Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/3ZKIh733NIkz8A90ghZangf0O7w.roa
File: 3ZKIh733NIkz8A90ghZangf0O7w.roa (raw, json)
Hash identifier: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=
Subject key identifier: DD:92:88:87:BD:F7:34:89:33:F0:0F:74:82:16:5A:9E:07:F4:3B:BC
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 0194258F24D7208B4AAB71AD73F220B8DF3D
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/3ZKIh733NIkz8A90ghZangf0O7w.roa
Signing time: Thu 02 Jan 2025 05:48:45 +0000
ROA not before: Thu 02 Jan 2025 05:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50604
IP address blocks: 109.197.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:24:d7:20:8b:4a:ab:71:ad:73:f2:20:b8:df:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Jan 2 05:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd928887bdf7348933f00f7482165a9e07f43bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:4a:1c:08:41:8d:3f:d4:ff:e4:4b:81:e3:
3f:3f:84:9f:16:15:61:58:ee:74:04:04:d3:b1:32:
eb:e0:6f:47:20:63:6f:b3:b1:58:aa:30:d6:36:f9:
9d:d5:44:0d:70:3e:84:96:0d:63:cd:d7:f4:4b:43:
7c:30:a5:47:2d:08:e4:22:fe:aa:22:67:1b:16:2f:
86:64:55:34:43:53:c4:9a:bf:f5:d4:69:a9:0f:62:
be:ee:7b:1b:6e:75:5a:70:06:a2:24:6b:a0:36:02:
44:91:b8:bf:3d:16:67:f0:aa:55:8c:fd:07:6e:cb:
6b:89:79:ef:b3:26:06:15:64:9b:73:52:ec:d6:08:
d3:84:29:bf:b4:d0:64:87:04:fb:0d:e9:76:a4:dd:
36:e1:c2:74:c0:b5:d4:51:4a:2f:5a:16:fb:14:8f:
73:40:34:4b:6a:d5:96:7f:02:3f:0e:27:88:80:eb:
2a:c9:1b:c6:89:cb:2c:f8:b0:37:a4:d6:f3:38:26:
26:78:42:1b:bd:7e:fd:bd:0f:1c:97:25:e5:53:9e:
d8:98:95:a2:30:85:14:b7:49:aa:a3:fe:a0:e8:29:
e3:b5:7f:f4:aa:c4:52:fe:b8:e3:08:0b:6e:21:ca:
48:65:26:87:77:9c:6b:24:96:53:5f:cb:3d:60:db:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:88:87:BD:F7:34:89:33:F0:0F:74:82:16:5A:9E:07:F4:3B:BC
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/3ZKIh733NIkz8A90ghZangf0O7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:40:09:13:c6:5e:cc:2a:bc:97:43:c0:66:35:e8:58:8d:5b:
6e:ae:b2:9a:62:21:4a:c6:10:1e:8a:98:fb:20:f4:ff:a3:d2:
6a:77:51:30:4c:4e:68:e4:c9:24:2d:f5:44:e7:8f:65:cd:9b:
86:c3:e8:ba:52:75:f0:bb:6d:a1:d5:03:fd:5d:4d:b2:a6:61:
9b:2a:15:63:7d:be:bf:26:79:2b:b5:4d:53:18:03:65:80:36:
ad:38:b9:61:2a:49:ae:05:b9:c8:fc:ce:d5:7e:60:5e:55:4f:
b5:75:5e:5c:d5:2a:0d:0f:b5:4a:43:31:73:47:81:bb:88:60:
82:c8:29:74:db:03:be:1f:24:48:8b:98:cf:b0:b2:71:e8:9b:
e5:fd:24:21:01:10:77:99:49:45:c3:17:6d:16:b9:8f:58:2b:
72:fe:01:b0:59:3f:da:11:c2:66:c0:bc:65:94:7b:28:d9:44:
90:13:aa:7b:ae:be:36:8d:83:a5:15:5f:db:b1:bd:56:c7:fa:
c4:58:e9:4c:10:9b:83:58:cb:e8:a0:7e:b9:30:78:62:6c:03:
fd:7f:70:ec:42:a2:f0:3f:08:41:3c:d1:e7:48:39:bf:f4:64:
97:58:39:20:38:cc:28:fb:31:92:3c:28:2a:ee:35:86:b9:df:
05:8f:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:05 2025 by rpki-client