Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/dXRP_DXzvkSVasQi7xjSi_GeSe8.roa
File: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (raw, json)
Hash identifier: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=
Subject key identifier: 75:74:4F:FC:35:F3:BE:44:95:6A:C4:22:EF:18:D2:8B:F1:9E:49:EF
Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial: 0194236A2655DFBC0D35B1B3879973259410
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/dXRP_DXzvkSVasQi7xjSi_GeSe8.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59934
IP address blocks: 89.35.35.0/24 maxlen: 24
91.247.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:55:df:bc:0d:35:b1:b3:87:99:73:25:94:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75744ffc35f3be44956ac422ef18d28bf19e49ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:fd:df:4a:38:24:2f:6c:92:0e:66:b3:cc:
6e:3d:1d:1a:d0:b1:c7:b6:f6:7e:88:e3:e0:db:35:
66:d8:4b:3c:9c:56:9f:ea:7c:06:a5:01:a7:9a:ab:
01:71:8a:7e:14:66:b1:0a:e1:70:18:10:df:b4:78:
44:65:72:ad:b6:83:c2:d2:ab:44:18:55:4d:99:09:
29:f2:aa:7d:a3:36:9b:b0:38:0c:18:a8:a9:75:33:
16:ce:93:c5:3f:4a:7b:ad:2b:cd:47:02:6a:b7:20:
8b:1a:7e:58:a0:42:fe:0f:9c:f2:3e:a7:80:01:c7:
3c:9f:4e:19:1e:22:68:a5:89:06:04:5b:a8:bc:f6:
c1:02:a1:09:28:1e:15:8f:ff:ed:0e:a2:93:3f:89:
66:06:63:51:74:96:f5:69:27:9c:ab:3f:48:67:dc:
ce:8b:30:8a:5c:92:f7:1b:57:68:33:38:a3:56:e0:
59:6d:1d:ce:bb:ec:be:01:37:7c:2d:be:28:53:78:
28:a2:82:de:7e:4e:cc:15:ed:6e:c4:ab:ec:23:8e:
2d:91:e4:68:ef:fd:38:bb:db:8d:d6:b7:f5:89:ac:
2c:3e:4d:57:34:47:9b:e2:2c:48:3f:35:75:33:26:
3d:40:eb:32:37:85:99:30:48:a1:15:0c:ad:d1:41:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:74:4F:FC:35:F3:BE:44:95:6A:C4:22:EF:18:D2:8B:F1:9E:49:EF
X509v3 Authority Key Identifier:
keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/dXRP_DXzvkSVasQi7xjSi_GeSe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.35.0/24
91.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
42:13:9e:e0:54:47:ec:0f:62:4c:fc:0f:7c:11:25:f8:98:1f:
39:b9:c9:3b:ed:1f:08:86:c8:8e:24:d2:c6:47:f8:92:24:5f:
e6:45:b7:38:6b:bc:9f:8f:d5:18:73:5a:92:35:fd:ec:25:7f:
c4:c8:98:a2:39:80:35:94:bd:90:7d:89:bb:73:c2:8e:e1:ae:
21:57:28:e6:94:75:7a:fa:3d:7d:3a:63:c3:12:2c:e4:a4:ab:
ec:41:98:f7:97:c8:0e:6f:53:4e:4f:29:aa:fd:06:c8:19:1b:
cf:22:f6:b9:1b:c0:71:61:c5:12:42:d4:93:b3:f4:3d:ae:55:
01:b6:99:93:2b:ea:a9:b1:2d:0c:12:f7:65:98:33:09:c4:df:
ee:aa:ce:4c:31:70:a7:a3:8b:94:fc:5f:dd:f6:27:d1:e5:38:
67:5d:94:89:ab:f7:b1:90:f7:3d:5a:ad:d2:49:56:ca:cd:f9:
24:2a:f9:1c:0f:24:e8:ca:3d:a2:b0:1f:0c:05:56:05:1b:fd:
a3:52:27:ea:38:69:65:ab:2c:1b:79:ea:2d:07:40:d6:5a:fb:
be:67:81:e4:dd:ae:5e:79:f0:17:30:94:ef:96:c5:88:89:ba:
b6:5e:9a:ad:48:ae:ee:bf:0a:fd:ec:82:a3:fa:74:3f:71:7e:
7a:14:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:22 2025 by rpki-client