Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/lEz8odh3Mk2Nzj9_R9EpakgpfI4.roa
File: lEz8odh3Mk2Nzj9_R9EpakgpfI4.roa (raw, json)
Hash identifier: Q0KYcXBHgiITZR8L6PTfW99SVpmX2yWCHbYvvP/i3+4=
Subject key identifier: 94:4C:FC:A1:D8:77:32:4D:8D:CE:3F:7F:47:D1:29:6A:48:29:7C:8E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 0194266B98554D1F5D6111AF128716F5D76E
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/lEz8odh3Mk2Nzj9_R9EpakgpfI4.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211585
IP address blocks: 91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:98:55:4d:1f:5d:61:11:af:12:87:16:f5:d7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944cfca1d877324d8dce3f7f47d1296a48297c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:e9:da:c5:dc:49:d7:1c:ee:74:fc:f4:af:
3d:82:c4:c5:12:4b:9c:61:28:da:a0:f7:9e:e8:70:
26:3e:6b:f5:28:fb:85:1c:58:c3:cd:4a:66:b7:db:
5b:de:dc:de:5e:78:1f:c8:1a:a5:7d:cb:1b:a9:4f:
9a:5b:54:c2:a5:67:e0:26:d3:8c:0d:5f:6f:80:a4:
81:1c:89:9f:d1:de:c2:d1:81:38:3a:f5:ab:37:de:
a7:d0:68:db:f0:02:6e:2c:72:51:9b:81:e3:5f:e3:
6e:e7:12:dd:ec:41:a0:f7:a0:c0:5f:a4:f0:94:66:
be:b9:fe:0a:2a:77:7d:11:c0:a6:f5:82:b6:a1:71:
c9:3c:64:0f:45:a8:f9:a6:01:52:20:ff:3b:0e:d4:
92:68:3c:c9:cd:c8:99:71:68:e1:a2:f5:01:49:ce:
e2:be:05:f6:09:6c:4c:09:c1:fc:b5:e6:c0:ef:23:
22:2c:f8:ce:b7:2f:a0:35:74:4b:99:bf:78:42:c6:
cc:6d:07:d7:cc:e8:07:35:69:3a:a7:13:20:80:fd:
0c:fe:6c:cf:57:fb:f2:b9:d7:89:f6:d4:aa:25:bd:
83:27:d1:57:18:33:ee:73:20:9c:13:33:da:88:8b:
1d:9e:9d:40:88:c9:55:56:10:ca:78:dd:a4:c1:27:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4C:FC:A1:D8:77:32:4D:8D:CE:3F:7F:47:D1:29:6A:48:29:7C:8E
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/lEz8odh3Mk2Nzj9_R9EpakgpfI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
70:95:02:11:3d:a6:00:1b:f0:25:7f:21:5a:1b:b1:5d:e6:1d:
77:9b:1c:42:3c:53:dc:ef:e1:e6:8f:c2:83:2d:1b:68:80:b5:
29:78:ee:dc:35:5a:9d:d3:22:17:67:8b:33:80:01:1c:35:dc:
c1:51:ec:41:b7:b0:22:16:17:24:8d:85:a9:8e:20:f0:8c:fc:
2c:c3:65:72:41:42:9e:14:52:45:92:62:b6:8f:77:b2:98:77:
5b:b0:53:42:04:e7:2d:30:a1:19:ba:56:47:1b:6d:8d:7a:dc:
1d:86:94:f3:ab:08:b2:27:34:3b:49:9b:cb:86:01:00:5f:da:
52:05:60:e8:10:86:eb:fb:80:56:a6:7a:15:24:9f:ae:bf:79:
cc:f6:60:98:77:82:0d:58:3f:c5:d5:2c:72:cc:fd:44:61:68:
43:fa:e1:8f:07:49:2a:0a:ff:56:e9:92:da:12:86:68:41:4b:
c7:a4:41:48:8e:0d:c5:45:2b:d1:46:39:6b:98:06:0e:24:84:
e7:fe:e9:8f:2a:21:46:9b:58:19:5b:c1:7a:75:d9:80:8e:4d:
7f:5f:d4:31:ee:db:7b:ca:51:6b:90:55:34:1f:34:02:77:15:
bf:0b:e0:57:fd:13:2b:0f:23:c0:ab:12:bf:20:19:2c:c6:7a:
7b:f1:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:26 2025 by rpki-client