Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa
File: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (raw, json)
Hash identifier: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=
Subject key identifier: DD:59:9F:3F:C2:80:F8:D0:54:80:29:8D:FC:40:4B:0F:F6:E4:AC:93
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 01941FFA486D1A35108805CC000E2D97BA8B
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56485
IP address blocks: 94.101.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:48:6d:1a:35:10:88:05:cc:00:0e:2d:97:ba:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd599f3fc280f8d05480298dfc404b0ff6e4ac93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:4d:2d:5b:e1:2b:d9:d2:03:ff:c9:1f:33:
fa:55:9e:75:f5:98:ea:9b:45:e0:3b:07:a9:49:73:
2e:9b:00:2f:f2:d7:11:e1:f5:2a:d6:d3:be:48:a5:
b5:b8:ae:3a:e2:bc:a9:73:12:9a:98:6c:23:79:96:
86:73:3e:27:ee:bb:47:c9:de:1e:c1:d3:75:87:da:
67:49:ec:22:dd:4f:5a:d9:f7:0b:8a:84:07:e6:54:
0e:d5:c3:fd:37:fe:f4:27:7c:dd:3d:1a:9e:b4:81:
d3:18:d1:95:a9:17:3b:14:c0:a8:eb:2e:a1:14:9c:
48:3b:4a:97:7d:b6:77:12:9b:b3:ca:ba:e6:6a:3a:
ce:5a:e0:7d:b7:1a:4b:69:c2:73:c5:cb:0e:6d:c0:
a4:e4:d6:fa:6f:3a:df:73:77:47:d2:15:18:5d:bb:
e1:e6:1f:39:41:f2:5b:56:f0:8e:5c:cf:68:e9:85:
5f:3d:1f:10:27:ee:1a:68:d8:07:fa:aa:a8:66:e6:
b8:5b:cd:47:80:c1:5f:05:7c:83:16:99:26:4c:8a:
a1:d4:cf:f7:d0:9b:e7:02:b4:f4:84:86:b9:66:13:
d0:de:66:ee:ad:18:e5:92:a7:e5:2c:8e:02:8a:d6:
be:06:1b:29:a0:e6:28:07:b5:c6:e0:ca:d1:b6:f7:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:9F:3F:C2:80:F8:D0:54:80:29:8D:FC:40:4B:0F:F6:E4:AC:93
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a0:aa:cf:e2:a6:15:63:29:55:1c:2c:40:c7:0d:6c:25:65:
e1:10:f7:72:3d:39:2a:ef:96:b2:87:32:c3:ab:e7:e5:94:bd:
f9:d7:ee:91:94:ad:39:fa:31:4c:e2:eb:35:3b:2f:19:3e:8b:
cd:aa:9b:2c:71:a4:ec:0e:5d:3e:0f:b8:1f:ca:67:96:1e:cf:
16:40:3b:5b:d6:74:0c:11:12:ad:c0:92:07:cf:52:06:de:d5:
d8:b2:38:8f:52:61:8b:b6:7a:ad:2f:98:bc:11:6a:2e:f6:81:
7e:9f:f9:37:77:28:d3:37:a3:e9:c8:6c:ea:17:da:7d:5a:1d:
8f:07:e4:10:d2:c2:7c:b6:51:9d:c8:9a:68:49:95:3d:6b:dd:
c2:4b:ce:31:23:91:01:3a:f1:d2:36:36:34:fb:aa:ad:e0:67:
f1:fa:b3:36:4e:f0:c3:de:61:34:6f:bb:71:00:6e:1a:82:c8:
53:91:5d:83:4b:66:ee:8a:3e:9b:c2:08:51:65:43:01:c9:96:
47:31:02:4b:4a:62:b9:bc:4b:21:a7:20:d4:f6:d4:f9:59:f2:
af:5d:a0:6a:92:65:91:2f:71:77:1e:e1:f6:d4:28:09:22:d8:
9f:79:ca:d3:20:88:39:89:70:3d:c1:b3:91:0b:49:e8:a9:61:
f9:33:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:16:42 2025 by rpki-client