Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/3ZVx610sqQi3jR1aN5jm4CubkNI.roa
File: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (raw, json)
Hash identifier: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=
Subject key identifier: DD:95:71:EB:5D:2C:A9:08:B7:8D:1D:5A:37:98:E6:E0:2B:9B:90:D2
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 01942444FF54423BEC10CF62749BC6ABCEE8
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/3ZVx610sqQi3jR1aN5jm4CubkNI.roa
Signing time: Wed 01 Jan 2025 23:48:09 +0000
ROA not before: Wed 01 Jan 2025 23:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201635
IP address blocks: 91.198.88.0/24 maxlen: 24
185.28.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ff:54:42:3b:ec:10:cf:62:74:9b:c6:ab:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Jan 1 23:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd9571eb5d2ca908b78d1d5a3798e6e02b9b90d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:9f:f8:ec:28:92:36:9d:19:39:f2:5b:83:
ef:ac:09:76:51:97:41:f7:91:b4:2b:aa:80:e9:1e:
af:99:39:9f:0e:10:e7:ea:eb:f1:bd:0a:15:97:f0:
d1:d1:f0:a4:03:c9:5c:91:e0:21:df:f5:d5:3a:a0:
35:80:15:4c:40:3f:2a:ab:92:87:85:ed:20:8a:55:
13:ed:59:91:62:89:ff:99:b8:a7:c5:08:b1:8d:45:
95:e8:98:fc:c7:d5:58:c1:b7:e7:92:94:c1:31:b7:
32:f2:32:22:a1:e7:59:dc:4c:e8:d3:19:d5:8c:7d:
ae:09:2e:01:b0:82:9b:6f:47:36:82:00:11:ad:93:
ac:a1:06:7b:d5:01:28:45:f2:b0:99:74:65:00:b0:
e9:95:bd:09:ef:22:4f:c5:51:c3:47:d7:e8:17:b9:
7f:aa:10:41:2d:1f:d1:4a:97:f8:36:b6:bc:de:e6:
ca:61:f5:e1:70:d5:4f:fc:52:b7:59:9e:b2:47:98:
f6:d7:a9:1f:f1:a4:d4:ce:5a:8d:24:34:f4:b1:73:
d8:2d:48:51:77:78:cd:cd:85:ca:58:30:fb:56:06:
df:ca:49:49:39:24:ff:b1:f4:9b:c3:85:d4:60:c3:
01:41:18:eb:80:af:02:bb:53:2f:a4:06:6f:89:7a:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:71:EB:5D:2C:A9:08:B7:8D:1D:5A:37:98:E6:E0:2B:9B:90:D2
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/3ZVx610sqQi3jR1aN5jm4CubkNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.88.0/24
185.28.40.0/22
Signature Algorithm: sha256WithRSAEncryption
71:63:c6:47:f9:6f:b0:14:d0:4b:65:8f:fe:eb:2f:21:3b:6e:
e0:fe:07:dd:39:94:60:78:c9:94:d1:d4:d3:e5:23:56:b6:e3:
13:33:97:dd:36:51:0a:af:a9:b9:78:07:fd:e2:b5:fc:0d:72:
a3:dd:35:ba:a4:8b:fd:79:e5:aa:c3:67:6d:0e:1a:c0:68:4f:
29:0b:74:13:1c:c7:64:b4:84:c3:f6:ce:20:c0:d5:e9:ec:64:
9f:ff:a9:49:2d:db:ca:54:e5:6b:b4:13:54:69:68:7f:bf:aa:
7b:70:3a:ee:f7:77:64:96:4c:97:c4:67:77:94:34:ae:f7:f8:
55:cc:b4:eb:3c:61:13:87:90:ae:5e:eb:86:9e:f0:89:86:59:
2e:a7:ce:0a:0c:e0:3a:d2:ea:fa:0b:20:ea:61:71:18:42:6a:
b3:6e:62:70:ee:0d:aa:08:6e:ec:ae:5f:27:da:5e:7a:c2:c0:
a8:35:84:9b:a6:21:9c:fd:5c:15:03:45:ed:95:0b:b6:c4:18:
a9:d9:ee:9d:b8:c8:26:d7:65:bb:59:b5:38:f2:f7:38:55:49:
b3:a2:53:04:3e:c0:e8:83:7f:f1:e6:27:02:56:aa:55:20:3b:
b7:4a:52:af:88:b8:bd:95:b0:ff:b6:06:ed:7a:2f:b7:6c:0d:
05:49:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:43:34 2025 by rpki-client