Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/P3AUDoyxJpcXHUo2RPW66awT4sA.roa
File: P3AUDoyxJpcXHUo2RPW66awT4sA.roa (raw, json)
Hash identifier: KxOigcTtucaj0hJRplkjU4eF8n/JLBSqTNeX0BiiO2Y=
Subject key identifier: 3F:70:14:0E:8C:B1:26:97:17:1D:4A:36:44:F5:BA:E9:AC:13:E2:C0
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3A9B3DEB57767D166B89424BDAD80
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/P3AUDoyxJpcXHUo2RPW66awT4sA.roa
Signing time: Thu 02 Jan 2025 15:47:53 +0000
ROA not before: Thu 02 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202422
IP address blocks: 45.130.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:a9:b3:de:b5:77:67:d1:66:b8:94:24:bd:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f70140e8cb12697171d4a3644f5bae9ac13e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:b1:25:3d:d1:15:49:b2:d8:21:0d:82:44:
1d:41:c2:24:41:f2:fa:31:ef:1e:33:f9:a7:bd:b9:
0b:ef:47:c3:a0:ae:26:2c:5d:7d:7d:fb:f8:86:b0:
a9:5d:9c:39:81:38:c0:1e:60:57:1a:b3:91:bc:19:
33:10:9a:65:8c:a1:7c:44:1c:09:fe:8b:f2:4b:db:
93:09:79:88:8d:b2:9b:07:7e:1c:dd:88:2e:07:7d:
d1:82:93:ec:3a:c3:25:3e:e4:3a:7a:73:2c:3f:22:
9f:de:eb:ae:d1:14:bb:7b:92:b3:71:fb:8f:47:f8:
2a:a2:0d:84:ac:5a:54:09:d2:9f:63:bb:d0:cb:cd:
3d:be:4e:9e:6e:eb:b4:87:70:99:83:cc:cf:64:56:
ce:bc:2a:e4:b3:d6:35:2f:a5:98:28:9b:9f:a7:39:
b0:cd:e7:21:b8:30:2a:52:35:7b:f1:7d:95:c9:12:
b0:ae:f1:58:59:27:30:6a:2f:2b:8d:8d:03:1c:ae:
67:4c:40:f4:6d:65:ac:1f:ac:90:0c:57:96:46:82:
f0:40:54:5e:94:f8:b6:2c:8f:20:ef:5f:26:a6:7e:
55:eb:f9:9d:cf:e5:55:4c:72:8c:fd:92:b5:40:e5:
d3:27:be:a9:31:cb:36:a4:ce:d3:52:87:69:b0:56:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:14:0E:8C:B1:26:97:17:1D:4A:36:44:F5:BA:E9:AC:13:E2:C0
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/P3AUDoyxJpcXHUo2RPW66awT4sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:08:30:2e:ef:c4:ee:45:67:4b:56:3d:1c:1b:6d:f7:25:b8:
9b:33:a2:90:60:61:67:bc:b9:be:e7:46:0e:14:ad:82:ea:3b:
cf:fa:af:ad:97:71:56:44:be:c4:59:76:66:f8:8d:e1:d3:7d:
b0:ee:89:e0:a5:3e:23:2f:5d:6c:b1:8b:d0:d0:5c:4d:94:6f:
85:ff:75:9d:40:0d:2e:6e:9f:c1:93:48:5a:97:db:9a:3b:38:
7e:bd:1f:03:a5:51:84:d6:1c:c3:ff:3c:a5:c3:58:5d:40:42:
2c:7d:cd:41:cb:d2:95:63:8a:03:b9:15:cb:c6:a7:99:29:42:
44:84:68:8e:de:1d:a0:3c:5f:5a:d7:2f:61:13:30:1d:94:54:
a6:d5:7d:83:d9:34:84:b9:7a:ae:ca:ff:6f:50:c5:05:a2:3b:
0e:5c:45:6f:d7:04:9b:4d:3e:99:be:da:4d:f5:fa:5d:51:ff:
30:72:99:51:c7:76:26:be:57:08:24:0a:8d:d6:98:71:b5:33:
e1:34:44:11:8a:8d:c9:70:02:40:d0:91:db:a6:ba:24:51:88:
d0:ac:a0:a6:12:17:97:56:92:b1:e0:7c:e1:ce:c7:8b:de:43:
05:45:68:67:73:04:81:40:9c:31:32:9e:3d:39:aa:fb:14:73:
11:a0:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:53:07 2025 by rpki-client