Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/29wssqErvKQtR_9f6uK-OYzddNM.roa
File: 29wssqErvKQtR_9f6uK-OYzddNM.roa (raw, json)
Hash identifier: Bh05SYc8VBmf4zaIv99zE5UZHb6fBJqOGBDvempbpVM=
Subject key identifier: DB:DC:2C:B2:A1:2B:BC:A4:2D:47:FF:5F:EA:E2:BE:39:8C:DD:74:D3
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 0194266A401E3D2119D7FE071A233EEAD833
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/29wssqErvKQtR_9f6uK-OYzddNM.roa
Signing time: Thu 02 Jan 2025 09:48:04 +0000
ROA not before: Thu 02 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200818
IP address blocks: 5.183.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:40:1e:3d:21:19:d7:fe:07:1a:23:3e:ea:d8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 2 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbdc2cb2a12bbca42d47ff5feae2be398cdd74d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:a0:2b:ad:fa:21:85:db:6c:16:aa:f7:f0:
3c:da:85:24:1f:c2:bb:f4:4b:fe:dd:50:82:1b:ac:
9c:4a:7a:58:22:a1:23:0f:86:86:eb:17:eb:03:ec:
7c:38:1f:57:db:49:76:e5:71:38:21:90:17:2e:da:
d7:d8:e2:cd:d0:5f:1c:1e:01:4c:58:87:aa:c8:9f:
e2:c0:3b:99:bf:47:c8:ab:f8:fc:d5:8a:f8:7a:d6:
97:51:f4:61:4d:90:97:59:45:d2:71:27:30:a3:5b:
a7:3a:19:95:33:f8:bb:61:4c:02:77:6b:82:53:bf:
7d:bd:28:a6:ab:ac:c2:1b:19:9c:4e:0d:b7:ef:ef:
77:09:34:e3:30:0f:2f:db:3c:0b:93:ce:aa:eb:4a:
74:42:2b:88:12:ef:e5:c5:5f:61:59:ff:f4:83:28:
2c:37:68:20:29:b9:6e:85:a9:0f:67:3a:3e:c8:e0:
97:d0:94:19:28:15:f4:3f:6d:76:97:77:b2:bd:5f:
27:85:06:68:9b:cc:7f:a1:5a:d4:70:64:cd:62:39:
9e:46:43:6f:46:43:90:10:31:fe:69:b9:05:68:fb:
77:01:47:ce:1a:49:e4:a2:84:ad:02:e3:2c:65:db:
4a:c7:50:d0:df:74:ed:e2:0f:ce:ea:ac:24:d9:68:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:2C:B2:A1:2B:BC:A4:2D:47:FF:5F:EA:E2:BE:39:8C:DD:74:D3
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/29wssqErvKQtR_9f6uK-OYzddNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.108.0/24
Signature Algorithm: sha256WithRSAEncryption
31:59:aa:39:0c:73:12:75:02:ee:de:01:5a:fc:94:0f:a6:ea:
72:b7:a6:f3:53:c5:55:55:c3:3e:c8:98:c7:08:56:ae:83:f4:
b7:bf:d4:23:42:25:4d:ff:53:70:d3:16:be:51:80:64:99:7b:
16:b4:7d:9b:d4:1d:fb:eb:41:1e:08:df:1f:9c:25:22:c0:79:
46:27:9f:57:a4:39:d7:f9:3a:ce:c3:e5:fd:1a:ee:b4:38:84:
40:f7:25:e1:da:94:a3:b7:be:e3:a0:57:fc:b0:70:2f:e9:3e:
b8:1f:df:c0:26:28:8e:d3:f3:63:3b:a4:9f:b2:d1:be:09:db:
e1:1f:6e:26:ee:f3:0e:e9:25:95:52:07:6c:73:a5:5f:94:a3:
f5:c2:5a:e6:44:28:27:95:83:94:83:12:bb:0b:3d:c6:70:83:
92:fe:c2:40:98:31:8a:d1:e5:4e:c1:d8:50:ff:2e:88:01:42:
52:43:15:91:8e:8d:1b:f8:b5:62:5b:9c:c6:95:d3:ee:18:e6:
f3:96:9a:50:54:04:2d:49:05:32:09:7c:19:98:5b:e6:07:56:
b2:28:cf:4a:5c:27:d5:82:5a:42:e2:90:01:7f:33:08:ea:25:
2c:ff:48:ad:55:e7:f5:0d:b9:98:4e:95:13:99:7c:9b:5d:1a:
9b:15:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 15:48:37 2025 by rpki-client