Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/3ASo22zO-EXbnVoD8xdjmbQQciQ.roa
File: 3ASo22zO-EXbnVoD8xdjmbQQciQ.roa (raw, json)
Hash identifier: LJtTfpFY647slp84bPyfcFQ7TSnCZHrKggPrb9t6eYs=
Subject key identifier: DC:04:A8:DB:6C:CE:F8:45:DB:9D:5A:03:F3:17:63:99:B4:10:72:24
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282807FACA18D60CAB345769DB1C0B29
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/3ASo22zO-EXbnVoD8xdjmbQQciQ.roa
Signing time: Thu 02 Jan 2025 17:54:59 +0000
ROA not before: Thu 02 Jan 2025 17:54:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3187
IP address blocks: 92.247.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:07:fa:ca:18:d6:0c:ab:34:57:69:db:1c:0b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:54:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc04a8db6ccef845db9d5a03f3176399b4107224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:82:42:ac:1d:f8:b0:41:02:f8:83:7d:72:
65:19:58:e7:d9:79:ce:56:ea:8e:94:48:1c:d5:04:
e2:f2:45:82:d0:75:e1:df:08:ba:46:9d:77:dc:f3:
44:c7:64:3e:c5:25:3e:9d:c0:44:bb:98:72:e4:b3:
47:7e:5a:c0:4a:a4:a5:08:6f:ca:77:d7:f4:88:18:
08:81:b6:e0:95:2d:21:1d:16:be:e8:20:e8:3a:f1:
c2:4b:94:54:be:cb:f4:85:17:8d:d0:06:b0:cb:b5:
e2:cf:8b:b8:83:b4:c2:c1:ce:6d:bc:06:19:d2:8c:
f9:c1:dd:96:5d:c4:7a:d6:eb:bf:50:2e:2c:4c:6a:
42:bc:6f:23:fe:17:a3:e9:ba:71:f6:d9:64:10:3d:
19:44:96:42:63:3d:96:c2:5a:f6:e4:a0:ea:e5:24:
61:48:bc:eb:0a:da:d0:3a:08:61:44:bd:ee:62:6a:
38:0d:bb:a6:48:6f:48:56:5f:da:d1:78:ae:c5:d1:
f5:39:68:df:b1:22:dc:4e:49:3b:80:d2:93:e1:84:
3e:8a:b2:54:c9:a7:ec:8e:e4:9a:12:54:ec:3c:f6:
24:d3:94:69:8e:1d:3b:e0:08:82:77:13:39:d0:07:
c7:6e:28:c6:cd:19:79:bd:de:3e:b3:40:04:82:47:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:A8:DB:6C:CE:F8:45:DB:9D:5A:03:F3:17:63:99:B4:10:72:24
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/3ASo22zO-EXbnVoD8xdjmbQQciQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6f:74:0c:35:5c:cd:c8:71:44:15:30:bb:30:4f:5f:d8:27:
40:fb:8c:d6:64:a5:83:d8:e9:51:44:1c:93:e6:e0:80:93:92:
8e:e8:8d:52:c9:01:e2:3f:27:d1:a0:cf:b9:12:94:92:62:c5:
8c:27:e6:cf:87:90:a4:11:aa:00:b1:e8:62:98:4b:2a:f6:82:
76:98:f0:23:a4:a6:2f:d6:aa:32:ac:f0:88:2c:8f:dc:c8:1c:
da:92:8f:ce:a4:63:6f:0f:16:97:e5:01:6d:8a:60:7f:1e:2c:
f5:de:94:3b:28:2b:73:81:3a:b1:dd:cd:d5:76:fa:fb:77:60:
90:29:4d:90:e9:d4:71:a8:ab:39:84:38:65:ea:ce:cd:8b:af:
48:22:d5:bc:98:1b:f5:cf:9a:0b:42:f1:47:cb:a2:80:22:ef:
ff:46:43:52:a2:e8:40:ee:ea:58:85:ab:2e:b9:92:3c:bb:1d:
e0:76:c6:e3:1c:5c:e0:81:6f:ab:95:fd:e5:d1:c2:9d:16:7d:
2b:8f:9e:15:cf:d2:76:7c:2c:81:30:c0:7f:39:9e:f1:be:07:
53:96:ef:fa:7f:10:04:ee:65:ea:ac:cc:7a:d6:f4:30:07:cf:
ea:18:06:3a:bf:af:cb:ea:5c:f4:ba:ff:b9:c9:69:75:5d:11:
30:41:da:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:03 2025 by rpki-client