Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/3wwIi79zg2SGivGdrN-g0LB5ULQ.roa
File: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (raw, json)
Hash identifier: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=
Subject key identifier: DF:0C:08:8B:BF:73:83:64:86:8A:F1:9D:AC:DF:A0:D0:B0:79:50:B4
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0194266C17B481C33914FAB3A9BB6AD3B3B2
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/3wwIi79zg2SGivGdrN-g0LB5ULQ.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21062
IP address blocks: 93.125.39.0/24 maxlen: 24
213.184.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:17:b4:81:c3:39:14:fa:b3:a9:bb:6a:d3:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df0c088bbf738364868af19dacdfa0d0b07950b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:72:c3:43:5d:52:ca:61:9f:63:f7:5b:51:
5a:d5:fa:6f:ef:ff:7a:5e:09:24:79:eb:35:30:ba:
98:98:c0:a2:63:13:9d:c5:4e:5e:30:d0:97:8d:26:
e0:1b:02:22:94:a9:1d:60:6f:1c:2d:6b:f7:9b:43:
76:3e:e5:56:85:60:87:a4:bf:c8:4b:b4:86:7e:e0:
ff:90:95:94:d2:25:78:25:66:ee:d5:9d:0b:23:c6:
04:44:5f:8a:09:99:57:e2:db:dc:8c:57:1c:e7:a7:
6c:8f:2a:c1:79:93:64:cf:ce:2b:4a:bc:e1:57:a8:
db:28:bf:3c:fc:c9:7b:c9:84:f3:b5:8a:ac:33:1c:
62:94:d0:2f:f6:67:bd:b4:31:f6:21:d0:25:69:88:
70:9b:50:cb:76:42:d9:9f:5d:23:82:0c:98:4e:3d:
90:62:f4:e6:65:23:07:ac:3a:0a:b2:58:af:ad:63:
10:20:ed:16:94:ee:01:ad:92:6d:9b:06:6d:e6:56:
e3:12:16:f7:a7:92:fd:74:72:7b:31:f7:5b:1a:94:
a7:9e:bf:76:a5:03:08:31:72:1b:14:a1:a6:6d:03:
af:41:cd:53:71:cc:bc:39:c0:4e:76:3c:ca:fc:6c:
69:38:29:9c:a3:8f:a7:9b:97:1d:ee:84:55:08:4f:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0C:08:8B:BF:73:83:64:86:8A:F1:9D:AC:DF:A0:D0:B0:79:50:B4
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/3wwIi79zg2SGivGdrN-g0LB5ULQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.39.0/24
213.184.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:19:ee:1d:20:93:0a:eb:9f:a9:c1:52:3e:70:e3:63:68:70:
87:47:3c:65:f4:a8:76:46:14:4a:d3:c8:48:85:3d:f0:e8:65:
36:2c:dc:48:fa:66:bc:75:2e:74:2d:06:23:58:a2:e7:72:80:
99:72:9b:bc:e2:c0:14:34:f2:96:93:2f:21:5c:23:5c:c0:af:
12:c5:a0:a5:c7:93:03:a3:91:b7:b6:67:90:c2:48:9c:a5:d0:
e1:0c:ee:ed:1f:08:90:9c:7f:87:0f:58:3b:ce:de:14:ad:2a:
2e:b0:a1:49:de:bc:9a:b0:d0:39:4a:ba:23:1e:e3:04:e0:5e:
f6:fa:4b:8a:b7:f9:67:52:05:6d:2d:99:af:f9:39:cc:ea:ae:
38:4e:33:71:a7:29:89:45:89:1e:ff:34:39:28:a0:2b:7b:61:
50:d8:43:03:78:39:2f:20:f3:fa:ed:b6:e4:4e:dc:27:67:51:
2a:12:55:7c:01:65:9c:55:a0:e3:33:42:cf:48:86:58:38:62:
9c:a0:a2:5b:50:1b:75:96:be:e4:8b:29:c2:b8:8e:21:36:2c:
e2:d3:0a:48:4f:27:e0:a8:f1:d2:4c:e9:03:3a:56:48:d7:d7:
7a:89:e6:2b:b0:3d:e5:86:8e:75:18:17:a4:7e:78:1f:5b:bc:
58:3b:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:18 2025 by rpki-client