Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/c3I1Xi3M4MZ1Xl6b6ONKy34oQ5A.roa
File: c3I1Xi3M4MZ1Xl6b6ONKy34oQ5A.roa (raw, json)
Hash identifier: ze5HveqTg5jem/x2SmuCNn8oWb6WnGSQ8NZu4Y6ugxs=
Subject key identifier: 73:72:35:5E:2D:CC:E0:C6:75:5E:5E:9B:E8:E3:4A:CB:7E:28:43:90
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5EC1E9B30C62A05ED8E13F1E3EFF
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/c3I1Xi3M4MZ1Xl6b6ONKy34oQ5A.roa
Signing time: Wed 01 Jan 2025 19:49:21 +0000
ROA not before: Wed 01 Jan 2025 19:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 145.61.196.0/24 maxlen: 24
145.61.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5e:c1:e9:b3:0c:62:a0:5e:d8:e1:3f:1e:3e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7372355e2dcce0c6755e5e9be8e34acb7e284390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:42:5f:38:11:93:c0:ed:ee:3e:75:ac:46:
84:10:19:2a:4f:6f:46:42:75:25:4f:c2:0c:7a:50:
45:92:1c:58:e1:95:24:10:0c:ed:46:90:4b:df:dd:
da:cb:77:c1:bf:de:9d:6f:8c:b1:35:18:e2:14:5c:
a4:75:46:e0:25:85:9b:fa:2b:72:f7:96:c9:a8:28:
2e:33:e1:14:8d:20:67:89:cd:e7:64:79:0a:36:f9:
3c:29:dd:33:fa:ab:68:31:60:4e:7f:7c:fc:9b:86:
91:f1:7e:96:6e:fa:79:30:3f:58:52:c4:04:2a:01:
60:53:3c:c8:14:8f:48:d9:b5:3f:14:d1:31:b6:c7:
4c:3e:2d:d8:86:d2:00:2c:a2:b9:ea:58:6c:68:f8:
6f:2b:61:16:9f:79:e5:3c:6d:e1:25:8a:b8:44:f7:
8e:6c:34:47:7f:9f:0d:c7:88:92:5d:c6:be:57:af:
0d:38:cc:4e:7f:57:38:b7:ae:0c:fb:cb:45:84:25:
53:51:44:fb:29:7a:a5:5f:26:8e:d9:3a:f5:e0:1e:
fa:93:fd:e4:6d:8a:11:58:87:2e:e0:36:71:92:7b:
e4:fa:0d:b2:a7:5c:58:5f:12:11:66:1f:24:da:71:
4b:8a:e8:20:2b:87:de:06:c2:d5:7d:a5:ba:1c:75:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:35:5E:2D:CC:E0:C6:75:5E:5E:9B:E8:E3:4A:CB:7E:28:43:90
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/c3I1Xi3M4MZ1Xl6b6ONKy34oQ5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.61.196.0/24
145.61.200.0/22
Signature Algorithm: sha256WithRSAEncryption
88:33:a5:56:70:43:17:f2:75:e1:f0:f2:ad:f3:fd:48:fe:1a:
49:da:e3:45:a6:a7:79:0f:cb:da:92:ad:87:92:5d:ab:61:12:
66:d8:24:1f:53:1b:de:1b:96:b5:ef:b5:3a:55:ce:34:d0:45:
15:17:b1:85:1f:a4:a0:20:7f:31:89:1c:85:b9:f3:18:cd:db:
54:5d:56:0e:d8:af:93:26:5b:11:86:8b:1f:b3:a1:b7:ec:e9:
af:c4:5b:e1:53:bf:fe:1b:4d:34:84:e0:1e:db:63:02:c0:5c:
df:bd:62:17:81:25:99:1c:60:37:0d:eb:37:cc:41:cf:4b:f1:
1d:02:48:28:57:62:5e:02:8b:e1:51:45:a7:2f:ed:a9:c7:bd:
e5:e2:63:ac:46:3b:b1:b2:34:76:4f:db:3f:dd:58:9f:12:c6:
e5:6c:eb:8e:f7:2f:91:f3:14:1d:67:64:94:8b:6b:f4:ff:63:
a7:10:d3:b8:f3:cd:2b:98:6a:aa:49:60:c9:2c:87:0e:cf:bc:
8b:73:7d:5e:c8:70:35:99:19:d3:88:aa:9c:bd:6f:9f:3e:9d:
b2:d4:1e:b6:dc:fe:ee:18:d8:ea:90:b9:9c:04:f2:31:01:f3:
fc:13:b6:0c:5e:66:19:59:56:85:48:f4:c9:6a:b7:6c:ea:71:
2d:97:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:39:37 2025 by rpki-client