Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/E3zOQgSE0CFiFbyTws_KFO4SVPY.roa
File: E3zOQgSE0CFiFbyTws_KFO4SVPY.roa (raw, json)
Hash identifier: TmlzicIbbCAyLdaBCNwSdoyOF8SiGxWXxk8+YSXd0EA=
Subject key identifier: 13:7C:CE:42:04:84:D0:21:62:15:BC:93:C2:CF:CA:14:EE:12:54:F6
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244563B5238A2D90CDD17EB418A10A59
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/E3zOQgSE0CFiFbyTws_KFO4SVPY.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204209
IP address blocks: 31.145.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:63:b5:23:8a:2d:90:cd:d1:7e:b4:18:a1:0a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=137cce420484d0216215bc93c2cfca14ee1254f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f7:e4:8c:49:e2:5f:10:7a:01:41:b8:23:aa:
65:e1:a8:b5:5f:48:8d:30:d9:ff:b4:91:ca:f3:49:
53:65:cc:a3:66:37:f9:4d:cd:a5:29:72:6c:1a:4a:
46:0b:36:39:df:75:09:5a:af:9f:ea:d2:9f:5d:63:
03:36:53:f2:08:2c:c5:0a:8c:c2:c6:a9:06:67:24:
a2:84:56:a3:4e:19:2c:1f:a2:c3:59:53:81:22:fe:
b7:d5:84:69:0b:d4:ca:fe:54:20:d5:49:bb:94:15:
b3:98:e3:e6:88:47:8c:bd:d4:0d:2b:d4:cf:bf:84:
fa:65:ce:5b:09:f5:59:55:91:f3:ae:e4:0d:10:af:
0e:ff:85:33:5f:56:2a:95:6e:b9:c7:19:02:d7:b5:
3b:87:10:fe:35:3b:bf:35:cf:b6:5d:68:04:09:b2:
4a:88:a0:93:6f:29:b0:0e:49:07:a8:a5:89:11:bc:
87:cb:9d:e3:c0:25:62:9a:fc:f5:03:22:85:34:c2:
70:04:63:06:f1:f0:14:dc:7a:c9:2f:c1:70:3f:ac:
cf:05:1e:2c:34:82:5c:17:ee:a5:de:53:4a:8d:40:
7d:de:72:92:64:6a:da:36:a7:72:61:60:8e:e6:4a:
7b:7c:c3:41:4e:72:af:95:0a:04:a7:a6:48:04:90:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7C:CE:42:04:84:D0:21:62:15:BC:93:C2:CF:CA:14:EE:12:54:F6
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/E3zOQgSE0CFiFbyTws_KFO4SVPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.39.0/24
Signature Algorithm: sha256WithRSAEncryption
46:32:1f:84:d2:f4:9c:33:68:4c:c8:16:d2:b0:d6:63:a7:2a:
6f:ee:23:a3:e4:16:5f:65:0c:93:b9:5c:31:48:59:f3:82:30:
88:45:aa:a4:9b:8a:37:2b:58:fd:23:3e:42:c4:b5:42:d6:e2:
1f:17:0c:07:ab:c5:61:f5:27:47:b9:54:be:fb:e1:6e:1b:cc:
34:62:90:24:66:19:7a:3f:0b:3a:5f:24:d6:02:36:db:0a:5d:
d8:f0:aa:fc:74:fb:e0:41:71:78:e4:44:b4:e3:a4:e9:a1:79:
98:cd:9a:a2:fb:01:da:81:b2:76:bd:c2:46:b7:91:8e:89:34:
5b:96:21:a3:ee:02:06:3d:6c:38:5a:64:2b:94:17:82:d8:d0:
75:5e:c4:8b:67:af:b1:be:9b:35:2d:b3:ba:98:ff:ed:ec:57:
b2:bf:47:ce:d7:9d:a2:a6:d7:1f:21:45:1b:ee:33:ca:98:ce:
d2:38:af:b1:d5:6f:be:34:c9:07:d4:27:94:70:6a:e0:e0:6d:
54:1d:39:03:1b:0d:c0:52:5b:96:c7:be:62:2a:2e:81:67:e0:
78:3a:2b:24:5a:fd:98:8d:f3:34:5e:8b:9a:52:5d:d6:8e:eb:
d1:63:bf:0e:49:77:b6:75:75:8d:98:cb:59:88:0d:06:6b:11:
8c:41:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:04:29 2025 by rpki-client