Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa
File: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (raw, json)
Hash identifier: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=
Subject key identifier: 0F:7C:A3:25:4E:61:FC:54:C3:11:1A:C6:36:BB:06:67:C2:E0:33:17
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 0194258E1D54A8B7533977C8F9670E7C815C
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa
Signing time: Thu 02 Jan 2025 05:47:38 +0000
ROA not before: Thu 02 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202720
IP address blocks: 185.1.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:1d:54:a8:b7:53:39:77:c8:f9:67:0e:7c:81:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Jan 2 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f7ca3254e61fc54c3111ac636bb0667c2e03317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:c1:80:ce:2a:c7:99:5f:a9:29:85:8a:a8:
81:fb:86:6d:cb:ad:ee:cd:95:ca:61:81:99:bf:48:
d9:57:7b:d7:1b:1e:d0:85:46:54:64:3d:d0:06:19:
b9:38:56:32:1b:76:f2:48:2d:0e:ad:21:66:1d:53:
e9:28:41:58:44:bb:9f:3d:58:d5:33:2e:2f:bc:10:
14:82:ae:af:64:cc:97:ea:59:e1:45:89:b8:e8:8c:
7c:5a:82:02:ad:50:0c:f8:3f:da:cf:43:80:b8:86:
5a:c8:ff:1c:f5:e1:c4:d5:4b:d0:52:74:43:d9:fe:
c5:b5:8d:46:37:a4:bf:0c:93:08:b1:86:a4:30:06:
40:4c:c0:60:a2:65:33:97:de:d0:83:ca:ac:7c:a3:
d6:7c:90:b6:7f:75:45:89:f9:62:99:d0:f9:d8:cd:
7d:63:80:bb:43:77:71:d2:0b:b1:de:fd:29:94:86:
a5:0d:d6:7d:21:2d:68:6a:9c:1c:f2:de:e4:e9:b6:
70:6b:18:da:12:2d:fd:6a:7e:f8:37:35:8d:72:92:
d1:ea:e3:02:ec:81:e8:31:fb:dc:dd:bf:d7:9d:4b:
6f:77:6e:e3:b4:01:46:e8:20:1c:c0:e7:84:64:73:
51:36:50:c1:a7:24:36:42:67:35:7c:ec:8d:ee:47:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:A3:25:4E:61:FC:54:C3:11:1A:C6:36:BB:06:67:C2:E0:33:17
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.70.0/24
Signature Algorithm: sha256WithRSAEncryption
57:97:00:60:3f:55:3f:b3:b4:cb:02:63:ff:81:36:29:ac:b9:
7e:9c:d9:84:25:43:a0:8c:f3:d5:fc:06:62:ad:3e:fb:f4:31:
21:3c:9c:51:72:e7:32:60:d0:dc:2c:45:e6:0b:f9:cf:32:f1:
c1:d8:70:f7:26:fd:70:1f:ab:fe:eb:2a:10:05:4f:0e:d2:76:
f1:6a:6d:49:92:69:29:f1:7a:ec:65:e6:f5:58:ed:df:ac:f8:
bd:e5:1c:15:53:e8:d6:42:f1:dd:b5:03:f4:29:52:11:6d:23:
fb:c0:38:3a:7e:a3:e8:1b:8b:39:e0:af:d8:14:90:31:98:04:
ea:3d:1a:df:83:c9:ad:ec:47:8c:a9:3e:e0:53:f1:61:f9:26:
46:1f:ee:1f:cb:31:1f:a2:cd:b3:c9:a4:39:bf:0d:8b:bc:f5:
6e:0a:d6:ac:ce:84:2b:6f:9a:4e:a2:b9:bc:f1:1e:d7:5d:d0:
d4:77:56:3d:5c:4f:c9:ec:2c:9c:0e:fc:d1:13:08:ee:b5:f9:
90:69:04:2b:2b:3d:29:0b:10:b1:1a:04:41:fe:bf:9f:72:04:
3a:29:2a:7e:c5:ea:13:5a:4d:98:85:0f:6c:9d:e5:80:4c:97:
99:cd:68:c6:fb:7e:33:16:d4:a4:cd:53:54:ed:cb:e9:a0:69:
94:46:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:05 2025 by rpki-client