Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/w3_nPHf7a07mKfqvAI84MjCWgdc.roa
File: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (raw, json)
Hash identifier: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=
Subject key identifier: C3:7F:E7:3C:77:FB:6B:4E:E6:29:FA:AF:00:8F:38:32:30:96:81:D7
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019426D9BDE632537F26DC6CEA543FED5C56
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/w3_nPHf7a07mKfqvAI84MjCWgdc.roa
Signing time: Thu 02 Jan 2025 11:49:51 +0000
ROA not before: Thu 02 Jan 2025 11:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203195
IP address blocks: 185.141.80.0/22 maxlen: 22
2a03:a8a0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:bd:e6:32:53:7f:26:dc:6c:ea:54:3f:ed:5c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jan 2 11:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c37fe73c77fb6b4ee629faaf008f3832309681d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:39:2b:c7:b9:eb:b0:2e:0b:94:c3:a4:6c:
5b:5d:1b:75:68:9a:ac:5b:25:28:1b:65:24:14:f7:
de:93:d0:c2:e8:9f:e0:d0:94:a5:04:d7:01:13:aa:
bf:d7:cb:f8:92:ac:60:03:d8:12:0e:4b:98:14:f2:
4f:8e:b6:da:b9:82:43:81:7c:c4:37:b4:40:95:49:
4a:31:28:a7:ad:a5:ca:8d:1d:8d:4d:2d:69:be:29:
9f:d8:75:42:63:29:0c:e3:d0:eb:62:11:fd:5d:61:
9b:d1:d8:dc:99:32:09:5d:d9:45:8c:74:4d:27:d3:
e1:07:8d:96:5a:0a:5b:3a:11:1c:55:71:55:63:e1:
fa:21:7b:01:41:ac:29:c0:0e:ef:1f:39:b9:30:06:
27:e1:d6:03:bb:c3:b9:5f:9b:1b:52:6b:d0:07:09:
2a:a8:8b:50:5a:0d:c8:d9:26:72:04:c7:6f:37:99:
2a:d4:3e:03:6b:0a:ed:ce:13:91:ab:bb:90:2d:37:
07:72:7f:96:ba:90:50:cb:aa:d0:a6:a9:0f:92:81:
b0:d6:ee:a4:84:22:b6:a2:27:12:e8:86:c8:38:7f:
32:fd:e8:29:20:df:a8:ea:eb:a4:22:c0:b8:13:91:
46:6d:4b:00:e9:10:be:f6:72:67:0e:be:92:09:27:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:E7:3C:77:FB:6B:4E:E6:29:FA:AF:00:8F:38:32:30:96:81:D7
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/w3_nPHf7a07mKfqvAI84MjCWgdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.80.0/22
IPv6:
2a03:a8a0::/29
Signature Algorithm: sha256WithRSAEncryption
79:1d:65:61:61:fc:75:c8:72:fb:67:9d:19:8e:6a:32:35:a3:
f4:d0:83:f1:c4:5d:a5:5c:f6:69:7b:5f:89:97:a3:cd:7b:30:
7e:48:67:51:45:30:0f:f7:90:86:dc:cc:9b:96:0f:40:f8:4a:
72:7d:51:a9:51:6b:21:b4:65:40:ae:b8:89:14:a4:d3:9c:87:
38:cb:b2:ea:fc:d3:a5:aa:f2:d5:99:ca:40:37:d3:00:14:ba:
37:0c:1e:61:26:a4:7c:06:94:97:e2:da:9a:54:f4:6e:b4:c4:
94:a9:9b:89:1c:82:7e:c4:ff:7e:59:a4:ba:11:56:70:1e:b4:
9f:84:bb:ce:e3:63:23:99:9a:b5:2c:0e:31:b9:d4:f1:76:e4:
c3:9a:db:d4:67:5e:4d:59:f5:3b:c8:23:ff:67:55:e7:07:89:
89:81:48:22:6e:98:a5:86:e4:3d:68:89:0b:be:95:01:61:31:
e1:58:7c:21:ac:f9:72:52:1f:a5:10:46:6a:2b:ff:4a:0c:5e:
75:c1:82:53:d9:98:ab:28:3a:85:14:34:45:ca:81:bc:0f:66:
24:e4:f3:de:2c:68:83:7b:2c:af:4a:c0:bf:f5:78:25:db:27:
5e:ae:db:3a:be:84:f8:1c:d8:5a:8b:8f:ca:69:63:f3:4c:56:
b7:dc:5b:c9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2b3mMlN/Jtxs6lQ/7VxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTk3MDk4MGQ1NjVjYzc0YWRiMjk0YWE2OGM3YjA2ZjUx
MzI4OTAwHhcNMjUwMTAyMTE0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzdmZTczYzc3ZmI2YjRlZTYyOWZhYWYwMDhmMzgzMjMwOTY4MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqps5K8e567AuC5TDpGxbXRt1aJqs
WyUoG2UkFPfek9DC6J/g0JSlBNcBE6q/18v4kqxgA9gSDkuYFPJPjrbauYJDgXzE
N7RAlUlKMSinraXKjR2NTS1pvimf2HVCYykM49DrYhH9XWGb0djcmTIJXdlFjHRN
J9PhB42WWgpbOhEcVXFVY+H6IXsBQawpwA7vHzm5MAYn4dYDu8O5X5sbUmvQBwkq
qItQWg3I2SZyBMdvN5kq1D4DawrtzhORq7uQLTcHcn+WupBQy6rQpqkPkoGw1u6k
hCK2oicS6IbIOH8y/egpIN+o6uukIsC4E5FGbUsA6RC+9nJnDr6SCSdoYwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMN/5zx3+2tO5in6rwCPODIwloHXMB8GA1UdIwQY
MBaAFMvpcJgNVlzHStspSqaMewb1EyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGIt
NzU2YTA4YTRhZGRhLzEvdzNfblBIZjdhMDdtS2ZxdkFJODRNakNXZ2RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGItNzU2YTA4YTRhZGRh
LzEveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY1QMA0E
AgACMAcDBQMqA6igMA0GCSqGSIb3DQEBCwUAA4IBAQB5HWVhYfx1yHL7Z50Zjmoy
NaP00IPxxF2lXPZpe1+Jl6PNezB+SGdRRTAP95CG3Myblg9A+EpyfVGpUWshtGVA
rriJFKTTnIc4y7Lq/NOlqvLVmcpAN9MAFLo3DB5hJqR8BpSX4tqaVPRutMSUqZuJ
HIJ+xP9+WaS6EVZwHrSfhLvO42MjmZq1LA4xudTxduTDmtvUZ15NWfU7yCP/Z1Xn
B4mJgUgibpilhuQ9aIkLvpUBYTHhWHwhrPlyUh+lEEZqK/9KDF51wYJT2ZirKDqF
FDRFyoG8D2Yk5PPeLGiDeyyvSsC/9Xgl2yderts6voT4HNhai4/KaWPzTFa33FvJ
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:31 2025 by rpki-client