Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/3gl-l3qU8MpI3MVFIGvCINJyADE.roa
File: 3gl-l3qU8MpI3MVFIGvCINJyADE.roa (raw, json)
Hash identifier: utYF7PoXBqNr3o1w6VDP9HkMKeBzXvpa+DHx3iRNsmk=
Subject key identifier: DE:09:7E:97:7A:94:F0:CA:48:DC:C5:45:20:6B:C2:20:D2:72:00:31
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 0195AEF0783BB6FB40F4E506079143500884
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/3gl-l3qU8MpI3MVFIGvCINJyADE.roa
Signing time: Wed 19 Mar 2025 15:05:49 +0000
ROA not before: Wed 19 Mar 2025 15:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8368
IP address blocks: 95.36.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:f0:78:3b:b6:fb:40:f4:e5:06:07:91:43:50:08:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Mar 19 15:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de097e977a94f0ca48dcc545206bc220d2720031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:f9:4b:6d:f6:f1:42:d8:8a:7c:64:ce:84:
5a:21:07:2b:f4:7e:e6:12:e6:c7:64:a4:26:e5:e6:
db:53:5e:bd:10:b6:b8:65:e5:b5:b4:83:5f:08:53:
57:80:3e:1e:09:07:93:b1:19:dd:b3:30:3e:17:42:
33:df:9b:13:8d:ef:6c:13:91:00:fe:91:12:87:d8:
ce:0c:f5:27:29:89:a0:ae:de:db:30:f7:5c:01:02:
c4:df:a0:a8:da:b4:17:16:c4:80:01:ee:7b:65:db:
95:06:41:f5:73:04:59:04:8f:7d:93:d3:58:d9:fa:
45:f7:6a:db:6c:a5:46:2b:0a:0c:17:8b:f6:c7:78:
af:1b:5d:c2:bf:1c:ee:67:cf:98:66:58:98:85:b5:
74:ff:68:01:0b:4b:34:ba:eb:a1:d3:d8:d3:d2:43:
ca:5f:d4:34:1c:50:ad:25:f5:e3:fb:30:81:dc:89:
21:51:11:79:1a:34:c9:0c:0d:e3:18:66:f8:1a:09:
f2:c0:a6:4e:d6:33:05:0e:2e:c6:83:dc:4b:a5:63:
a3:a4:bb:fc:96:5e:66:37:39:72:79:b2:19:b2:05:
8c:d3:e2:60:30:11:af:c7:17:05:5c:60:8f:40:d1:
22:b2:ff:4d:de:43:1c:31:cd:74:9a:f6:b7:e6:72:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:7E:97:7A:94:F0:CA:48:DC:C5:45:20:6B:C2:20:D2:72:00:31
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/3gl-l3qU8MpI3MVFIGvCINJyADE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.36.80.0/20
Signature Algorithm: sha256WithRSAEncryption
09:57:bb:a9:c5:ae:42:51:2a:67:0e:4b:d0:5e:91:df:f9:c2:
0d:24:fa:c4:36:99:48:0b:3c:a2:a5:25:7d:34:40:73:58:b1:
4e:ed:b9:bc:33:8a:35:cf:71:dc:1c:24:4f:e0:30:5f:fb:2d:
da:89:d3:44:17:4f:63:c1:01:e5:94:42:b2:f3:96:b9:2b:00:
15:3e:69:ef:d6:ff:06:d5:f6:56:16:5a:6a:f2:a2:b1:7e:07:
a6:2c:d2:ac:0a:7f:09:ff:37:91:26:f3:b6:df:79:7f:c2:91:
77:d8:22:16:42:03:97:69:b3:8a:75:5f:33:1d:b6:0e:2b:31:
3e:c5:30:6f:f6:6f:2a:67:9a:0e:14:66:83:7f:42:cc:a5:95:
3d:7a:e3:da:3a:55:13:f1:1d:43:ba:f1:94:3f:6f:22:3f:4e:
8b:57:0f:1d:51:7a:e1:44:1c:cc:95:f4:d3:e9:5f:c8:ea:fa:
b6:c9:48:8c:72:fc:f8:16:64:68:e1:02:b5:1e:2c:90:25:8b:
19:af:ad:c8:da:dc:92:4d:8b:8e:11:00:30:ee:8f:6f:d6:ab:
41:bb:20:02:fc:73:cf:be:b3:1f:84:39:6a:87:be:5f:a5:0e:
4d:b2:c3:d2:22:3e:d8:44:74:1f:f2:42:a6:50:4c:30:39:14:
09:93:3c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:46 2025 by rpki-client