Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/3REEAprnZIBusO6q6WWrCX9P-HM.roa
File: 3REEAprnZIBusO6q6WWrCX9P-HM.roa (raw, json)
Hash identifier: vH8qgeYWcERpU9E7qeOHsrxBazYwgyfC550mI+D0FkE=
Subject key identifier: DD:11:04:02:9A:E7:64:80:6E:B0:EE:AA:E9:65:AB:09:7F:4F:F8:73
Certificate issuer: /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial: 01946079059C9B90F8136B444979B1FB85E6
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/3REEAprnZIBusO6q6WWrCX9P-HM.roa
Signing time: Mon 13 Jan 2025 16:22:11 +0000
ROA not before: Mon 13 Jan 2025 16:22:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29657
IP address blocks: 45.66.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:79:05:9c:9b:90:f8:13:6b:44:49:79:b1:fb:85:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
Validity
Not Before: Jan 13 16:22:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd1104029ae764806eb0eeaae965ab097f4ff873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:2b:f0:68:ca:71:20:32:ce:c8:ca:46:de:
85:f9:c6:f8:c3:ab:62:23:c5:d5:2d:bd:fa:b7:c6:
79:db:e4:18:2b:a1:b2:5d:21:23:bd:b8:c0:d7:83:
55:a7:33:89:fd:9d:9d:5c:dc:42:ce:83:9c:f6:27:
57:ab:9f:14:ef:72:f0:b5:7f:2d:6b:2f:a4:f4:25:
82:7a:44:40:c5:0d:d2:d7:22:62:15:c4:01:c1:37:
cb:09:5d:17:b9:66:11:ba:a7:2c:16:4f:36:0d:dc:
78:3b:db:e0:18:f1:a9:d2:f4:ad:f8:d2:50:85:32:
01:11:33:65:26:28:f8:9c:84:2b:52:2f:ec:88:70:
f6:da:b3:c3:f5:b9:71:78:72:d5:bc:4d:27:48:81:
bb:5b:cd:4f:6d:40:36:37:b0:00:14:a8:99:41:b4:
01:b7:3b:f1:6e:64:f2:76:bd:26:f8:a1:a9:4a:0c:
98:ef:87:68:dd:46:83:7b:a6:ac:d1:50:06:b8:91:
0b:72:61:5b:49:1c:b3:c4:4a:7a:d8:4f:18:27:41:
e2:01:69:21:1f:6b:ab:5f:0f:19:8b:b8:8f:62:37:
09:c3:c5:43:f7:39:3c:b3:b0:4f:02:98:16:d9:b6:
13:d9:96:fb:98:52:97:3c:ee:a4:d2:20:6b:9c:75:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:11:04:02:9A:E7:64:80:6E:B0:EE:AA:E9:65:AB:09:7F:4F:F8:73
X509v3 Authority Key Identifier:
keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/3REEAprnZIBusO6q6WWrCX9P-HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:ca:0f:c1:06:31:de:13:37:d2:67:0a:4f:83:2a:9f:35:d9:
86:7d:7b:c7:16:03:fd:f2:0a:c0:52:52:0c:47:45:92:29:d4:
a8:13:43:82:ad:47:44:97:a1:75:1e:03:4d:61:ec:4e:c0:9a:
69:15:f4:89:08:37:8a:f9:14:15:e9:62:05:2f:df:9e:ba:76:
85:8f:49:bf:20:8c:5c:13:75:35:9f:99:cd:03:99:91:d4:39:
c1:b6:57:6a:c6:4e:97:9a:20:64:a2:c5:36:a6:e4:83:94:29:
c1:2d:6c:85:42:65:a9:e0:43:af:ed:38:cc:41:d4:b5:bf:df:
8b:00:5d:53:53:ec:66:78:25:c5:cf:85:b8:15:01:29:28:0b:
a2:e8:29:05:a8:c9:e3:26:db:ee:44:ef:df:6d:2d:db:f9:06:
48:db:c4:8c:6c:28:95:69:f8:c6:98:f0:57:d0:8b:37:60:0c:
b5:dc:01:86:14:2f:2d:ef:96:af:05:8f:30:0d:4f:ac:fa:80:
f8:c4:c7:0f:33:e2:44:e0:c9:9f:96:2f:84:20:f5:05:ef:c4:
14:f4:dc:93:e4:39:9f:a6:7a:bb:35:6b:a3:45:2f:81:44:3b:
9f:e3:7e:da:3b:ba:c9:b6:62:9b:c4:29:f6:b1:8f:f9:cc:a5:
0e:b8:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:41:42 2025 by rpki-client