Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/3_-c02s70_bWI80EfV5nMZhCjHg.roa
File: 3_-c02s70_bWI80EfV5nMZhCjHg.roa (raw, json)
Hash identifier: 1ZDiW1elfufjNKaqhAw29FTOI2soWhXtopSXVjj/ruY=
Subject key identifier: DF:FF:9C:D3:6B:3B:D3:F6:D6:23:CD:04:7D:5E:67:31:98:42:8C:78
Certificate issuer: /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial: 01941F8C9D89AE1B75AB08CE42AF7B4239C9
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/3_-c02s70_bWI80EfV5nMZhCjHg.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9044
IP address blocks: 91.199.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9d:89:ae:1b:75:ab:08:ce:42:af:7b:42:39:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfff9cd36b3bd3f6d623cd047d5e673198428c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:af:8e:d2:a2:5d:01:bf:d8:ed:7a:ac:a4:
2b:f2:90:0d:6a:60:3f:05:47:db:c4:02:e8:51:a8:
7e:ff:f9:91:e3:1f:3c:01:93:06:fb:6b:94:4e:75:
ab:20:f9:f7:b0:3b:9f:9c:10:17:fc:dd:5f:90:85:
1e:31:a4:11:39:e3:c2:96:4b:92:38:ec:4d:25:c0:
83:7f:75:30:39:f5:e7:d3:97:57:5c:23:af:13:23:
52:55:86:46:48:ed:8b:e5:5d:2c:91:2d:7c:b4:e0:
97:76:67:0b:db:91:da:49:b3:22:4f:ee:7d:d6:47:
91:83:80:f8:62:bf:28:a9:ce:1f:a2:af:ad:1b:fc:
f1:76:32:a5:b2:9c:22:7f:8c:53:7f:c5:ac:60:a1:
45:12:8d:42:16:41:8d:60:2e:4c:bf:5b:fe:1b:e1:
80:18:44:b7:d7:eb:9f:11:01:1f:ea:c3:4a:81:8e:
13:40:72:60:0e:4c:2f:ab:2e:21:d0:fb:ec:77:57:
ca:71:f7:db:0b:8b:43:f0:2a:93:67:14:19:77:f0:
4c:08:5e:f0:89:ae:c2:54:1c:38:e3:85:fa:50:ea:
b6:51:28:70:70:a3:55:c0:91:db:37:0f:b2:df:2d:
14:1c:7c:6f:51:e5:e9:7b:2d:31:02:e7:a3:a0:19:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:9C:D3:6B:3B:D3:F6:D6:23:CD:04:7D:5E:67:31:98:42:8C:78
X509v3 Authority Key Identifier:
keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/3_-c02s70_bWI80EfV5nMZhCjHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.228.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ea:4f:9b:92:86:e2:e0:f1:32:e4:2e:9e:cb:6f:41:c0:34:
33:9c:41:bb:46:39:7a:3b:30:5e:0f:3d:4f:15:6b:4e:e2:7b:
39:36:28:f4:01:80:9a:a2:19:95:57:09:7a:93:5b:2f:f8:bf:
0a:f2:4d:62:1d:dd:9d:8c:2e:df:04:97:97:e0:9a:93:42:62:
a5:5b:44:5d:70:3e:c1:1e:26:2c:ed:93:ca:78:54:f1:86:cd:
08:5d:5b:d1:01:05:8d:b0:08:ef:fd:f5:1a:e6:9b:af:14:c7:
73:da:ad:5d:e7:ee:d7:ee:2a:f4:88:36:b1:9e:c4:e4:44:d7:
09:17:77:b5:b3:85:e0:dc:62:1c:9b:63:c3:dc:66:27:02:12:
0f:d6:de:ee:20:68:d1:3e:16:02:5e:a4:7e:40:8f:e0:44:59:
5f:7a:0d:f3:21:95:7e:3c:3e:fc:29:40:d8:9f:16:12:ad:7e:
20:94:36:8b:cc:6a:cf:bd:b3:c2:7a:94:6d:4c:84:9b:3f:51:
ea:65:d5:a9:70:da:dd:12:b3:ef:f6:a2:7f:71:13:be:29:48:
d7:84:7b:6a:cc:b1:a4:36:f2:13:c6:3b:f1:5b:24:01:1b:7f:
87:ee:01:26:5a:86:31:93:10:c8:62:e2:c5:fe:b5:39:e9:11:
d1:f2:a8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:20 2025 by rpki-client