Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/i7yXvmlWG45A5KxBFSXl668mPOM.roa
File: i7yXvmlWG45A5KxBFSXl668mPOM.roa (raw, json)
Hash identifier: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=
Subject key identifier: 8B:BC:97:BE:69:56:1B:8E:40:E4:AC:41:15:25:E5:EB:AF:26:3C:E3
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 01942369AD5F395F2687C23C8BF553734CFA
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/i7yXvmlWG45A5KxBFSXl668mPOM.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25264
IP address blocks: 109.206.252.0/22 maxlen: 22
109.206.252.0/24 maxlen: 24
109.206.253.0/24 maxlen: 24
109.206.254.0/24 maxlen: 24
109.206.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ad:5f:39:5f:26:87:c2:3c:8b:f5:53:73:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bbc97be69561b8e40e4ac411525e5ebaf263ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:df:8d:d4:ba:28:31:32:53:a7:eb:5e:74:
4f:30:3f:22:03:92:bf:79:0d:3f:bd:f8:92:0b:9f:
39:4f:76:30:dd:b3:1c:e5:b9:be:d8:ff:b2:b5:69:
13:5d:50:94:ac:bb:df:af:8c:49:a9:2f:ee:5d:6c:
04:d1:b4:17:b6:e8:6f:23:c5:50:97:c1:b0:fa:39:
17:fb:88:1d:4b:6a:e5:3f:a7:d1:7e:97:03:e6:a7:
1d:02:05:53:31:d1:fc:59:7c:cb:5a:1d:75:a1:e9:
15:48:4c:6f:ed:e3:e6:38:2c:01:f3:a4:5d:a1:4a:
cd:e2:8b:42:e9:9e:ca:10:2b:bd:fc:e8:57:28:e0:
5b:8b:41:55:66:54:4f:49:37:f4:9f:ff:fb:6f:5e:
a0:e7:7b:ff:14:10:8c:8c:f4:83:96:13:08:4f:4b:
29:3e:88:5a:19:5f:f2:67:f5:0e:d4:09:5e:39:a5:
3c:9a:15:eb:2e:69:c0:6c:d1:11:98:3f:67:9a:fa:
a6:f6:6e:f5:58:c6:a4:97:b5:18:ad:20:6e:dc:b4:
c5:48:a2:9d:1a:bb:a1:f0:3b:55:32:84:90:44:00:
f7:cc:47:70:ef:5c:88:97:26:08:99:55:10:12:8c:
e7:c8:c2:40:7d:39:14:3a:db:45:0e:68:28:21:dc:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:97:BE:69:56:1B:8E:40:E4:AC:41:15:25:E5:EB:AF:26:3C:E3
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/i7yXvmlWG45A5KxBFSXl668mPOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:41:79:82:5a:68:17:2c:c9:6a:1a:cd:c3:21:88:21:53:c1:
46:79:80:6b:68:55:45:21:b8:d3:f2:9f:5c:f6:68:46:29:b2:
75:1f:b4:cb:f7:4f:cc:54:fe:43:7b:25:4d:4c:f0:6e:76:e1:
81:16:20:0f:59:fa:3d:0b:5a:9f:c9:0c:34:d9:17:72:10:78:
c7:13:37:4f:0c:34:47:a1:76:97:7b:21:73:ee:b5:d7:94:6a:
ef:10:d4:0a:f5:fd:95:57:2e:ab:bc:d9:3e:9f:fa:93:95:18:
b5:b2:1a:b9:a2:96:90:f6:9b:13:55:a0:42:9c:08:39:50:f5:
70:3d:a7:2d:18:6b:d6:bb:43:48:07:4c:5f:c5:d8:36:22:de:
c1:64:e9:8e:38:8f:b3:79:46:7e:f3:1b:2d:ea:10:0d:01:3f:
80:fb:b7:e8:1d:97:d7:09:0f:bb:76:f9:e9:8c:60:09:64:b3:
0c:56:26:d7:de:4e:05:77:5d:9b:65:aa:bc:1e:70:0b:b8:0f:
2d:7f:10:02:1f:84:90:77:83:e5:0b:3e:99:91:0c:b8:20:ed:
55:f8:8f:0b:10:7e:91:87:0b:0f:35:78:20:46:a1:bf:a2:62:
8d:98:c9:c8:7f:6e:a4:bc:ee:7d:5e:57:e1:21:b3:3b:2b:00:
5e:4e:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:28:44 2025 by rpki-client