Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3QwUnETaYVG14KkhQMfMOQKshFs.roa
File: 3QwUnETaYVG14KkhQMfMOQKshFs.roa (raw, json)
Hash identifier: pYdJYptYSVBwjRE+/DpYAJVmGuOHGhVMhFosZYAXld4=
Subject key identifier: DD:0C:14:9C:44:DA:61:51:B5:E0:A9:21:40:C7:CC:39:02:AC:84:5B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824AA47804F0C0A8D8A3AF00E837926
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3QwUnETaYVG14KkhQMfMOQKshFs.roa
Signing time: Thu 02 Jan 2025 17:51:18 +0000
ROA not before: Thu 02 Jan 2025 17:51:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201178
IP address blocks: 45.84.220.0/24 maxlen: 24
45.84.221.0/24 maxlen: 24
193.148.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:aa:47:80:4f:0c:0a:8d:8a:3a:f0:0e:83:79:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd0c149c44da6151b5e0a92140c7cc3902ac845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:54:5c:71:e5:9f:3c:9d:f9:61:16:d0:d2:
af:42:86:f2:f9:d4:2f:bf:9a:8c:e9:3b:3f:db:78:
7d:a1:50:92:24:91:32:8d:ef:48:74:1b:c1:8f:5a:
d3:55:fd:95:d7:8e:e9:cb:0b:20:6a:39:ea:e9:28:
ef:e7:ea:fb:74:7e:d8:86:33:28:9a:f5:76:93:1a:
9e:22:0d:ed:6b:f9:06:66:fd:98:0d:d0:3b:e1:f7:
61:ee:f7:95:ee:70:5b:eb:fc:05:de:1b:d4:aa:62:
ad:b2:0d:e3:7e:4a:ba:86:72:54:2b:1e:0f:61:85:
34:cf:4d:ab:cd:72:cd:83:9a:aa:f2:06:b9:03:18:
c4:ff:f3:3b:e3:ab:ed:3d:59:0f:48:8b:06:f0:7f:
62:1a:9b:62:72:5b:06:62:e2:12:e1:4a:30:52:13:
87:7a:b8:c1:07:83:ce:96:23:9e:35:c3:b6:ae:a8:
a5:f4:d3:83:af:c2:67:4c:07:ae:f9:d4:ab:43:3c:
85:06:5f:97:63:9f:9b:7b:b6:91:8b:a1:9e:20:e8:
70:87:c1:64:0d:4d:d3:f3:2a:07:bd:89:a8:16:ed:
f3:37:a8:a1:c4:50:09:79:71:2a:17:de:d7:dd:5d:
be:5c:d4:d8:1c:58:73:d3:45:19:1a:76:fa:08:46:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0C:14:9C:44:DA:61:51:B5:E0:A9:21:40:C7:CC:39:02:AC:84:5B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3QwUnETaYVG14KkhQMfMOQKshFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.220.0/23
193.148.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:58:2a:05:7f:6b:b3:f3:c2:5f:09:91:11:e4:d0:63:d3:32:
3f:9b:b1:62:c4:49:78:08:56:96:10:98:1b:fb:e0:d1:ee:6c:
a9:39:bd:5f:39:73:2a:8f:16:47:0d:a7:95:2d:05:ec:8d:dc:
59:8f:45:3c:a3:2c:8d:56:d5:d0:15:61:0d:ec:29:a3:24:77:
a7:d7:fd:31:80:0e:c8:66:aa:99:51:cf:64:d8:8d:af:38:ff:
e0:f6:56:0b:57:35:fc:50:a6:08:83:48:05:13:fd:7a:b1:b1:
be:b6:19:c1:91:43:2f:8f:7f:ca:11:81:cc:2a:e8:d3:40:27:
67:4c:cc:df:af:b5:65:62:05:97:15:89:d3:10:0a:c9:42:b0:
54:90:fb:e9:ea:6e:13:89:0a:05:99:4c:66:c9:5a:1a:e6:4f:
04:02:ad:31:7a:ee:08:bc:46:8c:5e:97:b7:86:64:b6:d8:3c:
1f:3b:6c:86:11:9f:ff:ea:cc:5a:a1:f3:91:f2:1e:ac:fd:7f:
2c:36:b2:42:89:3c:d2:5e:a4:4d:54:1d:97:06:31:93:39:fb:
9e:ee:3d:4f:ea:23:20:51:e9:fc:f4:13:a3:61:2f:0f:0f:81:
36:a8:ea:39:64:bd:2d:66:c4:76:a9:9e:58:3f:99:39:c8:a4:
67:b2:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:00 2025 by rpki-client