Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/pDLly0sn53PLZlgmqVTYD5L2Et0.roa
File: pDLly0sn53PLZlgmqVTYD5L2Et0.roa (raw, json)
Hash identifier: MLKk0AIXSDvV1SnhwkIbUGP+qcSM6FHopsKcU6yMV74=
Subject key identifier: A4:32:E5:CB:4B:27:E7:73:CB:66:58:26:A9:54:D8:0F:92:F6:12:DD
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 01942143C5733DF596F1CB00DAADC2ECC6D8
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/pDLly0sn53PLZlgmqVTYD5L2Et0.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205342
IP address blocks: 91.240.245.0/24 maxlen: 24
2a12:db40::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c5:73:3d:f5:96:f1:cb:00:da:ad:c2:ec:c6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a432e5cb4b27e773cb665826a954d80f92f612dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:7d:00:d0:40:89:dc:b1:5b:60:60:ec:c2:
16:de:8e:36:59:74:76:28:5b:80:db:e6:18:c5:b9:
51:e3:ea:32:3d:29:62:62:f5:22:0b:5e:2b:34:12:
70:be:9c:ec:64:8f:ff:23:5e:d0:ba:58:29:cf:cd:
6d:1c:f5:0c:82:dc:d2:a7:ed:80:bd:32:b7:e5:5e:
3a:90:f5:cb:11:5d:27:2d:60:e7:a6:79:0d:0e:55:
01:01:bb:f0:dd:0e:8e:e1:ae:03:03:3a:85:01:c5:
69:0a:be:3d:3f:1e:85:2d:ee:c0:ab:ac:50:7a:99:
56:e5:3e:d1:b8:13:09:22:f3:85:7d:25:30:0b:30:
18:97:36:3e:ca:56:08:ad:f4:82:a5:82:90:b3:64:
d9:d2:f6:a7:a5:3e:bb:f8:75:55:ae:03:f7:d1:01:
d3:a8:59:e0:5e:d4:4c:42:9c:f5:ae:5e:35:57:5f:
49:47:60:1a:68:e2:f1:2f:94:cc:f0:59:59:8d:4b:
88:65:98:29:ea:92:b2:5d:de:d2:8c:dd:14:77:5c:
c9:1e:5b:ce:ee:0b:d7:2a:59:63:5d:61:cd:98:21:
05:65:31:3f:5a:53:10:3a:9d:f1:5b:5f:e5:5d:72:
a3:60:cc:78:19:98:89:29:70:4a:ba:78:95:69:58:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:E5:CB:4B:27:E7:73:CB:66:58:26:A9:54:D8:0F:92:F6:12:DD
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/pDLly0sn53PLZlgmqVTYD5L2Et0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.245.0/24
IPv6:
2a12:db40::/29
Signature Algorithm: sha256WithRSAEncryption
ce:b0:58:58:ec:c6:b9:df:4d:95:f8:43:f7:70:0d:c2:e6:94:
79:82:ae:5f:1b:60:7d:ea:c5:8e:ac:41:97:97:19:8b:69:cc:
21:3a:9e:a7:d3:73:a2:d5:70:f4:6f:93:11:97:46:6e:ef:c6:
10:01:41:77:49:8b:6f:98:41:14:c0:f0:3c:36:4a:06:6b:51:
b9:34:92:dd:2e:0b:10:eb:e2:93:9b:cd:52:6f:2a:8f:bd:56:
8e:e3:ab:56:c2:c1:b9:78:fb:98:6f:b2:ff:96:a7:41:89:d9:
18:e6:4e:03:2e:25:ed:ee:06:c3:4a:3e:6f:bc:4d:3d:33:0e:
77:63:58:3b:a5:3f:18:8a:29:e1:e7:10:32:be:b3:6b:29:53:
7c:ec:e3:b6:62:04:a6:48:df:34:52:ba:09:1a:40:87:f3:fe:
0f:a6:6a:51:a5:1c:b9:36:f7:56:ba:bb:0a:87:04:f9:81:6e:
fd:92:f7:3a:6a:cc:59:9a:7e:c3:37:42:20:31:d4:da:4c:98:
66:65:bf:7e:d5:c8:eb:96:92:a1:cd:75:03:aa:3f:b7:2a:22:
f9:ba:5e:79:28:38:b0:ca:f1:4c:82:11:0c:a4:4d:76:c4:b8:
9f:1f:58:73:62:09:ba:e9:70:4c:5c:fa:ff:dc:40:60:ec:6d:
c2:91:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:44:12 2025 by rpki-client