Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/3S9CxnQg7YWqU3K6TXltDEUCLyw.roa
File: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (raw, json)
Hash identifier: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=
Subject key identifier: DD:2F:42:C6:74:20:ED:85:AA:53:72:BA:4D:79:6D:0C:45:02:2F:2C
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0194228DC7DFB2461A753F7F5B923DCC1FFC
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/3S9CxnQg7YWqU3K6TXltDEUCLyw.roa
Signing time: Wed 01 Jan 2025 15:48:24 +0000
ROA not before: Wed 01 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214356
IP address blocks: 94.159.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c7:df:b2:46:1a:75:3f:7f:5b:92:3d:cc:1f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd2f42c67420ed85aa5372ba4d796d0c45022f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:ad:28:e7:4d:e0:3a:90:29:a4:a2:06:0f:
9d:b9:e6:1a:30:f6:0a:5c:6c:f4:57:86:5e:86:30:
8b:ea:3d:62:c6:5e:7a:2c:6e:de:b7:49:17:81:fc:
12:92:9a:a1:8f:63:1a:c3:04:ea:30:16:71:ad:ac:
56:b1:04:76:bd:eb:0a:25:e1:a3:3e:1d:f4:a4:f2:
90:99:78:c0:6e:9a:e5:b9:55:fd:73:45:c0:3d:5b:
62:df:8c:bf:be:ae:a6:87:b8:5c:90:86:64:10:a0:
52:85:cc:11:d2:3f:24:97:35:c7:58:60:f2:43:75:
96:c9:95:33:4f:da:32:bc:6e:13:3d:44:b7:f0:f9:
e0:e3:7c:3a:08:5f:1f:09:56:da:1b:f9:62:21:50:
e7:f5:07:3f:04:9b:c0:d9:2e:ad:44:27:a7:80:7a:
cb:a5:4c:d4:03:ca:8e:ce:9f:93:81:60:0e:d4:a8:
e8:70:28:22:15:c7:ca:e8:df:db:e1:c1:6a:cd:d1:
6a:68:81:e5:be:88:4a:57:84:32:dd:74:69:0e:4a:
93:d4:1c:7b:75:b4:f4:4c:c4:5a:64:9c:fb:a1:30:
56:fb:b4:76:53:a0:9f:2e:43:61:a5:38:51:04:da:
f9:de:e3:16:89:f0:33:2c:a5:97:d8:2b:12:5d:22:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:42:C6:74:20:ED:85:AA:53:72:BA:4D:79:6D:0C:45:02:2F:2C
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/3S9CxnQg7YWqU3K6TXltDEUCLyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e6:57:91:63:16:5b:50:f2:c9:5b:83:62:b6:27:79:a7:e4:
5c:69:4d:c4:41:a0:cf:19:b1:84:ea:a1:b8:cc:62:88:ff:ac:
83:09:92:b6:5b:b5:32:48:99:29:f8:67:b7:e6:f0:0c:5b:01:
9a:35:ee:f1:e2:5c:c3:a3:2d:6c:fb:a0:3e:24:1b:0c:27:9b:
6a:b2:91:b7:9c:21:de:89:ea:cf:3e:b9:9c:77:e2:c7:d8:52:
e7:b7:75:8d:55:bd:22:82:db:57:32:d1:2d:e4:ae:93:c6:84:
a5:58:fd:b5:f5:83:af:ea:72:e3:6c:f8:2d:37:74:18:74:df:
ae:2b:69:6a:4f:3c:86:6e:e4:f7:87:b1:88:93:a6:e9:33:e0:
54:81:f2:b5:05:c7:5a:19:cb:4c:76:46:97:f9:9e:a4:e8:a0:
74:27:6f:4f:f9:67:de:fd:80:95:6d:f0:1e:8d:1b:bf:65:18:
95:7f:a3:ff:48:8d:be:39:52:86:11:89:3a:4b:93:a4:95:cd:
87:41:5f:db:5c:e2:6a:68:d7:44:2b:e6:db:da:de:47:f2:91:
9e:23:23:64:d5:b0:6a:9f:e9:66:fd:12:9f:6d:12:f6:49:df:
d0:36:46:e6:78:5a:a1:b2:df:82:19:a1:85:72:aa:54:90:cd:
54:90:1d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:40 2025 by rpki-client