Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3adlXu9UdiqbVK8KXPmNPBFbva4.roa
File: 3adlXu9UdiqbVK8KXPmNPBFbva4.roa (raw, json)
Hash identifier: EJVXWOHEAMEc47CpVV43468HlejdrMkqfGDd8fXYTdo=
Subject key identifier: DD:A7:65:5E:EF:54:76:2A:9B:54:AF:0A:5C:F9:8D:3C:11:5B:BD:AE
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B572C66353CAEFC67861061B7897C8
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3adlXu9UdiqbVK8KXPmNPBFbva4.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 192.145.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:72:c6:63:53:ca:ef:c6:78:61:06:1b:78:97:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dda7655eef54762a9b54af0a5cf98d3c115bbdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:1f:10:a5:26:de:9f:ba:f6:ad:75:d8:cc:
03:81:50:b4:62:db:2f:3f:e3:6a:37:3e:2f:1b:68:
9d:a2:e3:a5:13:b5:8f:f4:50:da:b7:3b:49:a8:1b:
e4:23:43:2d:e9:d2:b9:85:70:c6:89:7c:db:17:01:
24:4f:8f:fd:57:5a:29:ff:24:77:2d:53:0f:7a:56:
18:f7:e1:71:6c:e9:b6:fe:51:ff:e6:c3:6e:55:f6:
da:79:89:b9:ae:20:41:ae:33:24:e0:1f:4e:d6:4d:
b6:12:b8:b2:e1:2f:9b:9a:36:05:78:f4:15:89:0c:
b4:8e:b2:82:c2:82:8e:0e:f7:e2:af:da:31:78:ee:
a1:9d:3c:6b:81:61:5f:3e:7d:24:d9:b5:93:b4:8c:
68:34:76:2d:55:a3:02:da:42:ca:eb:02:b3:81:7c:
c1:83:41:09:15:fb:a5:d5:4a:b6:ae:5e:89:0a:2b:
da:8a:c9:a1:21:03:86:a8:83:e6:0e:09:10:a0:da:
54:6d:96:47:da:29:48:b9:46:84:2f:be:64:19:80:
a6:42:49:ec:12:1d:8d:bb:ca:9b:50:72:cb:8a:d9:
f3:ea:b3:4f:45:f7:f7:73:1d:49:10:ea:1e:c2:9b:
58:7d:ed:fa:38:71:fd:50:5d:f1:89:b3:b5:79:f9:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A7:65:5E:EF:54:76:2A:9B:54:AF:0A:5C:F9:8D:3C:11:5B:BD:AE
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3adlXu9UdiqbVK8KXPmNPBFbva4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:23:43:92:23:0e:f4:a5:ca:33:25:d5:ed:5f:31:8a:73:a2:
3e:8d:04:b2:5a:69:26:7f:c6:e2:a4:d0:de:e1:65:10:3b:99:
b6:8d:ff:37:82:0d:02:1e:75:36:cf:34:34:85:6c:c3:ab:38:
7a:e9:e2:fd:51:ab:48:dd:7d:f9:bc:73:5b:c3:d6:fb:71:8e:
73:ae:41:b0:6a:75:ef:41:07:15:6d:ff:62:45:0f:1f:38:a7:
69:2c:07:f5:01:5c:2e:aa:e9:63:87:06:37:76:28:4a:e0:1e:
75:3d:d8:eb:73:4d:29:43:42:6f:43:59:88:11:e3:1f:ca:f6:
7e:21:dc:ab:5c:ee:da:77:9a:0e:fe:2d:46:ce:4b:ca:14:dd:
9b:bb:12:24:4c:90:9a:83:1e:67:34:d6:54:cc:a8:0e:2f:69:
ef:3e:80:d9:d7:a0:dd:2b:43:11:bd:8b:d8:c0:8e:c6:ad:a8:
0d:23:23:76:22:c1:30:7b:ab:b9:55:04:66:7d:2f:22:7f:e6:
52:48:50:99:a7:df:ea:c1:61:2e:66:b3:c5:28:c7:c1:f0:5c:
fa:d3:3b:45:50:fe:51:bd:45:9f:57:0c:7a:b0:ef:8b:80:4a:
84:aa:94:9d:98:1f:61:e1:1b:0d:e6:0e:28:2b:cc:27:1c:01:
c2:e9:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:36 2025 by rpki-client