Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa
File: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (raw, json)
Hash identifier: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=
Subject key identifier: 0C:B1:B3:83:83:D7:5D:F3:0B:2F:3F:6E:53:D2:5B:F0:6C:E3:4D:84
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D3B886458B692218DF9C6E8C7B80D
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197743
IP address blocks: 31.3.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3b:88:64:58:b6:92:21:8d:f9:c6:e8:c7:b8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cb1b38383d75df30b2f3f6e53d25bf06ce34d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:25:9b:ed:07:1b:3f:e1:b9:80:f3:5e:00:
c9:fb:b9:7d:e5:33:16:c0:02:f3:f1:17:5a:58:f8:
7a:c9:91:4c:62:1e:2c:d0:a2:e8:76:0b:f4:8c:d4:
aa:87:3b:bf:51:21:fa:23:f5:c2:6e:09:62:be:20:
e0:78:d7:76:a4:6c:ea:95:63:49:82:7b:32:7c:d3:
3a:58:3c:08:13:e5:d0:67:7f:31:ea:7d:26:21:04:
d4:05:b1:72:eb:53:3f:7f:b6:ad:d5:b8:8e:59:1e:
32:c4:95:0d:c7:40:28:e0:ac:0f:b3:25:84:f6:e2:
1b:2b:63:da:5f:1d:4f:34:61:4e:75:ad:c3:0a:70:
a3:33:62:a6:8b:37:77:81:ea:a5:4b:0c:5c:8e:2d:
52:ed:29:3a:7b:33:9d:0a:1f:c3:03:02:7e:12:20:
77:5a:29:84:eb:15:62:e5:db:9e:94:4f:5e:01:a7:
95:c2:4f:b9:81:df:80:6c:b9:64:12:18:f9:44:8e:
81:f4:09:b7:1d:b1:a0:5c:3b:dc:c6:1b:3a:08:2d:
d4:72:26:ce:02:58:40:81:f2:a2:8a:8b:36:09:49:
f6:a8:aa:45:ee:86:86:be:59:7c:91:64:86:49:b1:
51:4f:f6:4f:e2:a3:ab:7b:b4:06:7b:09:a5:5a:f3:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:B3:83:83:D7:5D:F3:0B:2F:3F:6E:53:D2:5B:F0:6C:E3:4D:84
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:0a:84:49:2b:1f:a4:f4:dc:71:8e:15:28:a6:cb:30:18:d0:
ea:e8:4e:eb:1e:72:c4:3c:dc:37:c6:8f:c9:b4:4c:2d:c2:f9:
75:9d:13:2a:0a:bc:5a:f2:33:af:6d:63:e5:34:43:25:80:09:
3f:a1:d3:1f:d6:0d:be:b6:83:c7:53:d7:e1:74:15:68:f8:6c:
06:68:98:7f:72:b4:f4:fc:fc:62:29:55:1b:7c:09:e2:ad:ab:
c2:eb:9e:ba:22:82:7f:f9:c2:09:b7:6f:ca:08:64:b0:2b:9c:
dc:1b:e4:e9:81:17:e5:3d:2b:2a:66:2b:ec:7d:55:0d:0b:40:
80:84:59:73:35:d7:83:1d:8d:34:6f:ea:97:2e:84:59:28:ea:
74:89:7b:ce:9a:b5:11:16:7c:e6:ed:01:66:5b:b0:08:cd:3a:
ce:ee:6f:89:c6:1a:97:e5:31:61:a8:4f:eb:fa:f5:a7:6f:41:
eb:78:64:29:71:55:3b:e5:cc:31:7b:90:3a:de:b4:cd:56:e2:
7b:d6:ab:6d:1c:e9:8c:ba:6f:bd:f4:c4:49:6c:a6:28:c5:07:
fa:79:7c:71:4c:2e:71:6f:ae:f0:70:11:9c:e6:bb:c7:89:f5:
1e:a8:02:0c:76:2d:1d:87:de:0d:27:a9:20:dd:f5:ba:69:90:
7d:9f:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:24:27 2025 by rpki-client