Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/3wty7vsO9UIAL71reBrfPy8oYTQ.roa
File: 3wty7vsO9UIAL71reBrfPy8oYTQ.roa (raw, json)
Hash identifier: rNtuN9r+yk/6orL0d+CeXB5qTYEo7nBji2qcFakMUQ0=
Subject key identifier: DF:0B:72:EE:FB:0E:F5:42:00:2F:BD:6B:78:1A:DF:3F:2F:28:61:34
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019553B98E01ECB4B72EF55541E9DFFC2444
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/3wty7vsO9UIAL71reBrfPy8oYTQ.roa
Signing time: Sat 01 Mar 2025 22:00:24 +0000
ROA not before: Sat 01 Mar 2025 22:00:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.133.38.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:53:b9:8e:01:ec:b4:b7:2e:f5:55:41:e9:df:fc:24:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Mar 1 22:00:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df0b72eefb0ef542002fbd6b781adf3f2f286134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:27:a3:3e:e1:b2:69:43:bb:bc:29:2d:01:
ab:a4:cb:ff:26:e6:74:1d:38:35:ea:55:3d:4c:e5:
8a:b7:06:22:8d:79:4c:3d:db:67:49:b7:b2:f7:44:
0c:f2:56:67:8e:72:ad:db:60:9b:f5:15:4d:00:48:
7f:56:de:07:64:40:87:ea:a3:10:6b:24:78:05:5b:
e3:b8:30:a4:30:67:ca:a5:06:63:7f:cd:3d:53:69:
78:e8:be:f9:10:d5:fd:66:cf:e7:67:24:18:70:1e:
3a:be:86:45:c2:ec:3a:74:d7:34:e5:f0:31:40:63:
1e:6b:e4:4b:de:53:1b:a0:cd:ed:5f:92:e1:1d:e6:
3f:d6:c4:2b:6a:1a:cc:29:7f:70:82:07:f3:5a:d6:
ae:22:07:84:80:3c:21:ce:10:9b:ed:1f:d4:01:36:
11:af:d7:17:c0:a5:62:52:59:44:aa:ce:53:c7:7a:
9b:25:d3:3d:23:c7:87:57:de:4c:7c:0b:df:c5:dd:
15:47:6e:dc:a2:c8:e7:0e:0d:1e:0f:92:52:16:d8:
0c:2c:59:97:20:07:c4:ea:a1:b3:53:05:0b:a0:93:
f3:38:12:9d:46:9e:b3:2a:12:a3:7c:7c:e9:1f:1b:
58:ae:24:c9:ed:a8:24:61:05:76:9d:d2:12:cb:67:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:72:EE:FB:0E:F5:42:00:2F:BD:6B:78:1A:DF:3F:2F:28:61:34
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/3wty7vsO9UIAL71reBrfPy8oYTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.38.0/24
185.148.243.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:12:1a:05:22:b5:fa:c0:6c:b5:ea:6c:04:17:2a:c7:12:db:
3c:d2:6a:cc:e6:f8:92:b8:1d:2c:fb:9b:99:7b:9a:34:ef:d4:
c4:da:bd:4d:d3:5f:a2:f5:13:02:8c:13:39:53:7a:f1:50:09:
21:fa:33:68:52:93:c1:88:49:98:e5:20:5f:a3:68:2c:6d:40:
ed:db:a2:ea:2a:f1:b5:fa:de:2a:25:db:a6:ce:fc:ca:3b:1b:
15:fc:20:ba:eb:37:ca:be:28:22:4c:eb:f9:1c:65:8a:95:f8:
e6:8a:81:85:3d:a7:cb:1c:4f:fe:2d:d9:20:c9:60:7d:aa:93:
2d:11:7a:44:1f:a9:f2:82:e0:fe:a2:e8:12:8d:ec:bf:98:7a:
38:2a:ac:e7:f0:48:39:90:62:43:7f:fb:52:e4:0e:26:f8:a6:
93:b8:43:b1:96:dd:e8:75:a4:9d:c1:e3:03:18:21:f3:cf:7c:
5a:e6:d0:7f:8e:41:40:4a:1b:30:8b:35:43:d0:b4:d4:b2:e6:
18:dc:4e:65:b6:1b:d2:4f:e1:3a:04:4a:70:50:3d:4c:be:ce:
b2:ae:39:d0:a2:35:1e:fd:ec:3d:b5:53:20:08:36:b3:c0:57:
40:78:66:e9:e6:de:f9:13:c2:cc:54:da:77:3d:8c:60:24:5b:
18:94:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:33:25 2025 by rpki-client