Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3Cby2LXRUiWgFNCYHwq75rUAR-8.roa
File: 3Cby2LXRUiWgFNCYHwq75rUAR-8.roa (raw, json)
Hash identifier: 0vqtbYG60L9bWEsROfSo+mSSz/RDbNLslcnpbk5RIRc=
Subject key identifier: DC:26:F2:D8:B5:D1:52:25:A0:14:D0:98:1F:0A:BB:E6:B5:00:47:EF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421441DD7D9AC07805CFE630F6A96E221
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3Cby2LXRUiWgFNCYHwq75rUAR-8.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214036
IP address blocks: 109.176.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1d:d7:d9:ac:07:80:5c:fe:63:0f:6a:96:e2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc26f2d8b5d15225a014d0981f0abbe6b50047ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:bf:08:e4:6c:51:e4:46:14:16:60:86:51:
96:73:63:07:3a:8e:04:1a:e6:9c:d1:f9:5e:0b:01:
eb:8c:e1:1e:c5:cd:c3:4d:3b:58:f8:12:6c:fa:ac:
a2:a5:55:8f:b0:6c:47:a3:4f:86:b2:01:5b:49:84:
6d:56:dd:94:4c:44:37:ab:2c:42:99:80:bc:67:b3:
eb:54:f5:e0:fe:28:d3:c9:6a:23:60:14:4b:cc:c0:
f2:35:75:91:75:84:21:40:e0:8d:37:6c:8b:e8:2a:
24:4d:a2:99:6d:a9:30:c6:73:ea:6b:cb:d6:d0:4a:
f5:c0:25:a2:93:2d:8d:f7:e2:4a:90:42:59:79:7f:
e1:df:2b:f9:76:45:a0:df:ae:04:18:d1:62:6a:87:
58:56:1a:b3:fc:c4:78:31:c3:35:ae:61:56:88:e0:
83:aa:f3:96:4e:cb:2a:aa:21:f9:9d:e2:83:cb:98:
ab:93:06:f8:63:ca:4f:50:6c:48:d3:47:7f:c9:da:
67:67:17:b7:c5:e0:e8:a4:da:c9:f2:41:c7:2e:8a:
5d:d8:54:6a:01:62:ac:70:92:be:bd:01:4d:55:9a:
f0:6b:74:10:88:78:1b:7d:ec:ae:e0:53:b1:2e:66:
69:bb:3e:1e:d9:4d:9e:06:94:af:6d:52:09:bb:b8:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:F2:D8:B5:D1:52:25:A0:14:D0:98:1F:0A:BB:E6:B5:00:47:EF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3Cby2LXRUiWgFNCYHwq75rUAR-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ec:f4:72:e8:dc:04:1e:0d:27:46:5d:23:13:ef:2f:8d:be:
57:93:bb:4a:7b:7c:15:bd:69:a8:c1:54:02:4a:10:03:71:0c:
81:ed:25:70:ad:d6:45:2e:98:18:d5:f5:73:52:d0:6a:61:7d:
0f:45:5a:b9:bb:83:d9:94:c0:a0:04:b3:fe:d2:ca:01:98:38:
08:4e:3c:0f:72:01:c8:d4:79:fa:06:c6:7a:ac:95:74:dd:ae:
6f:b0:68:95:07:8e:07:d0:16:3a:33:e1:39:86:83:9d:4d:5b:
1d:7e:ff:38:86:24:6b:52:e0:33:58:3a:95:8f:38:6b:b2:4a:
cf:00:9e:3a:8e:49:f8:b6:5d:8a:fd:25:ee:3d:cd:50:8c:a2:
a5:35:22:26:79:36:93:5b:f6:63:b7:f0:86:21:6d:3d:6a:ca:
19:da:e1:d3:72:92:bc:56:a9:b7:31:17:d8:0a:6f:b1:b8:2b:
5d:45:36:e8:84:3b:00:dc:a4:29:8a:9a:06:49:19:bc:1d:c2:
e4:03:b9:ca:5d:f1:01:78:50:67:35:c9:7a:5c:54:c5:a8:2b:
38:c1:7b:a1:db:c5:b2:e7:18:20:ba:f6:26:a6:c4:88:91:4d:
b5:74:08:3e:2f:8d:fc:2d:c6:fe:53:e9:9c:6c:ec:59:d1:7e:
93:21:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:45:01 2025 by rpki-client