Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3wmn6YowWP2LqnEMCF6s7MqR6XY.roa
File: 3wmn6YowWP2LqnEMCF6s7MqR6XY.roa (raw, json)
Hash identifier: 89w9UxmeWGAako9d+z8inBzSfIUfvV5VD1TYczI8BFM=
Subject key identifier: DF:09:A7:E9:8A:30:58:FD:8B:AA:71:0C:08:5E:AC:EC:CA:91:E9:76
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA333598B1772D6F6C51CC5B1FB9B1
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3wmn6YowWP2LqnEMCF6s7MqR6XY.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39425
IP address blocks: 85.204.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:33:35:98:b1:77:2d:6f:6c:51:cc:5b:1f:b9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df09a7e98a3058fd8baa710c085eacecca91e976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:79:73:80:ef:37:fc:0d:de:f0:ce:45:c5:
e3:e9:17:53:7f:5d:29:4a:dc:11:2d:23:9a:37:37:
eb:a0:64:89:a5:c2:62:c6:67:ca:64:6f:04:88:66:
29:19:b0:95:8e:50:15:13:2e:e2:70:f4:ac:11:75:
73:56:47:5c:11:3d:a8:ac:fb:b5:90:b3:c5:34:d9:
d9:21:2e:1a:ec:2c:7c:94:d3:20:7d:81:a4:cc:bb:
32:71:f5:42:6c:c3:15:47:6a:2f:c6:e9:4c:de:e0:
f0:b1:1f:64:aa:55:e5:11:9d:ec:8f:21:fe:07:5b:
49:0c:fe:9a:4b:3f:e0:1e:08:a3:87:79:c6:26:45:
98:9b:b4:26:f0:96:22:7b:ed:22:09:05:cf:67:c4:
11:a8:a4:fa:43:cb:5b:a3:d4:f4:cb:c4:3d:de:ff:
02:11:8b:d8:b9:32:64:10:30:80:bb:87:c5:d5:c8:
46:73:8a:c2:df:3b:3d:f9:f3:72:fa:49:01:3f:8f:
68:3f:cd:21:d5:d8:aa:97:55:cb:64:20:cb:62:c9:
79:69:4e:59:11:e7:cb:3a:25:28:01:21:c6:ca:df:
74:c7:3e:85:a3:c1:c0:55:e5:ef:5d:f1:f2:a9:7b:
d8:d0:41:05:26:d6:93:31:f6:dc:7f:f0:08:b7:30:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:09:A7:E9:8A:30:58:FD:8B:AA:71:0C:08:5E:AC:EC:CA:91:E9:76
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3wmn6YowWP2LqnEMCF6s7MqR6XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ce:08:f4:d4:27:cd:4a:47:e8:f0:2e:eb:73:15:8e:5b:83:
bc:82:85:4e:82:d5:40:af:c8:f4:ff:45:3a:33:b1:27:65:16:
66:d4:90:73:0e:39:ad:f2:67:83:b4:37:06:80:2f:22:a8:10:
4d:83:e5:53:9b:be:c1:85:d6:e0:a0:56:a0:a3:48:7e:8e:b7:
63:1f:a4:ba:ea:ae:06:d8:ea:d7:53:cf:81:2c:34:1d:22:67:
73:a0:df:ca:18:e8:2a:23:ea:71:07:a9:07:39:84:17:b0:c8:
47:15:81:92:9d:49:98:f9:e3:27:8c:02:b0:2d:24:8d:de:3c:
b7:86:7d:03:a4:fb:64:8c:2d:10:fc:5c:6f:e0:be:a8:7e:5a:
25:dd:3b:2f:d2:89:e9:81:8b:77:18:d5:9f:a8:db:7c:4b:b0:
b1:c3:fe:e2:1e:43:bd:29:2c:1e:90:ab:5c:de:16:f0:b2:7e:
ae:cc:42:42:46:49:c3:7b:b6:1a:97:2f:37:3e:56:44:5d:b3:
18:46:5d:c5:70:50:9e:e0:7f:59:b9:1d:ac:37:05:d5:08:48:
d9:ff:df:6b:97:d2:cd:b4:4e:ad:0c:25:cd:64:2a:61:7c:e0:
1e:c6:a6:cc:28:94:ac:67:ce:79:2f:84:9f:df:b5:c3:af:8c:
2c:c6:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:01 2025 by rpki-client