Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/3K3BWWtJTikdCXD1GiHEAWkWrNM.roa
File: 3K3BWWtJTikdCXD1GiHEAWkWrNM.roa (raw, json)
Hash identifier: 8sWSqC8Ih92DS5DdfTRJP5hCXAztrqlMm3kUKR0XOZc=
Subject key identifier: DC:AD:C1:59:6B:49:4E:29:1D:09:70:F5:1A:21:C4:01:69:16:AC:D3
Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial: 019426D9D9F81B43B2416FE9AD2FD8279702
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/3K3BWWtJTikdCXD1GiHEAWkWrNM.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43706
IP address blocks: 79.170.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d9:f8:1b:43:b2:41:6f:e9:ad:2f:d8:27:97:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcadc1596b494e291d0970f51a21c4016916acd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:1c:f6:f8:4a:80:e3:fd:b4:34:24:d6:0a:
18:a3:28:29:04:fd:3a:1a:c5:f7:7e:09:13:fd:cc:
a3:c1:2f:de:53:99:25:78:f9:69:a8:77:ba:e9:5c:
39:96:3d:40:3c:b8:d2:84:eb:3d:da:8c:73:05:99:
f3:d1:fa:58:11:ff:3e:98:c8:4b:7d:21:95:71:c6:
ef:2e:a1:c1:f5:f3:3e:15:aa:61:cc:11:b6:19:91:
84:2c:06:66:30:23:f3:ec:7a:17:72:20:b0:71:2a:
b2:40:74:75:05:36:f2:ad:66:f8:7b:73:17:a0:bb:
80:46:96:b0:cd:ca:85:c1:32:c4:6c:6d:fb:74:69:
3a:1e:d8:21:62:6a:2a:d1:4d:71:0e:36:10:36:b1:
f7:d5:f4:44:72:2d:0b:9b:11:f8:5a:59:2d:f3:a6:
19:78:68:95:69:9e:08:14:9c:1a:b0:8d:1a:d4:31:
17:5f:18:86:60:0d:6d:7f:9c:9e:31:16:8b:79:41:
bf:ec:56:a2:d0:00:ad:a2:1f:ee:ee:c9:c6:a9:f5:
92:61:03:e8:af:bd:e2:c2:a4:02:d3:3d:d4:0d:9e:
e7:1b:0a:c8:73:44:70:e9:ab:03:78:d0:14:da:bc:
73:d8:78:92:cc:02:dd:73:89:26:79:fa:03:12:97:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AD:C1:59:6B:49:4E:29:1D:09:70:F5:1A:21:C4:01:69:16:AC:D3
X509v3 Authority Key Identifier:
keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/3K3BWWtJTikdCXD1GiHEAWkWrNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:7a:51:0e:46:f1:c5:f5:74:91:61:85:2c:b4:9e:dc:88:be:
78:e0:e5:e8:14:ed:f9:ec:04:55:f8:08:92:f9:87:3d:cc:9c:
09:14:bf:37:21:e6:db:b5:3b:44:27:ee:94:06:7f:ef:3f:47:
ee:f4:1e:2a:00:08:97:7e:ee:37:0b:62:f0:71:5d:00:ef:80:
23:12:9d:c2:1d:29:6c:2b:f8:01:56:0f:3d:04:c4:2a:21:4d:
d3:ab:78:5b:0a:e8:80:d0:92:1b:8f:88:3e:05:86:96:ee:99:
96:56:66:0a:03:bc:2a:d5:0e:ae:b1:23:91:80:44:5a:f5:12:
bb:0f:0a:45:72:88:6a:0a:dd:85:f8:ae:bb:35:6b:5e:9d:da:
7e:06:13:7c:13:03:d8:12:98:26:f3:64:1e:57:6a:a2:19:8f:
f0:15:47:3e:01:76:61:af:2f:df:2e:de:9b:a1:03:d0:f2:44:
a6:5d:b4:d0:bc:66:a4:8c:55:d6:e8:1e:a1:42:9c:f9:65:a5:
68:0f:b5:8b:8e:70:00:96:66:f9:34:4c:e0:f9:2a:26:28:63:
cd:8b:9c:2a:d6:86:e2:40:82:f8:90:00:1d:9b:bf:6e:5f:da:
69:de:70:14:3b:d0:e8:6c:40:a6:ed:f8:f9:04:05:7a:c3:96:
53:91:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:36 2025 by rpki-client