Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa
File: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (raw, json)
Hash identifier: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=
Subject key identifier: DE:91:3B:9E:07:B2:37:51:C7:A6:4D:0A:1E:3E:1F:50:D7:50:BD:43
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 01941F8C3513CE22AC278895CD68E7214E5C
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 193.17.185.0/24 maxlen: 24
193.17.186.0/24 maxlen: 24
195.234.152.0/24 maxlen: 24
2001:67c:1514::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:35:13:ce:22:ac:27:88:95:cd:68:e7:21:4e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de913b9e07b23751c7a64d0a1e3e1f50d750bd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:c1:5f:43:ed:f5:16:52:a6:db:4d:ac:09:
f4:00:33:79:a6:3c:02:3d:1a:59:1f:36:f1:86:40:
df:06:62:0d:f0:88:21:90:66:18:0d:0e:98:37:87:
6c:af:a2:ea:b3:17:32:45:27:e8:e1:0c:87:9c:72:
ac:49:e0:bb:85:42:fd:15:ee:c1:0a:ef:67:c9:89:
cb:a3:dc:8d:6e:1e:f2:2b:23:af:4c:58:a0:b7:e3:
c4:5f:eb:f8:a4:2a:29:e6:06:ac:0f:18:76:b3:59:
10:2e:49:31:2d:19:81:9a:9f:66:2a:69:ea:40:1b:
5c:2e:47:47:44:8d:08:50:b5:fa:e3:a8:b1:ac:26:
30:e6:8a:a1:f5:b5:f5:9e:4d:ef:6a:99:f3:49:c1:
b4:10:ec:94:a3:09:62:a5:a3:1c:2d:d1:85:aa:f4:
14:94:2c:0e:a7:8c:c7:07:f1:dc:cb:17:0e:73:88:
9d:73:f6:83:b9:29:60:ce:05:9e:90:31:13:ea:94:
42:93:67:32:2c:43:a9:f4:9e:57:77:3f:53:15:7c:
d4:7d:0a:91:ea:bc:a9:05:3b:20:f3:50:f6:93:1b:
82:a7:4d:de:92:fb:7f:62:d2:44:3d:c5:ed:6c:ab:
b6:9c:e2:3d:ca:27:e3:f9:f6:b6:64:5a:61:64:21:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:3B:9E:07:B2:37:51:C7:A6:4D:0A:1E:3E:1F:50:D7:50:BD:43
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.185.0-193.17.186.255
195.234.152.0/24
IPv6:
2001:67c:1514::/48
Signature Algorithm: sha256WithRSAEncryption
29:5a:90:6c:a8:36:7a:dc:7d:b9:c6:f1:bf:44:96:77:96:68:
23:63:82:33:62:be:c0:7f:24:01:ed:82:52:98:2b:bb:ba:e1:
ae:84:cb:45:79:39:a7:c1:7c:94:32:e2:a9:a2:f4:3b:11:3a:
c6:22:56:aa:13:09:2f:e0:08:0a:a2:81:65:8a:f3:4d:93:6e:
86:9d:e5:7e:c4:31:04:ac:29:e9:92:e7:78:36:b6:35:47:5b:
9e:f1:6d:6f:47:10:44:70:e4:83:61:ae:85:0b:eb:a8:6a:f6:
70:c5:4e:86:c2:a7:ef:72:c9:98:77:8e:fb:30:34:bd:4d:57:
da:c9:9b:9f:27:6d:b9:16:21:07:08:46:9c:b4:df:13:2b:9a:
a0:96:dc:c9:d1:51:de:3e:84:0e:64:ef:b7:ca:d2:be:fd:18:
41:e1:c5:98:12:08:ae:c8:10:65:32:16:ff:22:66:02:3e:ee:
94:10:53:37:07:dd:6b:8b:e9:7c:88:e7:41:19:95:7a:b2:01:
4a:eb:95:1a:2f:0e:46:47:b8:93:6e:e3:cc:ca:aa:c3:0d:e0:
bd:1b:81:7a:f4:6f:56:f5:f0:e1:62:10:e7:60:a4:46:a5:e5:
1c:9b:76:91:03:67:71:01:03:00:bf:02:48:bd:36:36:78:43:
97:4a:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:30 2025 by rpki-client