Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/n3iPjhImnBjarzP2Rj2tOx0dNiE.roa
File: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (raw, json)
Hash identifier: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=
Subject key identifier: 9F:78:8F:8E:12:26:9C:18:DA:AF:33:F6:46:3D:AD:3B:1D:1D:36:21
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019423697C3BCEE79B4A8E90EFB641FA2540
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/n3iPjhImnBjarzP2Rj2tOx0dNiE.roa
Signing time: Wed 01 Jan 2025 19:48:23 +0000
ROA not before: Wed 01 Jan 2025 19:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 195.250.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7c:3b:ce:e7:9b:4a:8e:90:ef:b6:41:fa:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f788f8e12269c18daaf33f6463dad3b1d1d3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:f4:3b:1f:4a:d5:67:ef:3c:2c:66:1c:ad:
e7:ad:d4:a8:7a:f0:bf:5c:b2:86:d9:93:98:57:43:
3d:d6:a7:a2:0d:49:10:9b:91:c2:b5:01:65:75:bb:
54:b7:37:0f:06:88:58:1c:52:54:e3:43:16:75:3b:
12:80:28:7b:15:01:9b:9a:d1:8d:cd:c7:7f:a2:08:
e0:6a:13:1b:63:84:cc:b1:22:a6:01:a4:dd:eb:ba:
2f:95:c9:33:f6:ed:6e:dc:90:23:ad:50:65:44:29:
60:46:e9:8e:23:58:eb:a3:e0:fd:42:ba:97:03:3a:
27:c5:2b:7a:4f:23:d6:78:53:87:79:d7:39:87:e5:
6d:ed:7e:78:77:54:b5:0d:73:34:ff:3b:8d:6e:57:
b9:ea:ca:5b:ff:43:48:e5:0c:06:78:42:b0:23:fe:
a2:d1:8b:6b:1c:13:03:c5:bc:54:84:18:4a:f8:c4:
85:a4:c1:95:1e:03:99:a6:68:a0:f4:ef:76:d7:ad:
31:35:79:9d:93:38:21:9b:e9:3b:f6:71:19:ec:d1:
40:45:a4:8a:89:31:f4:17:bd:3f:69:c7:6a:02:70:
f6:b1:06:f5:b2:22:a1:d2:45:45:27:b9:73:49:34:
d3:9e:6a:d2:31:98:ac:e3:77:c9:45:7d:86:45:72:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:8F:8E:12:26:9C:18:DA:AF:33:F6:46:3D:AD:3B:1D:1D:36:21
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/n3iPjhImnBjarzP2Rj2tOx0dNiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.46.0/24
Signature Algorithm: sha256WithRSAEncryption
93:94:4d:54:40:31:f8:b2:35:15:e4:2a:66:72:db:4a:82:24:
22:fd:a7:05:3c:13:b9:8b:d3:65:93:4c:b8:36:36:a4:28:b5:
50:7f:05:b4:a2:46:77:97:8c:42:02:d7:a9:33:92:18:95:c0:
b3:f4:a1:f9:2a:27:ae:77:96:fb:82:96:1c:23:ac:87:e8:87:
88:4b:9a:32:37:15:b8:8e:cb:16:50:2c:1c:e6:58:04:64:b2:
89:b8:03:91:cc:68:ad:6d:30:ba:9e:1d:d7:70:ef:06:a7:b5:
78:e4:5d:8a:ae:2e:11:84:7d:9b:79:21:13:a8:ff:77:6a:b5:
d7:a9:74:56:3d:2b:48:f5:30:40:af:90:f2:14:2b:43:dd:f6:
63:c4:cd:d5:25:76:4d:a9:7f:28:7c:60:a9:66:f9:92:26:8d:
1c:ac:b5:14:88:e9:87:1c:a4:63:22:91:d9:70:79:26:1f:66:
18:04:a0:ad:6f:8a:ad:cd:52:a2:ef:14:21:8a:69:c9:78:42:
18:e7:e3:5d:b6:62:de:be:1a:04:96:d7:08:5f:7c:6b:c3:38:
7b:09:63:29:7c:37:42:77:c8:24:32:b7:65:16:f5:b4:0c:b0:
c3:a3:a8:c8:5f:85:95:be:60:e2:69:0e:15:d5:33:a5:66:c3:
12:11:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:17 2025 by rpki-client