Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3aHtC3UtZ4SM-pQyo8_Y7Du5bS8.roa
File: 3aHtC3UtZ4SM-pQyo8_Y7Du5bS8.roa (raw, json)
Hash identifier: DvX1hcawj9AFr9iVShHSLqypO3as38GVOWioq8Nf2OU=
Subject key identifier: DD:A1:ED:0B:75:2D:67:84:8C:FA:94:32:A3:CF:D8:EC:3B:B9:6D:2F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71CBF49706F72AE1802C9D53DC6FF
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3aHtC3UtZ4SM-pQyo8_Y7Du5bS8.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201231
IP address blocks: 91.103.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1c:bf:49:70:6f:72:ae:18:02:c9:d5:3d:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dda1ed0b752d67848cfa9432a3cfd8ec3bb96d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:0d:38:d3:b3:f3:a5:6e:12:6e:7d:6a:95:
00:a1:d8:3b:8f:09:7f:95:56:ee:8d:b8:7f:98:70:
11:09:ee:1f:ab:20:5e:e8:e2:83:77:0a:7b:6c:60:
91:df:e1:2e:e4:f6:01:ba:7f:3a:8f:16:0c:9e:0e:
75:ae:39:6e:df:cc:6a:4e:dc:69:c8:f8:33:e1:22:
1b:ae:6a:8e:8c:d6:7a:31:08:47:35:d5:31:71:4f:
c0:0c:f6:fe:47:8a:5f:04:6b:1c:c9:a6:33:df:4c:
16:78:3e:44:7f:75:dc:50:5d:03:07:18:79:9f:a1:
23:09:8a:95:1e:93:e1:2e:8b:b4:01:43:62:43:da:
e0:fa:ce:76:1d:a4:5b:be:89:38:a5:86:ed:1f:73:
96:27:dc:e1:07:98:ee:cc:3b:ef:ae:f9:8a:99:66:
d4:7d:cc:21:22:f7:ba:66:87:75:b0:fb:08:d6:a3:
dd:07:91:17:6e:ee:76:cb:26:d4:d6:99:b9:37:56:
43:07:02:5c:6f:e0:a3:79:02:aa:88:e7:ab:a8:36:
4f:ec:cd:2d:9a:ee:a3:7f:cd:2f:a2:05:81:1f:8c:
65:15:00:9d:30:59:57:ad:64:c4:25:a3:67:ad:f6:
3b:9e:bc:c9:e9:df:89:65:c6:0b:80:f2:77:36:f3:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A1:ED:0B:75:2D:67:84:8C:FA:94:32:A3:CF:D8:EC:3B:B9:6D:2F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3aHtC3UtZ4SM-pQyo8_Y7Du5bS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.254.0/24
Signature Algorithm: sha256WithRSAEncryption
04:02:6f:6f:cf:cf:a4:23:94:59:3f:73:2c:6d:b3:05:5d:6a:
b3:10:ac:35:48:79:08:99:3d:a3:86:dc:3b:4d:35:5d:d6:ad:
84:8f:0c:27:90:5c:16:52:23:db:39:97:03:62:1f:3b:4c:65:
42:bb:7f:c3:4f:bd:b5:d1:a5:6e:27:d5:51:2e:9c:14:31:ae:
fb:a8:6f:9e:eb:46:8b:f9:9a:96:5a:a6:4d:a6:1c:05:68:92:
23:4d:63:e2:b2:aa:92:55:8a:62:81:9d:45:57:d8:23:4a:08:
06:d0:f3:13:37:38:38:82:d0:0c:29:45:66:31:a2:42:0e:ed:
f4:3f:d5:a8:c2:4f:c5:b9:dd:cb:b4:17:e1:f9:29:95:95:f6:
7d:24:64:ae:c6:10:d3:1e:37:ee:54:b2:c2:14:8a:bd:46:2d:
09:23:0a:a3:85:3e:ef:66:e7:c7:94:6d:9c:b6:83:95:b2:cb:
e1:3e:fd:0f:9c:0d:76:a2:13:d7:7a:a0:db:35:90:50:04:5e:
d3:1f:44:bf:3e:a2:1c:02:d0:36:2f:22:ff:eb:6e:6d:0c:b9:
d2:1c:5d:6b:e3:f1:04:ed:19:2a:ab:8d:27:dc:ce:08:57:a4:
26:fd:1d:94:42:4f:38:bf:e0:94:22:9c:b8:48:c0:72:d8:bc:
ff:eb:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:21 2025 by rpki-client