Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/w39M32gYL2NDwd5cVd3yf1ZIfWs.roa
File: w39M32gYL2NDwd5cVd3yf1ZIfWs.roa (raw, json)
Hash identifier: Ke5x3YeXj0QllIb1M7bwfbR8AV3buXpnmWShNR4GkxI=
Subject key identifier: C3:7F:4C:DF:68:18:2F:63:43:C1:DE:5C:55:DD:F2:7F:56:48:7D:6B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D855BF62549AA15287BE21619B552A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/w39M32gYL2NDwd5cVd3yf1ZIfWs.roa
Signing time: Thu 02 Jan 2025 11:48:19 +0000
ROA not before: Thu 02 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132244
IP address blocks: 46.37.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:55:bf:62:54:9a:a1:52:87:be:21:61:9b:55:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c37f4cdf68182f6343c1de5c55ddf27f56487d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:2c:ce:6a:8c:b9:de:66:ec:68:be:05:c9:
11:83:40:d2:7e:21:a0:d0:77:49:c8:b2:bc:00:de:
2e:96:99:9b:94:35:66:fa:46:28:a3:0a:20:4c:f8:
e3:d9:2c:13:87:54:0b:e9:f9:28:10:a3:e3:a7:6b:
f4:a1:0e:a9:16:ab:91:20:38:12:0c:c2:20:81:99:
ca:e2:61:47:64:1c:60:7a:1f:e1:46:75:7c:9b:9f:
ca:f6:c3:19:05:d7:c7:c2:43:97:54:b0:32:04:e0:
26:04:3c:1e:a9:5b:7f:94:2b:30:94:31:6a:d6:cd:
f5:5d:5e:9c:26:50:11:d2:74:1d:d5:ea:2e:a3:1a:
61:9f:8a:aa:41:af:1a:90:98:88:56:d7:35:f9:94:
c6:54:9c:2f:af:d9:82:e0:c4:8a:ee:48:e6:b2:ff:
00:d4:12:d6:8c:ad:1c:36:10:3b:bf:fd:45:3c:86:
a3:93:e8:45:69:85:e6:89:6a:ed:90:c6:ca:50:e9:
8e:2e:24:75:54:92:13:e2:89:50:17:54:96:1e:0c:
b2:3a:23:3d:51:ae:ab:0d:30:4e:9e:ef:93:68:db:
cb:68:15:89:07:b2:26:0e:b6:6e:cb:fb:d1:a6:3e:
20:4f:f8:95:47:4a:cc:12:38:e0:24:07:a7:48:c2:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:4C:DF:68:18:2F:63:43:C1:DE:5C:55:DD:F2:7F:56:48:7D:6B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/w39M32gYL2NDwd5cVd3yf1ZIfWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:97:1d:97:97:73:e4:df:c6:67:45:bd:de:e8:97:3e:bf:25:
58:3a:f9:9e:4d:20:35:20:de:ad:0f:d9:1f:8a:32:ad:00:0e:
71:e6:ed:43:2e:8f:d2:68:63:81:b3:ec:f9:b3:49:bc:c0:70:
ac:3c:89:2a:63:44:a5:d6:01:3c:72:49:d0:20:15:fb:03:1f:
b1:53:fe:17:43:f3:e9:d7:96:de:eb:f3:34:54:de:3a:d2:6d:
39:18:fb:8c:73:88:ce:7d:01:5f:c8:c8:75:da:df:47:10:f9:
3a:42:e1:77:87:17:37:79:34:0f:50:98:e7:86:19:eb:64:b2:
09:2c:31:c8:e1:4f:a5:74:19:c9:09:c0:e8:8b:7c:01:b3:bd:
8c:df:93:4d:84:0c:ab:07:16:b2:c1:19:0c:b3:2c:ce:06:d3:
32:1d:3d:71:67:f3:0d:98:01:2d:1c:e7:ed:a9:10:2f:cf:ab:
77:65:72:61:26:06:cf:b9:52:a0:79:e6:57:2d:55:4b:8c:d1:
f4:aa:52:d7:16:95:11:38:2c:99:82:c7:63:e4:e9:b2:3a:90:
ab:68:30:9d:0a:c8:f2:d0:14:4b:82:d8:d3:77:98:1f:a9:b3:
a9:8f:58:8f:c9:a5:ca:83:c9:a8:59:65:fb:f8:d0:10:58:74:
e7:80:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:47 2025 by rpki-client