b7:1e:0f:01:b2:10:4e:f9:a2:d4:b6:fb:
16:d5:96:b3:65:70:42:fb:9e:50:e1:aa:d7:ab:be:28:dd:cc:
e6:34:61:18:cb:40:46:c7:97:d2:ef:07:51:3f:85:88:3c:13:
56:63:f4:69:f8:d9:3f:81:9b:4c:f4:f8:19:cb:30:86:0f:38:
58:b9:2c:03:d1:ed:95:49:5c:76:2b:4a:aa:a3:33:4e:4f:7c:
55:a4:c1:46:e5:e0:41:82:80:24:28:b3:3b:b3:8c:fc:1d:08:
25:ba:01:08:b0:77:a6:ba:4f:59:77:c9:c6:03:56:9f:a2:0b:
e0:ea:c2:24:d1:17:58:fb:7d:54:0d:30:f6:c4:69:0b:d4:4b:
8e:76:41:ba:ed:a2:1b:42:42:59:17:67:af:62:d0:14:cb:33:
41:57:c6:d3:f9:3a:52:d6:d6:9b:1e:ea:41:69:c0:8b:ee:76:
bc:80:cd:db:2d:d4:3b:10:f5:f6:a2:d8:e9:c7:96:cd:4e:fb:
85:06:07:33:49:a0:ff:32:94:8d:36:fd:2b:ec:fc:f0:74:a1:
bf:83:1c:20:81:af:39:07:6d:aa:73:f2:a9:fe:56:a5:23:c0:
9e:48:b0:88:c1:d6:26:4a:4c:0a:5f:67:ac:69:d3:d0:35:bf:
a1:0a:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:49:24 2025 by rpki-client