Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/RaerZJiwom12vfDUL8cfBWeTZ3g.roa
File: RaerZJiwom12vfDUL8cfBWeTZ3g.roa (raw, json)
Hash identifier: aPbO55y31TfQ2qeeJ/+lEOWB+jxRFblzWIoyDlIwc6o=
Subject key identifier: 45:A7:AB:64:98:B0:A2:6D:76:BD:F0:D4:2F:C7:1F:05:67:93:67:78
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5AFD5ECC63C380F6E05D82BFDAB45
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/RaerZJiwom12vfDUL8cfBWeTZ3g.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39694
IP address blocks: 83.206.141.0/24 maxlen: 24
83.206.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:af:d5:ec:c6:3c:38:0f:6e:05:d8:2b:fd:ab:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45a7ab6498b0a26d76bdf0d42fc71f0567936778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:e0:7c:fd:84:00:1e:c6:7e:05:82:6b:35:
d4:a0:e0:5a:55:63:5f:39:8c:fd:11:fb:cc:61:f7:
bd:93:65:15:c4:ec:f6:45:fb:fb:c6:c3:25:3e:72:
a5:87:3b:0c:1a:21:4d:68:98:b5:b3:7d:f2:4d:bd:
0d:aa:05:7b:d9:6f:9b:ed:0d:41:05:56:19:c0:09:
0e:f5:3b:b6:07:08:b8:ca:51:df:f1:28:33:8f:9d:
4f:11:09:d9:26:7a:8c:a9:5c:be:89:c1:28:c4:ee:
30:6b:09:0a:0e:e2:63:b7:0f:27:af:a4:0d:a5:c9:
a4:ea:ca:2d:bd:df:96:d5:3c:3b:72:ae:a8:22:4a:
83:48:e2:01:c0:84:ed:4b:76:3c:fd:66:ab:bf:90:
b1:78:d7:fc:96:a5:2b:30:97:c2:bf:4d:16:51:e4:
28:46:e4:91:6d:5d:5f:ae:ec:4a:ed:fd:a6:cb:f7:
7c:63:f3:9c:ac:aa:de:b6:36:44:4a:92:85:25:e2:
36:d6:9d:2b:f2:ac:0d:c7:90:82:75:f8:79:f6:6d:
94:08:34:a1:ff:a0:f6:a9:ce:0a:46:15:56:46:ff:
af:17:44:7c:0b:92:f2:35:d3:d0:87:98:40:32:bc:
e1:04:32:01:49:54:57:58:f9:1f:0c:b9:91:a0:83:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:AB:64:98:B0:A2:6D:76:BD:F0:D4:2F:C7:1F:05:67:93:67:78
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/RaerZJiwom12vfDUL8cfBWeTZ3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.141.0/24
83.206.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:51:6c:de:d0:76:ae:d7:3c:95:e6:93:90:75:a9:bf:a5:1e:
3d:e2:4b:5f:75:a9:34:45:45:88:86:b1:0b:3b:46:f2:12:1a:
fb:0e:ef:33:84:94:45:df:35:a0:f2:a6:de:ea:44:d8:53:0f:
f5:f0:30:0a:9f:e7:37:18:8e:7f:06:93:5e:ec:c2:ab:3f:99:
2b:26:37:dd:e1:eb:9f:0b:20:60:b0:65:40:b3:5b:8e:51:14:
e2:3e:e0:fa:8c:ac:40:90:b1:73:94:27:d5:d1:e9:bc:1d:3a:
42:18:33:db:c4:28:83:98:35:fd:1e:c0:3c:ab:0f:da:9b:9f:
fe:ec:c1:2c:51:c9:44:c4:aa:06:3a:38:6c:9c:4b:04:5d:a2:
23:d2:bd:37:a8:10:78:93:7b:53:61:17:32:0f:f9:9e:2e:6c:
ca:c4:e9:09:7a:3a:1b:17:cf:e2:14:48:50:fd:62:74:fa:ce:
78:db:4c:b6:36:db:cd:41:d7:4f:c7:5f:95:d3:a8:00:25:c2:
ca:6c:13:6f:b6:b4:8a:44:f5:4f:45:2c:6e:a6:29:f3:7f:fa:
4f:fb:16:f2:98:d8:c9:77:03:ad:f7:7a:6c:46:fb:b3:8c:56:
e5:35:8e:53:a8:7b:e3:2f:48:a0:9e:86:69:e9:91:08:19:cc:
23:9c:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:55:59 2025 by rpki-client