Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/3MDGg1OHtAL-geuqk_TgrHeNJds.roa
File: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (raw, json)
Hash identifier: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=
Subject key identifier: DC:C0:C6:83:53:87:B4:02:FE:81:EB:AA:93:F4:E0:AC:77:8D:25:DB
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 019426D9E45B86E2BB7AE1A0D7B02DBD27EC
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/3MDGg1OHtAL-geuqk_TgrHeNJds.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 146.19.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e4:5b:86:e2:bb:7a:e1:a0:d7:b0:2d:bd:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcc0c6835387b402fe81ebaa93f4e0ac778d25db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:44:de:a5:75:a0:d3:53:02:cc:7a:7a:b6:
5e:f5:94:cc:d3:10:87:9b:ee:65:c1:8c:be:cb:db:
a6:5c:39:7f:39:5b:fa:61:97:d6:a0:e1:9e:93:9b:
94:63:8a:19:8c:7e:8e:95:37:c2:8d:29:01:5c:b7:
a4:e4:59:d0:8e:a7:9b:ea:5b:cd:5e:6a:a9:19:9d:
ff:46:43:95:86:f6:e0:12:53:73:aa:90:1f:e2:f5:
46:fc:44:52:78:e8:54:0e:3b:00:ba:72:d8:96:10:
92:f8:1d:e3:23:51:e9:54:c8:7b:7a:4a:b4:df:96:
db:40:17:c0:24:c7:ab:06:63:b5:d8:5a:df:6a:a9:
7d:e5:db:77:c5:23:6a:70:36:17:8a:c7:b2:55:ea:
59:99:08:0c:3d:10:8c:30:41:f3:9a:c7:f0:5b:56:
1a:36:61:5a:3a:1a:f3:04:d1:8f:18:04:2b:ce:f3:
83:27:cf:73:f5:f5:7b:4e:e4:9d:75:a7:c5:c9:57:
00:32:ba:29:06:36:26:16:d6:33:3a:3a:a2:09:22:
fa:c2:2e:dc:42:d6:1e:64:a9:eb:e5:14:2e:23:b6:
d3:a7:b5:45:03:ef:dc:15:4a:8b:00:63:c9:fc:13:
fa:ed:e0:9f:e6:38:3a:5a:d7:27:a4:eb:7e:6c:78:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C0:C6:83:53:87:B4:02:FE:81:EB:AA:93:F4:E0:AC:77:8D:25:DB
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/3MDGg1OHtAL-geuqk_TgrHeNJds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:54:0b:da:0a:e0:1a:63:f1:15:d7:1a:29:ec:66:f3:6b:c7:
b2:35:6b:af:f3:fd:ed:e8:46:fd:c1:9c:11:92:0b:5b:69:ce:
75:77:83:c8:1a:29:37:c0:85:84:a7:e0:2b:0a:16:8b:ec:1a:
74:b0:83:40:dc:28:14:1e:e6:e8:7a:af:52:11:70:5a:53:84:
93:bc:49:ff:3f:72:fc:fb:1f:48:f2:84:bb:09:97:f9:4c:fa:
47:4f:41:40:ed:96:39:f6:50:01:30:97:17:28:84:b3:26:aa:
25:78:7c:cb:89:f2:30:f9:04:0c:31:fa:81:dc:fd:fe:4c:6a:
d9:c7:43:92:cd:03:e4:ce:2c:b7:8e:77:11:7b:bf:aa:9d:2d:
15:6a:98:fa:03:f9:7d:b7:c2:a7:c9:bf:c1:f2:70:59:71:5c:
bc:cf:04:c0:4b:6d:b7:51:f7:48:89:76:36:30:f5:6e:7e:09:
21:c7:46:a3:d3:9e:55:bf:bd:5c:d3:58:5c:aa:52:ef:ae:58:
3a:ee:b7:cd:b1:84:5c:83:cf:cf:6a:cb:e8:63:fc:6f:4b:83:
9b:03:ed:61:7f:1c:70:74:42:2c:6a:47:d7:4e:41:e9:26:8b:
cd:9c:e7:f4:14:4d:d1:5f:9f:aa:92:ee:48:3f:46:5e:8d:48:
38:55:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:52 2025 by rpki-client