Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3jwAJkscmhb8NSw4un_w0ZUqE_E.roa
File: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (raw, json)
Hash identifier: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=
Subject key identifier: DE:3C:00:26:4B:1C:9A:16:FC:35:2C:38:BA:7F:F0:D1:95:2A:13:F1
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 019523EF08D66E150D979129BBEE5354E41E
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3jwAJkscmhb8NSw4un_w0ZUqE_E.roa
Signing time: Thu 20 Feb 2025 15:17:02 +0000
ROA not before: Thu 20 Feb 2025 15:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61159
IP address blocks: 91.223.19.0/24 maxlen: 24
185.158.208.0/22 maxlen: 24
194.110.204.0/24 maxlen: 24
195.234.112.0/22 maxlen: 24
2a02:2278:ff00::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:ef:08:d6:6e:15:0d:97:91:29:bb:ee:53:54:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Feb 20 15:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de3c00264b1c9a16fc352c38ba7ff0d1952a13f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:a8:b7:1a:6f:fe:79:7e:df:b6:a8:da:97:
2e:a1:e6:03:8b:9f:34:d5:fd:85:38:87:e2:e3:ee:
e8:dc:44:bb:ae:08:b5:61:d9:88:3d:02:79:7a:63:
65:47:db:44:39:fe:82:19:fc:1d:c9:fb:8b:ec:e8:
7a:c4:53:8f:12:71:66:83:f5:e2:55:fb:ab:ca:ca:
22:eb:82:97:ab:0d:3b:e0:b4:99:c9:7a:fa:0b:26:
69:8c:d5:f5:9a:57:d1:00:af:de:03:1b:70:9d:c4:
29:84:38:bc:fe:ea:27:5b:1c:08:d6:02:11:89:22:
fd:82:d8:40:38:f4:e0:d7:20:5d:16:dd:a2:5f:11:
33:ab:9f:23:5b:11:e4:0a:98:7b:80:f3:3f:ba:de:
e6:7b:29:a7:e7:36:92:69:bc:1d:cd:fc:43:2f:c6:
bc:b0:27:38:02:7b:34:40:a8:d4:ef:a9:ac:55:80:
51:cc:a7:6e:7a:8c:99:67:82:16:1a:b3:b0:72:7a:
da:f0:0d:c2:e5:a7:2d:88:3e:7c:1d:18:63:b1:8a:
04:2f:1d:f1:b4:b2:c6:86:4e:19:f5:0b:8c:a9:95:
8e:01:f5:48:6f:9e:28:fa:42:78:06:7f:01:55:35:
f4:e4:91:35:75:82:d4:93:b8:f6:63:98:5c:b7:9b:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3C:00:26:4B:1C:9A:16:FC:35:2C:38:BA:7F:F0:D1:95:2A:13:F1
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3jwAJkscmhb8NSw4un_w0ZUqE_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.19.0/24
185.158.208.0/22
194.110.204.0/24
195.234.112.0/22
IPv6:
2a02:2278:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
68:db:33:d7:16:cc:bd:6f:4d:62:79:f4:11:47:11:cf:f1:38:
c7:d5:a3:84:66:ba:93:1f:6f:a4:fa:df:ee:38:d7:fc:06:ed:
54:2f:47:4d:08:c3:c2:bb:7b:f8:24:ed:f5:13:1a:ee:a7:bf:
ed:b0:15:06:a0:d3:08:0b:3f:48:37:95:ca:96:0b:9a:56:8f:
75:24:fa:7a:2b:47:eb:4e:ac:0d:99:20:8f:69:19:9e:e9:37:
db:dc:23:94:4c:41:b6:ed:73:0f:fe:7c:81:e7:67:3d:23:d6:
ad:a6:7f:19:a1:8d:4b:1a:cf:21:8c:11:c7:ed:28:67:d3:cb:
7e:a9:6e:13:f0:10:d3:be:a3:bb:64:9b:73:3b:1f:90:03:18:
29:a4:73:e7:e9:98:39:31:d3:81:f8:11:d2:38:63:be:bf:b4:
2d:6f:bd:b9:6b:f2:bf:4f:e8:75:90:81:f1:b9:4a:32:9c:54:
c9:59:32:28:5c:bb:ff:76:ba:3f:36:a8:54:6c:d0:a1:83:41:
fd:c3:8a:91:25:87:23:a9:e3:65:cc:cc:b5:34:9e:18:96:1b:
12:94:98:33:23:66:9d:6c:07:12:ac:6d:12:ce:5b:7b:05:eb:
ee:75:ae:7c:51:e4:b0:5b:70:20:12:1d:6e:be:c7:f4:72:5a:
c6:e9:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:20:49 2025 by rpki-client