Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/PoIdAsRHj_lyoBXzpjR49pFTfsI.roa
File: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (raw, json)
Hash identifier: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=
Subject key identifier: 3E:82:1D:02:C4:47:8F:F9:72:A0:15:F3:A6:34:78:F6:91:53:7E:C2
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019425FD69B58131D66FFB946FF72CE87BE8
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/PoIdAsRHj_lyoBXzpjR49pFTfsI.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133499
IP address blocks: 94.139.40.0/21 maxlen: 32
119.13.224.0/20 maxlen: 32
121.91.176.0/20 maxlen: 32
185.101.68.0/22 maxlen: 32
212.70.0.0/23 maxlen: 32
212.70.4.0/22 maxlen: 32
212.70.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:69:b5:81:31:d6:6f:fb:94:6f:f7:2c:e8:7b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e821d02c4478ff972a015f3a63478f691537ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:4c:09:b3:af:30:3c:b8:5c:8f:5b:a5:b9:
c1:03:68:76:73:09:cb:94:3a:44:e9:0a:c2:e8:a0:
8e:07:99:8a:ee:b0:2a:a5:98:9e:ef:3b:93:8b:03:
7d:13:5d:8c:ef:2a:c7:c6:2f:9a:96:6f:e3:65:c1:
a4:ac:ea:78:e1:b9:1e:7a:03:c6:de:b1:e7:34:7d:
20:c8:a3:00:e4:60:8e:b4:3b:4c:9e:bf:ab:9b:76:
44:77:9e:06:65:5d:09:8f:27:a6:dd:e7:58:84:9a:
e1:7d:30:13:f4:12:de:08:8a:19:4b:60:b0:68:28:
93:85:12:60:15:a7:c2:b2:a0:fb:e8:4e:ae:70:0e:
d0:64:07:f1:d1:db:11:98:09:fd:a4:02:38:da:7e:
9f:bf:54:9d:41:27:32:d3:ba:43:fe:92:6f:35:29:
40:75:c3:de:62:3a:d5:02:e9:d1:07:58:5e:4b:78:
59:e7:12:5c:f1:93:3b:99:4b:ee:a0:9f:fd:8c:13:
5e:f0:92:e2:8f:11:3b:3f:ce:c1:2d:bd:c9:49:ca:
9e:85:ee:b0:0f:5e:97:e3:f3:a8:cc:93:ce:2a:7b:
8e:aa:e8:15:a6:72:47:8b:67:e9:29:05:68:2a:a5:
bb:53:5a:c5:bf:ec:ea:c9:d9:fc:f9:3d:e6:d9:a1:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:82:1D:02:C4:47:8F:F9:72:A0:15:F3:A6:34:78:F6:91:53:7E:C2
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/PoIdAsRHj_lyoBXzpjR49pFTfsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.40.0/21
119.13.224.0/20
121.91.176.0/20
185.101.68.0/22
212.70.0.0/23
212.70.4.0/22
212.70.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:7c:18:9a:8e:de:d7:84:4a:36:ed:cf:ca:1b:25:44:51:fb:
43:cb:2b:d1:de:a8:0c:74:6d:32:d4:40:ef:c3:9a:b3:c6:d9:
10:0f:98:fd:61:51:66:1c:d6:b1:f8:ee:73:34:d5:4c:28:12:
29:1f:f8:40:d2:16:71:a6:80:1c:7d:24:34:4f:7c:bb:0a:30:
2c:86:05:0d:8d:b5:64:7c:22:20:61:48:0e:84:c9:46:51:8a:
ed:5d:ba:b6:db:9c:1e:26:34:44:ed:c8:70:e0:e1:06:ee:22:
61:71:51:fc:94:b8:c6:f7:9b:fb:17:36:01:47:80:46:f6:aa:
8f:7f:f1:da:08:35:e8:5a:50:04:59:89:28:d9:9d:d9:1e:ba:
7e:a4:27:39:ab:32:b2:77:92:3e:26:9d:41:27:be:77:17:3b:
fd:a3:4e:7b:db:2e:bd:88:8c:f9:4b:06:5e:80:c2:cf:44:0b:
1d:5d:5a:06:52:f5:eb:b0:fd:17:52:6a:15:65:3a:db:68:b2:
97:b7:65:d7:6d:40:35:98:ab:bf:ed:8c:8c:b0:4b:eb:e2:58:
be:00:67:c1:4e:67:e3:8f:65:82:e8:43:c8:87:df:13:4a:00:
d7:32:59:e4:43:34:30:c6:18:aa:e8:45:38:7c:25:a6:aa:2e:
60:36:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:59:55 2025 by rpki-client