Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3Lw0SL_j4JBwL20XvO2wVnLofaU.roa
File: 3Lw0SL_j4JBwL20XvO2wVnLofaU.roa (raw, json)
Hash identifier: yUjuKv5RetwhHpDfHXmk7kvhEGBkjWJ8GewoVWLwX58=
Subject key identifier: DC:BC:34:48:BF:E3:E0:90:70:2F:6D:17:BC:ED:B0:56:72:E8:7D:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01973A92F247705F80CE19D632C3F8020483
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3Lw0SL_j4JBwL20XvO2wVnLofaU.roa
Signing time: Wed 04 Jun 2025 10:53:18 +0000
ROA not before: Wed 04 Jun 2025 10:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
195.133.195.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:92:f2:47:70:5f:80:ce:19:d6:32:c3:f8:02:04:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 4 10:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcbc3448bfe3e090702f6d17bcedb05672e87da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:fe:e8:f8:69:4b:eb:c0:3b:d9:52:c0:ef:
38:0d:2b:94:27:a0:3d:37:41:2f:c1:57:56:00:0e:
c3:8d:2a:3b:eb:43:00:73:f8:6f:9a:ba:49:2e:5a:
ad:a6:3f:1b:ea:de:08:4b:05:2b:e6:ca:d2:5e:4d:
bf:92:12:e8:4c:75:33:bb:1c:22:1a:8d:a7:30:79:
72:82:27:f9:a9:b9:0b:4c:e9:e2:05:e5:4b:04:22:
6d:ec:5f:6d:82:ce:81:2c:56:46:72:84:36:22:b9:
a2:de:03:44:71:0a:1c:f3:3d:ae:b8:8e:df:29:2d:
82:e0:12:20:cd:60:67:16:54:e9:d2:91:a9:a9:e2:
05:7c:08:7d:83:3c:30:e7:a9:f2:9c:e3:92:ce:83:
80:e9:11:21:7b:47:e2:8b:6f:de:1f:22:a7:12:54:
e3:31:e4:44:4b:40:73:1b:56:0a:f8:16:4a:33:5f:
cb:65:7b:02:d2:9c:42:f6:2a:43:a2:a9:cc:e2:3f:
83:b1:ad:0e:94:55:93:fe:93:15:ed:7b:ba:27:fa:
48:7b:1d:4d:6b:59:8b:06:c9:59:b3:dc:e4:0d:d4:
59:3a:5f:ff:9c:d8:74:69:9d:61:ed:73:dd:71:8c:
15:c9:cf:5e:d3:68:a4:63:d2:05:28:7e:f6:08:3e:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BC:34:48:BF:E3:E0:90:70:2F:6D:17:BC:ED:B0:56:72:E8:7D:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3Lw0SL_j4JBwL20XvO2wVnLofaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
194.58.155.0/24
194.87.53.0/24
194.87.119.0/24
194.87.169.0/24
194.87.179.0/24
194.135.24.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
195.133.195.0/24
212.192.241.0/24
212.193.0.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
82:40:44:87:74:26:57:e0:9f:0a:73:ec:2f:51:bf:f6:4e:f1:
c1:7e:fd:82:14:43:2a:5b:f5:99:b0:4c:cd:f2:78:54:53:d8:
24:fd:e1:75:ee:3d:d9:39:88:25:fd:7d:4e:73:6f:38:5e:c8:
a1:68:f3:ab:dd:db:45:cb:66:28:fe:ae:aa:8c:c0:9a:9e:b6:
c6:70:4c:b3:60:55:dd:4b:16:58:0f:79:11:db:52:92:67:b5:
53:59:67:8d:54:eb:8c:fd:4f:37:e5:1c:d9:f4:19:ee:51:21:
5c:e0:3c:a0:f0:04:4a:7d:5f:73:b7:7d:41:fa:48:dc:e3:44:
1b:8e:2c:15:53:ad:db:5e:dc:1a:38:e7:55:0a:0d:79:45:81:
13:72:70:03:b9:65:20:18:a0:ab:72:dc:25:bb:18:9b:f0:c4:
33:13:db:12:80:93:c4:10:41:a9:83:b9:38:2d:dc:27:8c:e3:
8f:d6:9c:c8:d9:45:e2:60:53:b3:51:09:bf:64:4d:fc:c1:59:
aa:88:3b:7d:4b:fc:6f:8d:38:26:83:aa:36:19:08:1f:af:e2:
21:56:bc:fc:6c:b5:30:71:76:96:22:ee:0f:cc:34:0a:cc:28:
72:51:72:6a:82:05:5d:fc:62:1a:d6:6a:13:1d:a2:35:e3:7a:
e6:3c:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:55 2025 by rpki-client