Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa
File: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (raw, json)
Hash identifier: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=
Subject key identifier: DD:B7:2C:CC:1E:22:A6:33:B2:CF:11:26:31:1C:77:09:BD:85:AE:0F
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019611DEB42C63DF96C05A9088FA6C8DD4D9
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa
Signing time: Mon 07 Apr 2025 20:08:49 +0000
ROA not before: Mon 07 Apr 2025 20:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48152
IP address blocks: 80.65.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:de:b4:2c:63:df:96:c0:5a:90:88:fa:6c:8d:d4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Apr 7 20:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddb72ccc1e22a633b2cf1126311c7709bd85ae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:e6:2c:94:a4:25:13:cb:ec:85:03:9a:87:
76:d7:6f:f2:fe:db:06:1c:ec:47:6e:0c:0c:12:99:
13:bd:b5:2d:5d:5b:35:44:1c:20:9c:74:d8:93:5e:
e8:a5:20:7d:d1:7b:7f:23:ab:cb:ea:a1:c5:7c:ca:
f2:2c:e3:d5:7e:69:21:ca:d5:b8:ab:cc:b9:dd:24:
37:ad:64:2d:fe:1e:3b:88:1c:fb:96:b3:aa:40:60:
a2:37:86:bc:c0:9e:9d:2f:6e:59:ce:d3:4b:a4:9f:
2c:d6:e4:66:30:c6:f9:1c:bc:7b:59:b9:19:c5:66:
25:77:4f:ae:d2:69:f5:1d:9c:f7:7c:48:d9:cd:b4:
fa:78:17:95:c2:01:9f:91:75:9a:aa:2b:a7:4f:e1:
aa:53:5b:cf:5d:5b:c1:73:0d:8e:08:6e:7a:4a:28:
10:d4:ee:c6:99:5d:07:62:e5:68:88:ad:ac:3d:b8:
eb:e3:32:aa:ac:aa:d9:a3:a0:8d:7e:72:75:d0:19:
6f:7e:5f:c4:f8:a5:d8:df:9c:26:57:aa:31:c3:5c:
a5:4b:bf:a9:94:da:20:6c:d9:23:2b:4c:8c:90:ab:
1e:e5:3c:e8:8d:15:68:1a:b1:f4:25:e5:4e:0b:e9:
cb:ab:7b:b8:39:02:f8:ca:f6:ef:f6:ef:f4:5a:05:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:2C:CC:1E:22:A6:33:B2:CF:11:26:31:1C:77:09:BD:85:AE:0F
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.8.0/21
Signature Algorithm: sha256WithRSAEncryption
67:ba:1b:fe:e0:03:3d:b5:66:cd:f6:f1:6e:ce:40:dc:c3:fd:
28:62:e9:ef:91:6a:d1:0e:42:e3:22:50:6a:34:a0:62:68:1f:
11:75:d1:ce:35:b8:50:75:95:bc:6c:61:e2:aa:57:11:da:1b:
49:a9:d8:be:69:c9:29:b6:26:86:8f:b7:73:62:ba:b7:8d:f8:
8a:b4:f2:91:49:d8:45:36:d7:24:54:7c:7a:76:63:01:3c:5e:
c7:6d:b4:3b:9b:78:2a:95:bb:dc:33:32:e6:fd:e1:e8:fb:dd:
87:b1:9e:b4:68:59:98:6c:f8:03:24:a6:e1:1b:01:9b:9f:5b:
31:89:e0:76:a0:81:e8:dd:fd:3c:d2:e4:fe:ea:92:af:9f:92:
04:8e:d8:4e:06:03:01:c3:d9:5f:a6:59:37:ae:f4:ff:e2:fe:
c8:e7:f5:c1:94:b4:4e:f8:75:88:a9:f5:c9:fa:cb:58:af:84:
a2:73:44:41:f0:54:81:99:d0:b1:f2:8b:c1:52:49:1b:dc:75:
1e:f0:75:4c:fe:db:97:1d:71:50:c1:bb:e2:b8:9c:63:07:28:
78:55:7e:76:3b:41:87:f6:28:31:84:1f:88:7d:e5:90:b6:b6:
2d:7d:c5:c7:b2:3a:f5:f5:d8:70:03:74:2f:5f:f1:58:dd:b4:
81:f8:43:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYR3rQsY9+WwFqQiPpsjdTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjUwNDA3MjAwODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGI3MmNjYzFlMjJhNjMzYjJjZjExMjYzMTFjNzcwOWJkODVhZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpDmLJSkJRPL7IUDmod212/y/tsG
HOxHbgwMEpkTvbUtXVs1RBwgnHTYk17opSB90Xt/I6vL6qHFfMryLOPVfmkhytW4
q8y53SQ3rWQt/h47iBz7lrOqQGCiN4a8wJ6dL25ZztNLpJ8s1uRmMMb5HLx7WbkZ
xWYld0+u0mn1HZz3fEjZzbT6eBeVwgGfkXWaqiunT+GqU1vPXVvBcw2OCG56SigQ
1O7GmV0HYuVoiK2sPbjr4zKqrKrZo6CNfnJ10Blvfl/E+KXY35wmV6oxw1ylS7+p
lNogbNkjK0yMkKse5TzojRVoGrH0JeVOC+nLq3u4OQL4yvbv9u/0WgUX4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN23LMweIqYzss8RJjEcdwm9ha4PMB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvM2Jjc3pCNGlwak95enhFbU1SeDNDYjJGcmc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUEEIMA0G
CSqGSIb3DQEBCwUAA4IBAQBnuhv+4AM9tWbN9vFuzkDcw/0oYunvkWrRDkLjIlBq
NKBiaB8RddHONbhQdZW8bGHiqlcR2htJqdi+ackptiaGj7dzYrq3jfiKtPKRSdhF
NtckVHx6dmMBPF7HbbQ7m3gqlbvcMzLm/eHo+92HsZ60aFmYbPgDJKbhGwGbn1sx
ieB2oIHo3f080uT+6pKvn5IEjthOBgMBw9lfplk3rvT/4v7I5/XBlLRO+HWIqfXJ
+stYr4Sic0RB8FSBmdCx8ovBUkkb3HUe8HVM/tuXHXFQwbviuJxjByh4VX52O0GH
9igxhB+IfeWQtrYtfcXHsjr19dhwA3QvX/FY3bSB+EPA
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:00:50 2025 by rpki-client