Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/3Wo1i0AtNLKktf0Fsv7r4f0TK5c.roa
File: 3Wo1i0AtNLKktf0Fsv7r4f0TK5c.roa (raw, json)
Hash identifier: TuUCEIehwsxsHM+kSQ6AOE1w0z+0lDBW+yhlCQiJ8u0=
Subject key identifier: DD:6A:35:8B:40:2D:34:B2:A4:B5:FD:05:B2:FE:EB:E1:FD:13:2B:97
Certificate issuer: /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial: 0194221FB8A6CC2D93EFE92029F38E78C825
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/3Wo1i0AtNLKktf0Fsv7r4f0TK5c.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34701
IP address blocks: 194.143.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b8:a6:cc:2d:93:ef:e9:20:29:f3:8e:78:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd6a358b402d34b2a4b5fd05b2feebe1fd132b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:b8:bf:a6:c6:26:27:7a:eb:c9:74:42:52:
3c:43:b6:d4:93:36:8e:5f:bd:60:c8:74:05:42:3e:
cb:30:30:a6:67:67:21:46:b6:80:8a:90:78:ab:dd:
e8:cb:03:f3:fa:5f:36:df:10:f9:9b:de:3a:44:e1:
d5:78:2d:af:e2:8d:d2:bc:90:fc:9e:9a:af:9e:bd:
f3:4f:60:7a:5d:b4:52:8d:db:14:6a:ab:bb:bf:2e:
62:41:56:29:ae:12:a0:89:29:b9:02:e3:40:b8:15:
fc:33:2c:17:1d:55:c5:c5:b8:d1:df:82:d5:6c:ff:
12:4f:bb:3a:71:78:0d:90:f8:e3:6a:30:2a:d1:60:
aa:68:fe:0c:22:cd:0b:f2:5f:34:41:f3:87:a9:ba:
38:64:bd:36:ec:e7:af:36:2e:c5:c4:48:1d:7d:8f:
12:37:3d:d0:e4:7f:87:ce:15:95:28:6f:2d:27:c1:
74:25:ec:ec:8f:92:e6:57:a0:d6:e1:23:0c:ae:33:
83:66:01:bb:9a:53:be:0a:a6:53:d1:38:db:29:67:
cb:e6:52:eb:41:a4:be:f1:85:cc:71:8f:2f:6b:d4:
b5:e0:ef:8a:69:29:47:c6:dd:8d:ea:02:99:7c:73:
e9:b4:7c:e6:ac:b0:03:e2:8b:8c:be:a5:a8:26:fc:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:35:8B:40:2D:34:B2:A4:B5:FD:05:B2:FE:EB:E1:FD:13:2B:97
X509v3 Authority Key Identifier:
keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/3Wo1i0AtNLKktf0Fsv7r4f0TK5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.156.0/23
Signature Algorithm: sha256WithRSAEncryption
32:88:fb:6d:c1:90:47:b9:a2:bf:f4:4b:40:4d:ae:8c:74:47:
94:0c:c0:d9:2d:05:7b:29:62:aa:14:d1:07:64:4e:5d:15:f5:
e7:9a:86:c5:3e:c1:40:e7:7e:53:3b:90:01:23:78:eb:79:d6:
7d:23:af:3a:e8:d8:b3:b6:fa:03:39:2f:04:76:c0:bf:f9:41:
b1:24:39:62:27:0f:8b:61:9d:7c:e6:81:46:e1:2d:fb:6d:a1:
8c:8f:7e:b5:1c:79:1d:c2:e0:5d:8d:47:2b:ff:91:d6:00:94:
1e:99:82:c4:45:67:94:e1:6a:62:34:6a:5d:a9:f3:55:de:e7:
d1:45:f1:bc:90:5e:bf:fc:4f:26:fa:f6:b7:a4:4d:d0:67:5c:
70:71:95:2b:0e:40:2a:ea:df:32:e8:55:02:5a:b0:bc:fc:a3:
d2:ac:d2:15:7e:50:95:e2:74:fe:9a:cb:20:de:29:78:9c:82:
10:2f:be:a5:66:5a:a2:e2:d4:b2:be:25:69:f6:a4:33:ad:1d:
d0:65:9b:93:cd:7f:83:9e:2c:a1:48:fe:22:c2:79:ba:bb:b1:
e6:ec:fe:c3:8e:d4:cf:5a:b2:f5:5d:9c:14:67:b9:43:b6:4c:
11:55:3e:cf:1e:dd:30:c4:a5:1b:77:e6:92:89:bc:d2:bf:b2:
d9:92:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:13 2025 by rpki-client