Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/9dsXnKS6bdnZ5zH-1khJKUVmvVE.roa
File: 9dsXnKS6bdnZ5zH-1khJKUVmvVE.roa (raw, json)
Hash identifier: mWj0Q9PVcYE7oe02lE55VCIMOuPqpD6kZhzy4F0JEQQ=
Subject key identifier: F5:DB:17:9C:A4:BA:6D:D9:D9:E7:31:FE:D6:48:49:29:45:66:BD:51
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B234A70F69F6DAC22ECE85512D06
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/9dsXnKS6bdnZ5zH-1khJKUVmvVE.roa
Signing time: Thu 09 Jan 2025 09:28:20 +0000
ROA not before: Thu 09 Jan 2025 09:28:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49188
IP address blocks: 78.128.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b2:34:a7:0f:69:f6:da:c2:2e:ce:85:51:2d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5db179ca4ba6dd9d9e731fed64849294566bd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:6c:58:9a:e3:a7:53:7e:10:2a:24:c6:2f:
e3:1a:0f:bf:1e:f3:4e:71:a9:63:e3:53:49:72:82:
1e:48:9e:bc:f0:33:d1:3e:e7:22:7f:e2:d4:4c:8b:
6e:8b:39:92:11:0e:36:51:6d:1c:2a:58:90:79:dd:
25:25:2b:7c:b5:fb:81:26:d0:48:d2:20:af:eb:e3:
00:26:38:fa:50:9b:27:97:79:13:29:b5:63:8d:62:
03:9e:ea:20:5d:ae:5c:9a:93:d3:67:67:76:e4:32:
44:cf:40:af:cc:e2:7f:8d:0a:7c:a9:7d:a7:6c:21:
2b:bc:2f:de:92:e3:5a:e0:28:bd:90:7b:59:15:27:
38:39:2b:86:e0:ac:fb:62:51:5e:3e:8f:e5:a3:94:
56:e5:0f:22:b7:75:86:59:d9:d8:d7:5e:e9:e4:e0:
ce:ed:3d:ca:d8:08:7f:c6:26:b2:68:8b:55:ed:e7:
d6:2a:c5:ff:84:8d:f6:6c:1d:ad:fe:f8:43:d4:2b:
fd:71:82:07:78:9c:d2:7c:f7:ba:b8:17:ed:ff:12:
8c:bd:e7:18:10:d3:79:11:3d:d8:8d:a8:9b:35:a0:
fe:02:e2:75:c7:19:fb:03:ba:df:ea:d7:d9:14:bf:
03:02:7b:1a:03:13:f6:e2:2f:9a:87:26:ed:13:e0:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:17:9C:A4:BA:6D:D9:D9:E7:31:FE:D6:48:49:29:45:66:BD:51
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/9dsXnKS6bdnZ5zH-1khJKUVmvVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.4.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bd:c0:9c:ff:9b:60:f7:70:97:23:6a:22:71:31:b7:43:8f:
04:85:30:cd:2a:51:83:67:59:dd:f1:5a:98:3e:e3:90:43:65:
45:c8:67:eb:a7:34:16:16:4d:b7:d8:32:63:64:75:e4:7e:2b:
c6:9a:46:ed:d0:57:16:f0:c7:20:d7:1a:3c:cb:61:a6:61:c4:
32:46:05:e0:9b:04:e5:e1:3c:c4:fa:f0:a1:ac:cb:03:be:5c:
a3:0a:26:1d:5a:a3:6b:ce:a8:b8:78:e4:62:b6:cc:6b:01:53:
77:ae:ae:74:f5:f9:e4:4d:92:cb:c5:df:a9:6e:bb:cc:de:29:
b9:03:cb:04:71:01:20:e4:93:18:cc:a5:d1:f6:a7:cc:f3:20:
a6:08:8a:61:dd:b1:a6:0d:8e:96:ec:01:a9:4e:94:cb:fa:ff:
55:d3:ff:8e:2e:8a:6a:69:e8:96:94:a8:ef:10:2e:08:e9:9e:
3a:e3:f9:48:ac:4f:93:0a:42:14:4c:e2:35:da:3b:f2:19:ed:
c4:c4:74:a4:b0:78:03:b6:e2:29:ce:22:90:d8:d6:a0:15:a4:
48:14:17:57:45:97:20:4a:12:08:05:60:23:88:3a:45:5a:7e:
d6:a9:dd:79:56:59:4b:63:3c:e1:31:d6:71:50:d6:19:74:69:
54:9e:4f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:53:55 2025 by rpki-client