Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3lDtXgOw6htHlSJoyH7CuMP9NOI.roa
File: 3lDtXgOw6htHlSJoyH7CuMP9NOI.roa (raw, json)
Hash identifier: UqKHs02fa6NZNUtedJyYTXBvxnSrTZO+9omynsa7gFg=
Subject key identifier: DE:50:ED:5E:03:B0:EA:1B:47:95:22:68:C8:7E:C2:B8:C3:FD:34:E2
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0198283F2D9E6ACC8E37BBDA4EE253BE94CD
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3lDtXgOw6htHlSJoyH7CuMP9NOI.roa
Signing time: Sun 20 Jul 2025 14:31:25 +0000
ROA not before: Sun 20 Jul 2025 14:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:3f:2d:9e:6a:cc:8e:37:bb:da:4e:e2:53:be:94:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 20 14:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de50ed5e03b0ea1b47952268c87ec2b8c3fd34e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:b6:8a:91:c8:fe:de:c5:d1:8e:f0:6c:1f:
80:34:a6:9a:72:c8:72:d9:2e:8e:96:27:bb:e5:21:
b0:67:33:c1:1e:7c:54:7e:0e:c5:03:68:74:c9:c4:
47:96:a4:c9:60:93:4b:63:08:fb:d6:6a:b9:34:88:
b0:b5:77:67:02:e6:93:da:a4:82:46:65:40:ed:5b:
e8:60:22:4b:48:df:ff:c6:9d:ab:d9:b3:e7:cc:03:
df:ad:bc:bd:0d:9e:9d:f0:ac:db:a3:e0:28:cb:d9:
0f:92:c9:b1:1d:85:f7:e0:8b:98:51:d3:8f:35:3b:
91:8b:69:29:d6:5c:ae:1e:21:23:67:e5:26:c4:e6:
f2:91:21:d4:52:c3:ef:0c:f3:79:66:18:2e:83:a3:
26:12:b9:d8:3f:d9:7e:4d:b2:c1:b5:3c:c9:da:10:
ce:ce:fe:83:19:48:e9:39:aa:f3:54:a4:e6:77:83:
31:c4:08:f7:76:5c:b8:c0:63:ff:55:b5:ba:4c:1f:
d8:f4:31:41:71:59:46:10:00:71:56:ed:fd:cf:e2:
a6:3a:ad:29:74:94:00:39:c6:be:17:19:66:80:72:
56:4c:bc:e9:eb:63:55:17:6c:a4:ca:1d:0f:db:ef:
d6:92:56:16:4f:c2:a5:3f:b1:84:16:d7:33:5d:20:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:50:ED:5E:03:B0:EA:1B:47:95:22:68:C8:7E:C2:B8:C3:FD:34:E2
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3lDtXgOw6htHlSJoyH7CuMP9NOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ea:68:1a:f6:ec:43:0d:3a:b6:85:34:9a:b9:e0:1a:4f:b4:
78:45:e8:0c:be:bc:97:66:fe:b3:ef:5e:49:5b:40:a6:b6:c7:
f7:a5:f9:b1:78:26:a3:9f:63:ff:e1:96:44:83:a9:4a:87:bb:
87:7b:84:c4:b3:6f:56:04:f4:f6:de:a2:f4:ec:37:62:9b:e2:
7f:7f:ef:1b:1c:37:a8:d2:c6:9e:84:ea:f6:e3:47:2c:8b:a5:
42:39:b9:6c:ea:d0:8f:62:a9:b3:b3:b3:52:f9:f7:f3:d3:4b:
bf:15:e2:b2:09:ff:8d:e4:fb:c0:c4:01:3a:20:09:77:88:7f:
be:b3:6d:5a:10:50:88:50:73:be:dc:3e:04:6b:a1:13:b4:b7:
f2:63:06:c4:17:bf:00:4e:6a:c4:66:5b:65:4d:1d:94:63:3a:
a5:02:85:9b:56:7a:62:31:6c:8f:13:e5:91:9b:70:f9:bf:51:
f1:b7:a9:d1:a5:22:7a:7b:05:92:50:31:fa:2f:94:4e:72:38:
c8:8f:f7:0f:27:cb:23:6b:41:f9:dd:dc:e7:b3:84:7e:33:e1:
25:00:7b:d2:0a:73:69:64:2f:a0:5d:a5:8c:42:04:1d:4a:0c:
27:f5:25:3d:92:b0:94:3e:d6:e1:d4:0e:61:dd:08:40:1c:8a:
f4:84:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:29:55 2025 by rpki-client