Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/3P6wXNJcDC3b35lAwjjqX-1dpME.roa
File: 3P6wXNJcDC3b35lAwjjqX-1dpME.roa (raw, json)
Hash identifier: u7hgo1u27j1RyUhAH8Or7hL0YQ+vaU+na5DgQVVElfQ=
Subject key identifier: DC:FE:B0:5C:D2:5C:0C:2D:DB:DF:99:40:C2:38:EA:5F:ED:5D:A4:C1
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019423696B388ED34BE87CA15C79D36A80B4
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/3P6wXNJcDC3b35lAwjjqX-1dpME.roa
Signing time: Wed 01 Jan 2025 19:48:18 +0000
ROA not before: Wed 01 Jan 2025 19:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8387
IP address blocks: 207.244.212.0/24 maxlen: 24
216.120.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:6b:38:8e:d3:4b:e8:7c:a1:5c:79:d3:6a:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Jan 1 19:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcfeb05cd25c0c2ddbdf9940c238ea5fed5da4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:48:35:d1:85:42:11:53:38:c5:5e:bb:09:
a0:f9:c5:2f:00:b9:70:dd:67:67:8b:8c:15:fd:24:
95:42:a4:5f:f8:22:06:25:ee:ec:58:cc:7b:a5:10:
c4:9d:e3:b9:1a:c6:fd:b1:b9:c2:27:80:7c:d5:51:
f9:46:1b:c3:45:0e:cc:28:47:d9:37:bc:b7:de:97:
13:26:d8:57:1f:a8:15:b4:99:67:9f:d4:bc:8c:50:
09:3f:b8:5a:f6:37:79:fa:71:7f:61:67:0b:04:b8:
80:c1:15:c5:80:c7:b9:e8:3d:81:db:db:bd:16:3b:
02:8a:ca:fa:8b:e6:d5:bb:b7:8c:ef:49:91:72:b2:
fd:29:fd:dd:51:cd:56:57:b1:e2:67:39:31:d2:e3:
06:dc:6f:08:2a:08:31:f6:91:b3:b8:e3:19:60:d5:
ba:31:50:de:dd:60:0f:42:88:a8:53:cf:72:b4:9f:
be:2d:48:43:73:4f:9c:b7:3d:a6:17:69:0a:64:5e:
0d:40:97:88:56:36:81:f2:d9:ae:12:03:ca:ff:76:
ac:1c:9d:56:7a:82:c0:62:6f:94:1d:8c:48:bd:a5:
27:4a:58:5d:35:a7:7b:90:22:5c:22:ca:d1:52:1b:
d9:99:b8:7e:5b:8e:c3:fc:03:c1:40:d6:9a:06:f0:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:B0:5C:D2:5C:0C:2D:DB:DF:99:40:C2:38:EA:5F:ED:5D:A4:C1
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/3P6wXNJcDC3b35lAwjjqX-1dpME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.212.0/24
216.120.174.0/23
Signature Algorithm: sha256WithRSAEncryption
42:84:a0:a3:07:fa:19:98:fd:69:de:e8:42:03:1b:17:97:8d:
b8:c0:6f:b9:bc:2e:7c:25:24:83:c5:07:cb:c8:4b:bf:77:7c:
a1:b0:d9:9c:c2:a9:db:c0:43:d5:f0:dd:7a:43:79:ec:ae:d7:
32:66:88:91:2d:e9:e9:39:be:6f:d0:cd:36:cd:43:b1:e9:13:
e6:87:c6:ed:ba:5c:4e:18:c1:7f:f4:df:c2:1e:6d:a2:c7:4c:
dd:a5:88:63:c0:9b:8f:81:bc:25:92:28:ab:4f:fb:10:e2:6c:
5b:62:aa:69:d1:c5:91:d7:00:8c:ab:cb:f9:2a:44:a8:36:84:
87:f9:94:e8:cb:d5:41:93:61:a7:28:2b:1e:56:16:8b:8a:31:
e5:1a:ce:3a:07:06:11:47:e0:9a:76:0e:1b:af:ca:b5:39:10:
01:95:30:2e:93:29:92:56:a0:8f:ac:3b:9f:7c:5b:ff:25:48:
e9:e5:8e:b0:fa:e2:fe:00:94:dc:0a:bc:1e:c5:9c:81:1d:a4:
58:c8:1e:e8:e2:33:9a:00:a3:e1:6f:3e:8a:25:63:0f:25:4a:
e2:b3:1a:b2:38:96:14:e0:b8:fe:20:82:90:af:2d:1b:2e:6d:
f8:4a:be:b2:d5:c4:ca:85:ae:12:03:08:62:5d:d2:c7:70:a4:
b7:f8:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:54:03 2025 by rpki-client