Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/3ljJaz1a5cIjZ8YC3COzHNt_p94.roa
File: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (raw, json)
Hash identifier: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=
Subject key identifier: DE:58:C9:6B:3D:5A:E5:C2:23:67:C6:02:DC:23:B3:1C:DB:7F:A7:DE
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 019518315B2E08210576E4D660ABDB6EE950
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/3ljJaz1a5cIjZ8YC3COzHNt_p94.roa
Signing time: Tue 18 Feb 2025 08:34:02 +0000
ROA not before: Tue 18 Feb 2025 08:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24845
IP address blocks: 194.113.40.0/23 maxlen: 23
194.113.40.0/24 maxlen: 24
194.113.41.0/24 maxlen: 24
194.246.128.0/20 maxlen: 20
194.246.144.0/21 maxlen: 21
194.246.145.0/24 maxlen: 24
194.246.147.0/24 maxlen: 24
194.246.148.0/23 maxlen: 23
194.246.150.0/23 maxlen: 23
194.246.152.0/22 maxlen: 22
194.246.152.0/24 maxlen: 24
194.246.153.0/24 maxlen: 24
194.246.160.0/19 maxlen: 19
194.246.164.0/24 maxlen: 24
194.246.165.0/24 maxlen: 24
194.246.166.0/24 maxlen: 24
194.246.167.0/24 maxlen: 24
194.246.168.0/24 maxlen: 24
194.246.169.0/24 maxlen: 24
194.246.170.0/24 maxlen: 24
194.246.171.0/24 maxlen: 24
194.246.192.0/18 maxlen: 18
194.246.224.0/24 maxlen: 24
2a00:1830::/32 maxlen: 32
2a00:1830::/48 maxlen: 48
2a00:1830:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:31:5b:2e:08:21:05:76:e4:d6:60:ab:db:6e:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Feb 18 08:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de58c96b3d5ae5c22367c602dc23b31cdb7fa7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:33:35:b2:d8:d4:ad:ce:b7:83:5a:ae:a1:
81:b4:1b:ff:f5:da:32:49:74:24:8b:b6:f7:40:46:
ea:a8:56:91:1b:55:a8:d7:21:b0:59:25:ea:9d:78:
36:09:b0:bd:e1:0f:df:96:3d:7b:9d:1a:85:16:63:
7f:8c:e5:6d:cc:84:61:31:32:5a:49:c0:3d:70:bc:
20:30:1c:e5:14:c8:8f:20:8c:b4:ed:c6:5d:9c:b7:
18:fd:71:a8:86:58:c8:ed:80:e7:6d:0a:f0:94:7e:
28:3a:ae:51:86:24:c3:94:f3:52:e4:ac:c7:7d:91:
26:97:fa:4a:cc:2e:40:e2:00:c1:64:7d:a6:17:ca:
b5:fd:8c:7c:b4:a1:cb:cc:54:cb:20:7a:40:1a:dc:
d5:5e:f4:79:d9:cd:d5:be:b2:4a:84:f6:68:2d:48:
b7:a2:8b:81:41:b6:bc:f1:7d:fd:e5:b7:7c:44:cd:
7a:2d:c7:cf:2e:cd:7a:f0:39:58:36:0e:3c:1c:16:
a5:3b:f8:29:d2:7f:92:6e:b1:ff:c1:d3:35:46:12:
4e:43:d5:e4:26:d6:d2:70:79:26:1a:d3:1e:9c:5b:
7c:a9:e0:04:3a:65:29:12:36:92:93:37:b3:f1:50:
c6:22:7b:84:41:86:26:ce:15:f4:87:53:8c:ba:29:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:58:C9:6B:3D:5A:E5:C2:23:67:C6:02:DC:23:B3:1C:DB:7F:A7:DE
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/3ljJaz1a5cIjZ8YC3COzHNt_p94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.40.0/23
194.246.128.0-194.246.155.255
194.246.160.0-194.246.255.255
IPv6:
2a00:1830::/32
Signature Algorithm: sha256WithRSAEncryption
75:1b:96:7a:ef:4d:42:44:d9:a1:11:6b:5b:3c:3d:ef:09:d6:
f5:32:2a:ef:f4:33:c2:8a:f2:9f:c0:07:72:af:1c:6d:dc:fb:
1c:0d:ca:2d:b1:db:b5:4c:de:d6:4b:44:81:7a:5c:d9:f5:dd:
43:2e:a8:15:d7:e8:84:97:40:7f:02:57:1a:b6:b0:93:ba:d2:
52:a1:97:dd:74:dd:a2:32:92:b4:dd:49:c4:ed:28:87:c4:fc:
2d:a3:df:27:a2:69:7e:2c:44:6e:62:0b:a5:b0:0c:e5:bd:3e:
ca:6b:ee:ca:2b:be:80:5b:b7:9a:bb:2f:e7:fd:3e:44:70:e9:
7c:19:35:77:6d:35:d0:47:74:c6:33:39:47:05:db:f1:0c:ba:
60:19:0f:5c:21:63:d0:c1:1f:b9:e9:cc:4d:4a:8b:59:c8:ea:
cc:29:7a:8f:0c:f8:80:b7:2f:d9:76:5d:78:52:32:0e:f9:52:
ba:25:08:b5:a9:eb:6c:bd:d2:a0:ad:26:47:45:3f:f8:42:47:
cf:96:92:58:ed:82:97:18:d3:aa:10:f9:e7:97:cd:ad:59:7a:
a5:cc:a6:a7:ee:69:66:a3:cd:8b:49:0f:43:dd:40:93:98:a7:
f1:0c:2a:eb:9e:67:55:f2:39:31:17:86:30:bc:3d:30:ba:dd:
e4:36:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:16:30 2025 by rpki-client