Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/DUVtp5rmZWhjlPTwXejQEd3V8J4.roa
File: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (raw, json)
Hash identifier: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=
Subject key identifier: 0D:45:6D:A7:9A:E6:65:68:63:94:F4:F0:5D:E8:D0:11:DD:D5:F0:9E
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019420D5FD53B09604CA7FF554518D22788C
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/DUVtp5rmZWhjlPTwXejQEd3V8J4.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201803
IP address blocks: 185.63.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fd:53:b0:96:04:ca:7f:f5:54:51:8d:22:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d456da79ae665686394f4f05de8d011ddd5f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:fb:3b:03:e3:3c:e0:5b:9f:02:6a:7e:49:
44:aa:d4:80:fc:60:15:32:6f:c6:80:9f:e3:bc:b4:
09:56:07:ae:3b:dc:b7:e4:b1:9a:69:8b:c3:9f:a6:
58:cd:74:30:2b:c5:2d:be:09:25:b4:f9:2b:98:c4:
8b:9e:20:dc:4d:37:be:87:2a:0f:da:0d:fc:f4:2f:
e2:d7:14:c2:c4:f4:dd:af:7a:24:cf:f3:be:98:5f:
3f:9e:21:ad:2f:28:93:44:66:50:64:8c:b4:9c:1e:
c9:9d:52:65:53:72:09:5d:36:82:0b:04:35:dd:1e:
17:7b:70:7c:40:bb:b4:00:9f:8f:13:74:55:aa:cb:
f7:ab:b7:b4:ab:ef:83:72:e4:17:56:53:0f:b6:b1:
cb:67:57:b7:7d:c6:8a:a5:7b:42:c8:50:bd:64:49:
ae:a0:65:0b:1e:1d:5d:72:95:7c:71:e5:9e:c2:97:
d0:ca:8c:0f:e4:1f:a9:c8:93:39:64:16:58:00:f4:
5d:7a:83:00:38:cb:5b:4e:88:f4:84:34:49:c5:f4:
7f:f9:64:de:fe:de:50:f3:c3:4d:28:17:ce:e0:79:
a4:c9:dd:21:eb:50:91:8f:38:20:ac:ef:35:c9:5a:
71:ac:a3:1e:3e:62:04:3d:33:49:55:2f:b4:ba:20:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:45:6D:A7:9A:E6:65:68:63:94:F4:F0:5D:E8:D0:11:DD:D5:F0:9E
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/DUVtp5rmZWhjlPTwXejQEd3V8J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ad:78:99:05:8d:ce:c2:07:45:f1:cd:e4:ab:17:bb:3e:60:
91:e7:f8:83:9c:93:d3:6e:ee:ba:2e:c3:99:eb:de:a7:19:44:
bb:69:25:77:5b:55:5c:dd:76:e3:a9:67:cb:40:f4:cd:72:54:
1a:e4:55:d1:6e:68:bd:7e:5a:fc:7e:f1:a5:66:ce:91:87:4b:
15:fa:6b:d6:3a:05:25:28:69:95:4d:a3:64:a4:e7:39:dc:10:
dc:86:da:0a:b4:75:21:65:6d:f8:16:26:3a:80:fb:48:65:a3:
82:97:f2:a8:d7:af:41:11:0b:be:07:fa:a0:6d:8f:e3:8b:09:
de:6a:83:90:c6:91:3e:ba:02:db:67:c2:18:ed:f3:eb:86:41:
a3:ae:78:37:c2:af:c1:6b:50:3c:99:69:11:53:7d:f0:13:9a:
9b:04:f6:25:07:ef:ee:41:8c:47:6d:d6:af:65:be:1e:4e:1e:
f7:e7:66:47:dd:a7:7c:4c:fb:2d:02:9c:7a:6c:0c:b1:c0:d2:
8b:f7:76:88:98:ca:b4:72:33:e3:b0:36:ef:a3:75:47:f9:8d:
cd:29:6e:c0:7d:1b:33:2f:75:11:0f:fe:da:13:1e:b1:21:bf:
0c:71:8e:b3:ce:9b:4b:c9:2f:45:92:17:42:04:d6:7b:05:01:
de:ee:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:10 2025 by rpki-client