Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/L9b4ducPYyR6qc5uaeOni9YJQHA.roa
File: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (raw, json)
Hash identifier: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=
Subject key identifier: 2F:D6:F8:76:E7:0F:63:24:7A:A9:CE:6E:69:E3:A7:8B:D6:09:40:70
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019422FB2AB5D2AC374A310D6255FEDEAA4F
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/L9b4ducPYyR6qc5uaeOni9YJQHA.roa
Signing time: Wed 01 Jan 2025 17:47:53 +0000
ROA not before: Wed 01 Jan 2025 17:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205629
IP address blocks: 185.228.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:2a:b5:d2:ac:37:4a:31:0d:62:55:fe:de:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Jan 1 17:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fd6f876e70f63247aa9ce6e69e3a78bd6094070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:25:38:de:40:03:b7:87:af:07:00:ff:1a:
4c:6c:62:0c:80:47:61:4f:b5:dd:82:86:35:1f:51:
93:3e:e1:37:27:e2:16:c7:95:16:c9:c0:33:7b:ce:
9c:94:bb:19:1d:12:af:e8:a8:ab:09:49:ba:0f:f5:
5e:10:cc:68:1f:41:98:34:f8:a9:2d:4c:fa:40:9d:
24:ea:6c:3d:e3:41:89:40:2c:ee:7e:33:a4:44:de:
08:a0:7f:dc:84:a3:f7:29:e9:ea:0c:f2:8b:35:6b:
35:a1:38:c7:e3:e8:54:64:f3:bc:5d:8d:7a:d0:ed:
f5:15:6f:72:32:eb:12:84:86:8a:dc:b3:6e:4f:8f:
c7:45:90:50:b4:d5:cd:21:d8:13:89:f8:3d:cf:a5:
bc:7a:4d:a3:66:90:8e:8f:a7:be:61:38:7d:ef:c2:
07:88:bd:d6:d7:96:b6:a0:60:08:2e:4f:e0:1c:80:
d7:c3:8f:9d:be:75:d9:12:58:de:5a:5c:97:47:98:
fb:c0:34:10:9f:7b:e3:90:9e:14:7f:59:a5:8c:c5:
97:bc:96:0a:ea:1b:56:63:46:96:80:ad:88:d6:8c:
c3:c1:fc:2b:cb:14:31:c4:fb:27:50:e7:fa:a5:c6:
80:9b:c3:02:1a:ab:5a:61:f7:a0:4a:ff:48:4a:e2:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:F8:76:E7:0F:63:24:7A:A9:CE:6E:69:E3:A7:8B:D6:09:40:70
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/L9b4ducPYyR6qc5uaeOni9YJQHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.35.0/24
Signature Algorithm: sha256WithRSAEncryption
64:48:20:45:c5:2a:d0:eb:a5:03:2c:66:3d:da:00:44:eb:fa:
fd:52:18:ca:a8:97:c3:11:0c:45:e9:03:a5:88:90:15:b0:c6:
3e:e7:47:53:7c:d5:9f:fd:19:f9:d1:ad:31:a8:78:5f:53:1b:
87:ed:23:c1:c8:cb:44:8f:19:45:3a:d3:ac:da:c8:26:ef:25:
72:23:83:36:54:cb:72:aa:36:4f:4e:5c:85:d2:15:fd:50:ae:
95:6c:84:f3:c3:7b:ce:32:43:ef:8f:9a:85:55:a2:58:eb:bf:
e1:dc:d9:ab:c5:74:76:2d:05:d8:8b:e9:89:03:c7:b2:d0:6c:
b2:ab:63:69:84:8c:0f:2d:03:c0:08:b5:1c:6c:46:89:df:9d:
95:b0:f3:ef:8c:70:b2:f5:f1:c9:21:21:18:b4:49:f0:5b:f4:
95:7b:7a:de:b4:6f:ad:f4:d8:50:35:e4:a5:cf:d5:89:bd:4b:
30:76:4b:a0:96:80:aa:5f:df:fd:6a:47:29:bd:33:97:78:55:
af:cc:ea:b9:64:f7:b6:62:58:fe:27:b5:96:5a:4c:27:5c:f7:
a8:47:00:8a:a2:4b:e1:4d:45:cb:fa:2d:78:e0:5d:e6:3f:3d:
10:31:ee:4e:1e:a7:47:4c:66:2f:6f:41:e6:f7:c3:84:c1:f1:
27:dd:03:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 20:06:50 2025 by rpki-client