Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/3520iAwmR0BvV2MPg7TBl3ALKj4.roa
File: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (raw, json)
Hash identifier: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=
Subject key identifier: DF:9D:B4:88:0C:26:47:40:6F:57:63:0F:83:B4:C1:97:70:0B:2A:3E
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019420D660DF0E7AD727D58967B98320C617
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/3520iAwmR0BvV2MPg7TBl3ALKj4.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 178.20.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:60:df:0e:7a:d7:27:d5:89:67:b9:83:20:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df9db4880c2647406f57630f83b4c197700b2a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:80:79:35:4b:6c:1f:08:6d:d0:01:ca:f2:
ff:4f:9e:17:65:99:8d:73:6e:83:6c:ce:13:3d:f1:
20:75:7b:7b:78:34:c6:4d:0f:7c:33:0d:25:e1:d3:
ac:8d:2c:6b:f6:c3:ef:20:e9:05:d7:a6:a2:1d:73:
ca:4f:75:9f:68:de:58:a1:e9:b9:c9:6a:32:3c:7d:
98:d7:10:90:9f:86:75:70:d8:3c:8a:3e:32:c0:96:
ed:49:57:2d:20:12:42:65:ff:94:95:58:a0:1d:3a:
be:83:3e:9f:b7:5d:44:0f:a5:bf:ef:0c:79:75:15:
fb:a1:0c:44:1b:98:1b:1b:65:c4:8b:c8:b1:69:87:
97:fc:a4:0c:75:76:88:0b:e5:e6:8c:03:50:f3:8f:
6f:24:01:e4:57:43:62:f9:f5:e7:0e:5e:d7:70:3d:
8c:c2:b7:cc:08:fa:6c:50:eb:e0:19:8b:4e:fb:62:
8f:73:ca:fe:b8:da:33:09:90:14:c6:1a:c3:28:d9:
05:fd:c6:85:4d:a9:8d:44:41:31:96:a3:3c:22:fa:
8c:fc:9d:4b:bf:03:73:67:23:63:48:85:a0:3b:c6:
57:f9:f7:6f:e3:2c:47:f0:d0:e0:7c:ac:aa:c4:19:
d4:c9:72:f3:77:66:9a:7b:54:c3:25:7f:b7:06:7f:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:B4:88:0C:26:47:40:6F:57:63:0F:83:B4:C1:97:70:0B:2A:3E
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/3520iAwmR0BvV2MPg7TBl3ALKj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.212.0/24
Signature Algorithm: sha256WithRSAEncryption
86:40:d5:c7:53:e1:90:eb:b0:3f:44:e2:3a:59:70:7e:bb:91:
17:84:c8:74:02:ac:0a:42:c5:16:79:16:ae:72:44:02:09:46:
51:2b:37:fb:4b:e6:b6:43:34:23:de:95:e9:cd:26:0f:23:d5:
45:69:0d:0d:d4:2b:17:fd:90:b0:1f:dc:54:80:f1:c8:bc:80:
c1:db:bf:e4:99:6f:5b:23:a4:f4:44:28:bd:a9:66:66:91:9e:
e9:03:73:31:10:27:bb:a9:78:cd:f1:82:45:4a:87:35:8b:19:
5e:41:70:21:8a:b6:be:2e:26:5c:0d:fe:74:d2:0a:0e:ee:fc:
d7:4a:b0:3a:b0:3b:2d:71:fa:1c:0c:77:a6:a6:28:c5:29:d2:
4d:bf:69:9b:4b:63:03:66:37:20:93:f6:55:f9:af:3d:27:c4:
46:7f:20:b5:6f:c7:f8:3d:60:9d:89:22:a1:55:85:41:f0:42:
fd:c4:14:64:58:dc:99:89:f6:85:d0:f7:eb:fa:25:56:6c:90:
e0:43:bc:66:d3:e8:85:a1:aa:e8:76:93:b0:40:4f:a5:ef:01:
ac:a0:b7:3f:93:a0:71:72:4d:2c:cc:07:5f:99:c1:f2:1a:5e:
5e:c7:6a:dc:9a:f9:bd:4c:f0:2f:b7:2e:7e:77:f3:75:60:1d:
7d:cb:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:13 2025 by rpki-client