Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/4d9jncgFcD3LQEVJLbIB2I3M9lo.roa
File: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (raw, json)
Hash identifier: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=
Subject key identifier: E1:DF:63:9D:C8:05:70:3D:CB:40:45:49:2D:B2:01:D8:8D:CC:F6:5A
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 01942521F2B77FFE1C9817E9BCE49F498106
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/4d9jncgFcD3LQEVJLbIB2I3M9lo.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f2:b7:7f:fe:1c:98:17:e9:bc:e4:9f:49:81:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1df639dc805703dcb4045492db201d88dccf65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:db:82:a2:66:31:64:7d:d4:4d:56:75:31:
96:23:f8:04:77:99:9d:6f:12:53:ec:bf:4e:a7:43:
fd:ea:7d:ce:5f:b2:16:e8:ec:3f:3e:68:9a:e0:aa:
9a:8d:75:a1:45:83:fc:03:63:e5:66:90:f2:07:3e:
ad:e7:0a:ac:ac:0f:6c:46:7f:ba:eb:ab:dd:46:49:
31:4d:7a:3e:ba:53:0d:58:8f:3b:40:b3:ba:c8:28:
2c:32:59:d0:86:9e:71:1d:f0:e2:7d:fe:20:5a:ed:
38:b4:4c:98:69:87:f0:de:65:bc:15:4e:cd:2e:2b:
5a:33:54:a5:ce:ea:0d:0a:37:dc:8d:45:d6:4c:28:
d7:27:33:8b:19:7b:19:ad:ad:09:c8:f2:19:c8:bf:
89:26:53:0d:c6:b7:ef:44:35:f4:4a:94:85:b1:b3:
e8:97:73:36:6e:8e:2f:0e:b9:19:8e:8d:37:6b:e7:
16:e2:f5:9a:e6:6d:dc:44:f6:ed:8e:27:b6:5a:8a:
02:8b:99:1d:4f:fd:40:05:67:a2:c0:8c:3d:34:98:
62:83:f8:97:06:83:ea:de:ac:0e:55:02:ad:a6:3b:
5d:0d:7f:59:44:b7:c3:77:40:10:f2:8d:85:ea:0f:
69:1e:b8:99:0f:65:37:5c:7a:68:4d:68:6d:cf:7f:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:63:9D:C8:05:70:3D:CB:40:45:49:2D:B2:01:D8:8D:CC:F6:5A
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/4d9jncgFcD3LQEVJLbIB2I3M9lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1b:34:ac:a9:7b:19:0b:43:96:42:49:3a:7b:0d:4b:fe:06:
ab:64:69:64:89:44:ef:1b:98:b8:72:de:35:9f:e1:39:f1:28:
06:ed:39:51:ce:9c:32:87:0f:d7:c7:46:4d:57:31:03:2c:5e:
3a:ad:18:9c:45:d3:30:d8:28:c6:42:fa:39:b7:0e:70:66:c0:
36:a8:dc:f5:59:f1:8b:e6:ff:02:38:8b:6f:77:4f:85:67:49:
08:be:bc:e7:e3:10:5f:ad:71:43:fd:44:d9:b5:ff:47:ec:d9:
91:77:a8:e6:ec:89:83:71:94:16:54:db:35:5d:9d:2b:84:2f:
0e:37:e0:7c:b5:cd:21:a7:80:2f:86:ba:58:5f:66:b5:1c:c5:
ce:53:8f:51:d4:99:29:21:94:f2:5e:6a:67:64:e1:53:1e:7f:
33:6d:a4:b6:98:bb:aa:c9:79:30:b5:22:1e:a5:83:bc:0c:62:
94:67:fe:e9:38:24:7d:1a:df:4b:cb:e1:54:fd:60:d2:fc:78:
98:b4:5b:5f:eb:8e:fc:2f:18:56:00:b4:55:1a:87:15:d9:03:
61:a4:c3:ea:9e:8a:8a:50:b4:de:f4:bd:66:7b:87:df:43:43:
b3:aa:54:10:31:01:4a:0a:fe:f7:46:4b:13:43:94:8e:88:27:
79:3b:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:49 2025 by rpki-client