Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3TKI6skLbDf3fqXmgTyEvgSdNwA.roa
File: 3TKI6skLbDf3fqXmgTyEvgSdNwA.roa (raw, json)
Hash identifier: D/LYeEcm7f5lpg8ika3U/fetva1W+a1uvpxGH3YuCnc=
Subject key identifier: DD:32:88:EA:C9:0B:6C:37:F7:7E:A5:E6:81:3C:84:BE:04:9D:37:00
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A57B6B03911466891E38879F3DBE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3TKI6skLbDf3fqXmgTyEvgSdNwA.roa
Signing time: Thu 02 Jan 2025 13:50:59 +0000
ROA not before: Thu 02 Jan 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398395
IP address blocks: 2.58.200.0/24 maxlen: 24
45.67.87.0/24 maxlen: 24
45.134.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a5:7b:6b:03:91:14:66:89:1e:38:87:9f:3d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd3288eac90b6c37f77ea5e6813c84be049d3700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:7a:dd:d4:df:82:8d:68:2a:b2:82:e6:b6:
53:c3:bf:40:f1:ec:2b:32:94:03:25:8a:4a:35:13:
d2:e3:12:a2:79:30:e4:94:5b:c2:7d:f3:95:fe:40:
fc:d1:ac:5c:bb:a4:a3:f0:6d:12:5d:16:37:15:ff:
1e:3c:ea:6e:8e:05:37:01:52:e7:43:fd:61:db:ad:
56:06:f0:50:38:5a:93:e3:b2:60:98:e8:d1:b8:59:
32:3f:10:73:60:65:bd:d2:d4:bd:72:7a:6d:9e:e9:
6b:fe:90:69:35:ae:87:e8:2f:2c:1d:41:d9:66:cc:
15:f4:c7:23:3f:41:fe:74:f3:38:14:79:4d:58:56:
7b:81:a5:03:64:5e:ca:3e:c5:43:73:7b:4d:66:2d:
0f:30:8d:ec:7f:e8:29:47:1c:6f:31:de:4b:45:ba:
bf:df:29:a8:44:ab:fd:cc:39:d6:be:5d:ac:58:37:
fa:6d:e0:83:74:31:b0:f3:70:4e:8b:af:8a:57:12:
cc:f0:63:1a:9c:10:ec:d5:d5:98:bf:e8:ef:cc:b7:
4f:76:2b:88:45:eb:a2:18:d5:43:35:9e:01:3c:d2:
a3:5d:3c:52:06:98:b3:7b:4d:c3:23:f7:c3:91:b9:
38:3c:7f:9b:90:85:93:04:cb:59:53:ec:29:84:1b:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:88:EA:C9:0B:6C:37:F7:7E:A5:E6:81:3C:84:BE:04:9D:37:00
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3TKI6skLbDf3fqXmgTyEvgSdNwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.200.0/24
45.67.87.0/24
45.134.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:9e:2a:ed:35:ab:a2:9e:f5:63:77:48:6a:6f:25:40:dc:c8:
97:bd:8c:c0:c5:85:c1:8d:f9:4c:88:e5:97:4d:f7:5f:00:64:
b1:89:fa:c7:df:4c:ab:c3:1e:19:3d:ac:88:21:81:34:06:29:
03:e7:44:8c:ec:ad:c1:c3:f9:0b:04:fd:43:9f:67:88:1e:8d:
ee:20:0e:89:35:cc:ad:ae:16:9b:43:79:31:a2:71:10:6d:34:
3f:9f:e2:28:d4:c8:d8:c2:91:63:bc:3e:f2:d6:1f:27:05:68:
0c:15:cc:f4:0e:ac:0b:2e:f6:9b:4d:e8:13:10:ec:b9:bd:d1:
98:83:8f:4c:ae:f8:da:a4:80:48:e6:d0:a7:97:96:63:77:29:
fa:fe:03:6c:e8:f7:04:41:ca:6c:6d:ec:c0:94:10:3b:09:99:
39:ec:ae:d8:03:92:cd:6a:36:3e:e1:03:fa:3d:9b:25:52:a9:
3d:fb:2e:5d:2c:e0:72:0c:cc:b8:43:8b:50:bc:fa:8a:a3:0d:
6a:1f:b7:7f:91:ea:90:a2:9d:4a:c1:58:2c:6f:23:f5:77:30:
f7:1c:e0:08:79:58:51:a7:00:5b:27:fa:e7:64:d1:d5:e1:38:
58:71:31:09:b9:54:06:8d:94:1a:e6:18:82:24:67:3a:65:da:
fe:05:a1:29
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnSKV7awORFGaJHjiHnz2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDMyODhlYWM5MGI2YzM3Zjc3ZWE1ZTY4MTNjODRiZTA0OWQzNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUN63dTfgo1oKrKC5rZTw79A8ewr
MpQDJYpKNRPS4xKieTDklFvCffOV/kD80axcu6Sj8G0SXRY3Ff8ePOpujgU3AVLn
Q/1h261WBvBQOFqT47JgmOjRuFkyPxBzYGW90tS9cnptnulr/pBpNa6H6C8sHUHZ
ZswV9McjP0H+dPM4FHlNWFZ7gaUDZF7KPsVDc3tNZi0PMI3sf+gpRxxvMd5LRbq/
3ymoRKv9zDnWvl2sWDf6beCDdDGw83BOi6+KVxLM8GManBDs1dWYv+jvzLdPdiuI
ReuiGNVDNZ4BPNKjXTxSBpize03DI/fDkbk4PH+bkIWTBMtZU+wphBsNPwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN0yiOrJC2w3936l5oE8hL4EnTcAMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvM1RLSTZza0xiRGYzZnFYbWdUeUV2Z1NkTndBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjrIAwQA
LUNXAwQALYZuMA0GCSqGSIb3DQEBCwUAA4IBAQCNnirtNauinvVjd0hqbyVA3MiX
vYzAxYXBjflMiOWXTfdfAGSxifrH30yrwx4ZPayIIYE0BikD50SM7K3Bw/kLBP1D
n2eIHo3uIA6JNcytrhabQ3kxonEQbTQ/n+Io1MjYwpFjvD7y1h8nBWgMFcz0DqwL
LvabTegTEOy5vdGYg49MrvjapIBI5tCnl5Zjdyn6/gNs6PcEQcpsbezAlBA7CZk5
7K7YA5LNajY+4QP6PZslUqk9+y5dLOByDMy4Q4tQvPqKow1qH7d/keqQop1KwVgs
byP1dzD3HOAIeVhRpwBbJ/rnZNHV4ThYcTEJuVQGjZQa5hiCJGc6Zdr+BaEp
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:18:23 2025 by rpki-client