Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3XFnSij2L9OGuVRefNb6KmPjgW8.roa
File: 3XFnSij2L9OGuVRefNb6KmPjgW8.roa (raw, json)
Hash identifier: XS79DVDeSJhJGymz1jxhgpqTjVxRS0XusIdGj5EpPIA=
Subject key identifier: DD:71:67:4A:28:F6:2F:D3:86:B9:54:5E:7C:D6:FA:2A:63:E3:81:6F
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA893FFFD2DB3737ACD3BF1A37D415
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3XFnSij2L9OGuVRefNb6KmPjgW8.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 37.128.254.0/23 maxlen: 24
37.128.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:89:3f:ff:d2:db:37:37:ac:d3:bf:1a:37:d4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd71674a28f62fd386b9545e7cd6fa2a63e3816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:54:71:9f:8a:94:b4:71:3a:08:59:40:29:
fa:2a:b8:f0:b2:b7:de:49:80:b9:99:ff:bd:2f:71:
17:3b:98:92:3b:62:b5:b4:75:17:88:eb:79:ae:95:
54:6b:76:42:57:b4:c5:f7:9b:cb:dd:db:db:97:9b:
82:b5:ad:e2:62:fb:34:40:8c:5d:95:13:d1:71:ff:
50:30:b0:44:42:a5:08:2d:ac:6c:75:7a:1d:72:dc:
ac:c5:3f:2b:3f:22:34:3e:1f:eb:1b:31:97:de:69:
cb:cb:82:b3:94:f6:5f:87:b4:45:ad:c7:ef:d0:99:
fb:c7:b1:2e:04:7d:27:9c:a4:c3:22:33:49:cf:06:
03:0a:79:19:26:b5:08:31:df:2e:73:aa:84:fe:c2:
96:b2:d7:f0:14:f6:60:c8:47:5f:5a:03:5b:80:5b:
49:f4:9d:15:4e:3c:37:72:ac:41:2a:e1:59:ed:ce:
0a:f0:2a:ad:cb:7d:38:c0:a3:fb:d6:ec:72:40:ae:
4e:54:c0:79:95:61:f1:f4:22:3f:3d:bb:a7:6e:14:
c8:fb:b3:f1:e9:08:b7:72:31:5e:27:1c:25:24:06:
ba:17:0e:42:ce:69:84:ea:6b:8b:59:22:04:86:1f:
f5:8d:42:d1:bb:90:97:eb:49:3e:cf:b7:f2:81:59:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:67:4A:28:F6:2F:D3:86:B9:54:5E:7C:D6:FA:2A:63:E3:81:6F
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3XFnSij2L9OGuVRefNb6KmPjgW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:15:57:d4:cb:91:37:33:a1:e0:a4:0d:28:cb:60:a2:a1:a8:
35:c8:15:f1:42:47:07:18:9a:d9:3d:83:c0:bd:fd:00:99:a4:
cc:95:d5:47:9c:30:44:09:2a:c0:d5:64:a2:fc:9e:22:1d:a7:
c8:e4:e1:e1:f2:e7:b3:d4:d2:dc:2d:76:1a:7c:c1:c9:c4:64:
1d:6b:98:e1:76:69:e2:c6:ac:c2:a1:38:67:75:d1:ab:d5:03:
d1:13:e5:1c:7a:d9:70:22:05:af:58:6d:93:b4:94:fd:91:b8:
7e:19:2b:41:5f:d4:80:6e:40:0a:7c:09:5e:64:79:a4:90:e9:
1f:02:1b:7b:73:9d:5e:d7:c0:20:12:68:79:19:fa:16:d0:4c:
5e:8b:68:66:41:81:a8:23:af:56:04:44:e5:33:38:58:ee:3b:
1d:a1:e3:a7:e3:f8:30:9b:e1:62:b1:df:af:2d:d3:c4:f5:b5:
2d:67:bb:8c:4e:87:72:0b:2b:36:8b:4f:02:c6:41:47:c8:fa:
73:73:a9:8f:60:2a:51:35:67:d6:fd:97:d2:d7:f4:e3:22:ca:
a4:85:88:3e:be:24:b4:64:48:f0:d8:b2:9d:98:03:df:0d:08:
50:b0:bf:2a:e1:08:17:88:b0:aa:fe:b4:66:87:54:7b:c9:1b:
11:a5:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:32 2025 by rpki-client