Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/44p27zaxA6brLy7wWUI1I-bIaiw.roa
File: 44p27zaxA6brLy7wWUI1I-bIaiw.roa (raw, json)
Hash identifier: xW/Pb8PDvxenFFbf6KM33XLfvHBXgDkbMmP3UCkQV4c=
Subject key identifier: E3:8A:76:EF:36:B1:03:A6:EB:2F:2E:F0:59:42:35:23:E6:C8:6A:2C
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5A0CA669DAE9B33833DE00A6DD499
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/44p27zaxA6brLy7wWUI1I-bIaiw.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8953
IP address blocks: 90.84.208.0/21 maxlen: 24
90.84.224.0/20 maxlen: 24
90.95.0.0/16 maxlen: 24
92.180.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a0:ca:66:9d:ae:9b:33:83:3d:e0:0a:6d:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e38a76ef36b103a6eb2f2ef059423523e6c86a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:ff:85:c0:c7:b8:40:ec:84:07:f2:69:d5:
d8:f3:d4:99:e4:f0:14:87:10:09:88:c8:56:23:a9:
ab:66:fb:1b:dd:58:39:11:f9:22:18:06:78:a1:e4:
df:c0:d6:e3:08:23:1e:59:eb:5c:93:27:28:f1:9c:
80:bf:66:8c:99:61:36:60:d5:b8:88:61:e5:74:e5:
e6:cc:92:16:8c:31:a6:a8:2a:e1:94:b8:b6:d3:e3:
72:78:f9:f0:15:fe:70:b3:4d:7b:ce:a8:78:e4:c3:
b6:02:8c:32:40:b8:dd:a7:cc:1b:1c:12:4b:0b:27:
67:90:cd:b0:b6:31:8c:a5:f6:86:17:74:a3:dd:fd:
3b:41:fd:24:bf:ea:02:8d:27:f1:88:52:0a:1a:cc:
4b:41:8f:2d:13:55:49:35:b8:cb:4d:d6:60:d5:e7:
73:0c:51:81:89:0d:cd:dc:c1:45:e0:60:b8:38:49:
61:d3:d5:08:4e:a9:b7:36:2b:91:d1:1f:57:52:79:
f4:73:8d:d0:c7:f6:d1:be:67:da:c2:d9:8a:d7:0e:
ad:39:ca:08:24:4e:f9:62:66:45:7a:0f:02:24:f4:
08:87:ce:2b:8e:39:16:8d:8f:10:06:ae:34:1c:cd:
99:65:2f:29:c9:03:12:a8:0d:57:6d:a1:11:6a:ee:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:76:EF:36:B1:03:A6:EB:2F:2E:F0:59:42:35:23:E6:C8:6A:2C
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/44p27zaxA6brLy7wWUI1I-bIaiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.208.0/21
90.84.224.0/20
90.95.0.0/16
92.180.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3c:ca:36:ad:c9:be:1e:13:a6:7c:e1:ee:c8:af:af:ce:61:31:
c3:b3:76:60:6e:76:bd:ef:12:19:7f:eb:c6:8b:d1:40:d0:88:
9e:7f:fc:65:c5:fc:22:17:c3:be:b2:77:c6:91:b9:0d:9b:c8:
fe:76:02:98:49:7e:11:ce:85:21:0e:8e:a3:44:52:2d:a5:3a:
58:70:ef:37:54:76:ea:8b:52:f5:3e:88:ae:8f:f0:52:5c:f9:
fb:bf:03:f2:54:ef:ba:6e:d1:b8:e3:4a:ff:ad:f4:2a:b3:c8:
75:a5:1b:30:8b:71:a7:1d:48:d7:ca:72:91:27:2d:8f:4f:50:
c2:70:82:5c:87:b5:0c:6b:84:24:ac:7a:5d:57:1f:17:8b:50:
da:1e:29:3b:37:15:2d:ce:2d:4e:7b:90:7f:56:96:c4:2e:4a:
7e:19:7b:35:01:16:05:47:1e:08:7d:e0:53:b8:3a:c4:29:f9:
38:b1:12:de:00:df:a6:da:f3:a4:45:f6:ec:05:e0:9a:d5:33:
f1:1b:40:aa:51:b1:eb:c8:d9:38:63:da:36:03:a7:e2:62:d1:
68:eb:eb:01:df:d1:33:f0:82:e3:6a:2a:df:06:12:e2:a6:e5:
26:a7:d8:24:1b:12:32:57:67:9a:9b:ea:e3:df:95:4e:d9:f8:
01:eb:b3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:28:27 2025 by rpki-client