Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa
File: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (raw, json)
Hash identifier: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=
Subject key identifier: DC:EE:98:DD:E4:39:3A:91:AC:01:FB:77:E4:0C:9E:C9:F5:63:43:AA
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 01942669E31F10B355377704774E6B1F3A84
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa
Signing time: Thu 02 Jan 2025 09:47:41 +0000
ROA not before: Thu 02 Jan 2025 09:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.198.117.0/24 maxlen: 24
185.109.132.0/24 maxlen: 24
185.109.133.0/24 maxlen: 24
185.109.134.0/24 maxlen: 24
185.109.135.0/24 maxlen: 24
185.146.152.0/24 maxlen: 24
185.146.154.0/24 maxlen: 24
185.146.155.0/24 maxlen: 24
2a07:4f80::/44 maxlen: 44
2a07:4f80::/48 maxlen: 48
2a07:4f80:10::/44 maxlen: 44
2a07:4f80:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:e3:1f:10:b3:55:37:77:04:77:4e:6b:1f:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Jan 2 09:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcee98dde4393a91ac01fb77e40c9ec9f56343aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:14:54:ef:05:10:39:9c:5c:28:45:a3:af:
1d:db:76:f3:2a:61:74:07:ff:c9:98:e7:a8:39:52:
6b:2b:d9:de:71:4c:c5:28:f8:e5:81:a8:2c:12:3d:
79:3d:12:27:c7:dd:9f:73:14:0f:17:84:53:22:96:
c2:9c:0c:0b:f1:1e:7c:fc:20:37:41:62:2d:80:08:
d6:f7:67:61:5c:36:b3:9d:c4:c5:1f:66:c2:b0:4c:
9c:69:79:08:a7:14:81:f5:c4:c5:40:65:4c:7f:4b:
50:9a:12:a4:f9:1f:50:c4:91:5a:83:99:10:cf:49:
43:89:cd:eb:17:16:f2:d3:d4:ee:7f:1a:46:dc:b5:
65:15:04:63:ba:5b:44:8f:e6:3c:24:ad:24:35:0c:
66:37:d5:37:25:f6:02:55:c6:04:3a:1f:df:5d:28:
aa:3e:87:e0:f5:f4:36:ef:59:3b:d8:fb:76:60:f3:
a8:c7:6a:7a:54:ae:a3:d0:f7:75:c7:88:3d:10:c1:
93:21:89:9d:c3:0d:ef:ff:f6:d1:02:9b:fe:32:de:
29:4b:ca:3e:97:4f:4a:3c:cb:9d:ef:8d:d2:e4:ca:
b1:53:d7:fe:8a:3b:ed:d3:59:79:c0:bd:05:a4:3a:
28:a8:24:a8:f6:9e:57:5f:d3:0e:0a:0d:66:08:ad:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:98:DD:E4:39:3A:91:AC:01:FB:77:E4:0C:9E:C9:F5:63:43:AA
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.117.0/24
185.109.132.0/22
185.146.152.0/24
185.146.154.0/23
IPv6:
2a07:4f80::-2a07:4f80:20:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:f5:01:91:3c:a1:00:61:48:8c:35:63:c1:60:bd:35:6d:0c:
a7:86:a7:fc:1a:25:02:52:6d:ea:24:d9:25:00:eb:48:c9:2d:
26:2a:45:ba:35:4a:f2:69:b5:f5:b6:e9:4f:13:6f:18:d2:30:
45:77:47:45:dd:07:44:95:c9:fa:02:24:ee:d5:7d:a9:f5:5d:
56:74:11:7e:9b:c2:76:cc:d7:50:42:75:04:e0:29:ba:7f:b2:
71:53:d7:dd:9f:fd:28:a8:3e:fb:2c:a7:76:59:6b:e6:21:69:
0e:a5:da:b1:38:57:be:ca:96:d6:58:b4:41:2e:f4:d5:82:a5:
a3:31:a5:9a:76:82:59:ba:06:83:63:2c:83:2b:36:7a:bb:f1:
ba:ed:05:a2:86:4e:4a:3f:90:d4:fe:d6:93:39:4a:57:93:93:
05:19:16:73:81:ad:27:2d:d8:32:60:76:b2:3e:b4:a6:2a:5f:
97:23:15:82:2e:42:c8:8e:c6:8f:86:b4:b0:72:ea:cd:52:43:
f0:bd:69:0a:f0:50:6f:78:68:69:78:38:2c:7d:e9:9f:e5:71:
d6:f1:1b:16:79:1c:12:d8:46:cc:b5:a9:93:6c:67:fb:56:60:
cf:61:eb:16:af:2f:3d:71:c4:26:4c:61:3e:0b:b9:b3:2b:ca:
4a:ba:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:16 2025 by rpki-client