Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i3RjNMYpFEvzYxFu1AlZVYvAYnE.roa
File: i3RjNMYpFEvzYxFu1AlZVYvAYnE.roa (raw, json)
Hash identifier: hb6Vg2kXmV3aa8Dm8o8PaQUKEkCoildGVREAtTT155o=
Subject key identifier: 8B:74:63:34:C6:29:14:4B:F3:63:11:6E:D4:09:59:55:8B:C0:62:71
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019427A9FD828F5F0EF4F34C918A0659FB2D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i3RjNMYpFEvzYxFu1AlZVYvAYnE.roa
Signing time: Thu 02 Jan 2025 15:37:19 +0000
ROA not before: Thu 02 Jan 2025 15:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215189
IP address blocks: 213.218.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:a9:fd:82:8f:5f:0e:f4:f3:4c:91:8a:06:59:fb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 15:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b746334c629144bf363116ed40959558bc06271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:d3:f1:53:1c:9f:18:14:38:02:c8:40:d6:
68:41:7f:2e:97:69:bb:d6:7c:27:e4:63:7d:94:ab:
fe:66:a1:6b:fc:27:dd:e5:13:7f:c6:4f:b1:e0:87:
42:f6:f4:91:7e:8a:55:f5:4a:49:fa:5b:71:13:99:
ea:44:17:27:cf:a4:d9:cc:17:12:34:bb:f2:4b:85:
21:c6:12:8d:ad:15:d9:14:17:92:a1:d3:f5:03:57:
27:2c:f0:c7:57:cc:b3:21:af:c3:c4:5b:80:f4:f4:
56:73:58:0c:a3:3c:ce:64:ec:40:ed:14:f4:4c:f1:
0d:6a:b9:e0:c7:54:3d:d9:cd:ec:d4:b4:1a:c7:cb:
a1:bc:2c:68:fd:98:8a:2c:8e:8b:0f:a6:bd:2e:07:
66:5e:f0:b5:2a:ca:38:40:e2:28:b2:75:3a:ee:d4:
00:ba:21:37:2b:fb:a5:a7:97:2e:27:82:44:5c:ee:
fd:0e:46:5c:7c:6c:27:ab:cf:df:97:73:0b:2d:d7:
9c:aa:8c:04:26:1f:8e:58:2b:59:7a:e1:1d:e5:d0:
99:42:8f:42:51:15:81:99:73:b9:47:86:f2:66:1a:
c4:fd:04:3d:90:20:38:ab:7b:f0:7d:95:b8:c2:3c:
8e:4c:ad:c0:ef:f4:32:57:89:91:32:bb:67:a8:7d:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:63:34:C6:29:14:4B:F3:63:11:6E:D4:09:59:55:8B:C0:62:71
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i3RjNMYpFEvzYxFu1AlZVYvAYnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.232.0/24
Signature Algorithm: sha256WithRSAEncryption
45:72:37:e5:f0:d4:ac:fb:4f:a3:b1:c8:35:c5:bd:b1:f4:ab:
65:c8:e3:d4:b1:70:e0:a5:ff:2c:61:29:e3:3c:7e:ff:60:e3:
eb:3c:ad:de:f2:0a:27:34:5f:de:7c:f8:67:ad:75:28:83:a4:
b4:31:8e:7d:db:c7:db:80:ea:fa:bb:ab:2b:9d:bf:cb:19:0c:
af:6d:fe:d5:1a:65:34:62:67:00:50:31:67:f4:37:71:50:9d:
b8:26:b5:6f:1a:df:fa:8b:2f:a6:ec:e5:37:51:e9:10:c4:5c:
7f:91:e0:08:0e:bc:62:4a:c5:ab:28:5f:b5:e3:81:9b:59:bb:
a6:33:6d:f6:8a:19:be:93:61:70:0f:8c:fa:db:fa:57:6f:a0:
60:fa:06:7c:c6:fc:a8:8d:d4:33:b5:fe:da:76:6c:45:41:8c:
c5:ef:b2:3c:8f:29:8e:8a:29:e6:a8:db:5a:55:fc:61:a3:ac:
eb:d4:1b:7e:46:59:b7:fd:91:09:b2:17:c8:0d:56:dd:80:4b:
ab:62:e2:3e:b1:4a:15:0c:a0:5c:04:85:1c:0b:90:0f:76:25:
54:f1:ff:7e:f3:5a:7c:88:d2:8b:94:54:9e:9e:7d:22:9d:ca:
cf:bd:78:5b:c5:73:6d:99:b9:2b:f2:47:b7:ce:bd:7a:9c:f7:
6a:cf:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:55:19 2025 by rpki-client