Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/A3pbn3ekni2GhddhB21U3DXwZ-Y.roa
File: A3pbn3ekni2GhddhB21U3DXwZ-Y.roa (raw, json)
Hash identifier: w6w3+UNeqriZJvvRJht0jP6LNOMWu7OkSkQqxZTL6Tk=
Subject key identifier: 03:7A:5B:9F:77:A4:9E:2D:86:85:D7:61:07:6D:54:DC:35:F0:67:E6
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D65647242622E5B3337390992F9490
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/A3pbn3ekni2GhddhB21U3DXwZ-Y.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10103
IP address blocks: 178.255.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:56:47:24:26:22:e5:b3:33:73:90:99:2f:94:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037a5b9f77a49e2d8685d761076d54dc35f067e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:a7:fd:7f:99:38:96:53:ef:04:0d:c0:c0:
63:dc:36:43:ca:fe:b1:35:83:2d:dc:69:4b:62:07:
ec:49:5f:8a:0c:28:29:31:81:b8:04:f8:ba:0d:b7:
d9:6e:a2:90:55:19:b8:bd:fa:f4:8e:b5:40:a0:82:
4c:0b:45:e0:7a:ca:aa:3b:63:18:e3:84:76:dc:a8:
55:e1:d0:b9:cd:a9:ad:49:73:23:cb:b7:7c:52:85:
48:f1:e4:b7:a0:e1:c1:81:a3:ef:f4:09:32:01:6e:
c2:bd:c1:16:9f:4e:8b:ae:96:6c:88:bb:cc:aa:b6:
03:cd:72:43:b0:6a:e4:f0:35:10:0f:13:33:da:7d:
5c:d5:2a:56:e7:73:96:60:fa:6b:85:de:9e:3a:b8:
99:79:d2:f3:7b:e0:d9:a2:56:04:56:16:f2:2e:f0:
e5:94:2f:e3:f0:69:6f:57:20:9e:06:73:88:51:62:
20:4f:d2:50:4a:20:32:38:a3:95:da:87:8f:a1:90:
8d:a7:43:1a:c8:89:e9:62:10:8e:00:2a:a4:d7:35:
6f:bf:0d:cc:8e:31:76:f3:da:17:87:02:3c:e5:10:
0f:f9:f4:b7:b4:68:0c:ad:e1:ab:00:1d:45:36:90:
d4:6d:55:17:f3:f9:45:a7:05:cd:72:54:30:9f:27:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7A:5B:9F:77:A4:9E:2D:86:85:D7:61:07:6D:54:DC:35:F0:67:E6
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/A3pbn3ekni2GhddhB21U3DXwZ-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:12:12:21:4b:ce:b1:42:71:78:6c:e5:99:2b:8e:b5:66:65:
07:93:24:e4:79:3d:69:32:7b:df:8c:86:77:40:7e:e1:29:74:
b8:b0:fc:56:1d:f2:d9:71:5a:5c:9e:5c:f9:29:81:e2:82:32:
e8:6a:06:76:38:57:f8:a2:f7:24:b8:c3:ee:82:ed:fd:36:6b:
5c:62:0d:f4:25:d9:7c:07:60:56:ea:b1:f5:a1:bc:48:6c:ab:
ff:86:94:35:eb:6a:29:17:ae:8b:0e:39:8c:96:5e:ef:51:67:
ca:08:43:25:8e:2f:b5:97:0a:87:e2:68:b8:f9:6e:0a:d0:03:
3a:75:fa:66:23:86:fb:a4:c0:d8:3c:c7:4e:1e:e9:46:a7:2e:
71:54:cd:57:76:29:d9:a4:db:8b:68:c5:61:7a:44:97:74:9f:
2a:27:84:58:45:12:c9:c3:15:93:9a:43:9d:f0:c0:af:89:74:
44:a8:6c:d3:46:12:b1:90:63:54:97:52:22:73:b2:2e:24:c1:
63:89:ea:63:e9:cb:0f:e2:36:c1:96:d6:78:c2:92:15:11:91:
23:81:1d:4e:00:d4:83:46:c2:64:6a:40:49:ec:1c:ce:eb:b8:
59:e7:fe:98:9d:28:98:9c:0f:b4:bf:86:a1:ab:43:df:b9:f6:
58:8b:79:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:04:45 2025 by rpki-client