Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa
File: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (raw, json)
Hash identifier: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=
Subject key identifier: DC:BD:F1:0D:AA:C9:BB:91:73:E2:C5:C1:C3:83:E7:26:95:2B:2A:0F
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019422202EA8E60092A3066636FCEB9E6423
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53363
IP address blocks: 194.4.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:a8:e6:00:92:a3:06:66:36:fc:eb:9e:64:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcbdf10daac9bb9173e2c5c1c383e726952b2a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:f0:b0:39:a3:5e:11:20:1f:4f:7a:0d:78:
ed:e7:b4:1b:e5:dc:43:8b:93:a7:ec:e1:67:f6:dc:
c8:9e:73:a5:2f:d7:fd:02:75:f3:bd:91:eb:3a:53:
d3:45:86:d2:9b:18:8d:22:1f:d5:ca:54:57:9c:4c:
16:82:a5:da:04:99:db:f8:31:a1:cc:07:07:4d:f0:
0a:b2:65:48:27:13:50:f2:35:6a:06:dc:54:e3:f9:
c2:60:56:4f:d0:c8:25:88:da:92:f0:f4:79:63:28:
4e:95:b7:4a:d8:3b:6f:8c:55:ad:2e:42:e8:dd:09:
f6:a2:8f:95:46:1d:03:35:d8:df:43:e8:5c:50:bf:
a0:03:68:3e:f2:3f:cf:78:11:9b:35:30:c3:81:b8:
89:ce:ff:c0:45:df:f9:0b:3d:b4:ea:ca:c1:dd:9a:
82:ad:7a:66:fe:c6:3d:1e:e4:0a:18:7e:52:e0:8c:
3a:88:67:67:9a:b0:5d:cf:7e:47:f3:79:0f:5b:76:
7f:02:c6:89:57:64:5f:7b:a3:6b:cf:73:7a:e4:25:
e9:16:24:e5:4e:8a:4a:8a:7a:91:54:69:00:44:82:
2c:8f:90:e7:52:05:8e:05:29:7e:f8:0d:04:52:c0:
2d:f8:cc:ec:c4:bb:06:78:3a:28:12:93:c0:28:62:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:F1:0D:AA:C9:BB:91:73:E2:C5:C1:C3:83:E7:26:95:2B:2A:0F
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.50.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7f:94:47:c9:13:c7:4b:ac:96:90:f7:dd:28:85:67:f6:79:
c4:75:2c:7b:96:66:2f:c5:a6:25:97:7a:72:cf:56:d7:f6:b6:
95:a7:ca:b9:9c:b5:32:ff:19:39:bc:e5:dd:a8:c6:25:ef:4f:
9d:88:b9:95:99:38:a4:97:e2:9a:e4:88:a7:32:b5:b1:71:97:
4e:4b:3c:e4:c9:c4:63:da:ad:77:18:ed:45:1e:ec:8e:87:89:
76:16:1d:5e:83:5b:6b:aa:de:96:6c:99:8f:64:25:a6:7e:0f:
b1:55:c2:40:a6:54:9a:00:35:ad:fb:06:6b:f6:34:de:67:74:
85:a5:0c:68:f5:ad:cd:91:db:d2:d3:d6:36:e5:b9:a0:11:82:
2b:ff:6d:bd:1e:31:ba:52:8c:38:f0:80:5a:b9:fe:10:d9:bc:
8d:a8:ca:d7:0e:21:f8:bc:45:e3:32:ce:0e:e9:8b:61:ed:79:
6d:0e:53:1d:fb:f2:0d:fc:88:a2:61:7f:87:cf:e0:46:9b:6c:
5a:87:be:aa:3b:5a:a0:be:4c:17:5c:c3:b6:11:95:71:fd:7a:
35:d1:17:63:5a:4f:4a:97:3d:ec:d7:26:67:39:08:eb:06:5a:
84:b7:c2:ea:47:3f:d3:83:8a:36:d7:a4:d3:81:be:e4:7a:90:
32:c6:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:27 2025 by rpki-client