Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/3RrW5Yatg2PUvnJMq7_H-tuFmj8.roa
File: 3RrW5Yatg2PUvnJMq7_H-tuFmj8.roa (raw, json)
Hash identifier: 5AaD0wsj8bY2cs7Xy1+SAntuaiPPTR2j1GucGYtil+8=
Subject key identifier: DD:1A:D6:E5:86:AD:83:63:D4:BE:72:4C:AB:BF:C7:FA:DB:85:9A:3F
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 019428270FEE9C5CC38C10B30839C4C1F2B4
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/3RrW5Yatg2PUvnJMq7_H-tuFmj8.roa
Signing time: Thu 02 Jan 2025 17:53:56 +0000
ROA not before: Thu 02 Jan 2025 17:53:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208377
IP address blocks: 84.246.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:0f:ee:9c:5c:c3:8c:10:b3:08:39:c4:c1:f2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jan 2 17:53:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd1ad6e586ad8363d4be724cabbfc7fadb859a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c5:09:ae:f3:83:11:7b:e5:68:29:de:ed:e2:
a8:b6:a8:df:34:14:75:84:83:5b:cd:5b:83:ad:d5:
cd:3f:ae:d6:47:51:b1:0b:4c:5e:e0:18:9f:6b:a2:
47:b7:a6:0c:f4:5f:cf:79:2a:05:54:c4:49:40:5b:
fc:99:d5:51:14:4e:25:ec:07:eb:35:fa:eb:df:ab:
0d:ea:b0:2f:fd:99:03:8b:6d:4e:5d:b0:f6:09:ba:
8d:a0:c2:9f:7d:b0:39:2a:61:2e:13:98:86:da:d9:
69:a9:ee:6d:6c:e7:5f:d9:11:56:00:86:91:31:fa:
48:2b:a5:66:93:be:81:cb:99:b0:63:a3:00:66:31:
cc:8a:8a:ae:ab:e9:16:d4:22:6e:17:dd:bc:40:34:
56:0c:5e:b9:a1:87:25:d1:a2:18:64:f5:e0:bf:3d:
d9:82:0b:99:17:a8:07:79:43:cb:01:c0:f6:de:46:
5f:35:b4:ad:49:2f:72:bb:1f:15:2c:34:3c:38:0f:
22:a4:a4:c8:b4:d3:22:8c:f1:c3:b1:d5:8f:0a:3e:
12:2c:ef:30:7a:90:4a:40:1f:64:d0:da:9a:43:5a:
7c:bd:ca:05:59:c1:cb:f1:99:5c:a7:34:61:e6:9c:
6a:bf:e4:ee:99:70:e1:66:82:6c:a2:bb:b7:e8:06:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1A:D6:E5:86:AD:83:63:D4:BE:72:4C:AB:BF:C7:FA:DB:85:9A:3F
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/3RrW5Yatg2PUvnJMq7_H-tuFmj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.242.0/24
Signature Algorithm: sha256WithRSAEncryption
42:51:f8:4d:7d:c3:42:44:42:e6:23:c5:0e:ca:2b:88:89:af:
0f:7b:dd:55:e8:1c:36:27:3c:4d:cb:d8:57:c6:7b:d7:c3:4f:
d8:b3:3d:00:c1:f6:07:01:64:98:1f:4b:f0:c2:95:ca:42:e3:
12:48:72:38:6a:ca:bc:0f:d0:ab:75:47:79:db:6f:78:de:16:
c3:56:dc:86:82:17:23:f9:b6:f4:ce:42:6d:51:71:00:37:0b:
fd:69:69:fb:6e:66:21:f1:72:6b:05:b0:93:19:8d:78:6d:69:
28:36:ce:86:80:a4:12:02:fc:03:ff:87:98:2d:ba:32:79:3b:
4e:23:4f:5c:e5:76:5e:78:3b:77:73:ac:a0:39:5e:2e:f0:4a:
1a:1b:ff:71:d8:6d:d7:a7:81:eb:c1:3d:56:8c:40:4b:02:26:
58:67:2e:51:d4:46:8f:bb:2f:c9:43:4a:bb:a9:4f:9f:ed:da:
b7:6b:18:2d:9f:05:72:8b:64:a9:14:7d:19:fa:ac:bc:10:c8:
6d:68:a7:a8:37:19:a2:17:9e:6b:74:dd:73:af:01:5f:fd:cd:
73:71:82:53:d2:59:ae:0b:16:7e:35:cd:da:0e:f5:2a:0e:7f:
e8:ee:ee:ba:e1:e6:9c:85:83:75:d7:83:12:b8:61:ed:08:f8:
da:02:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:58 2025 by rpki-client