Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/3sXbnheUCQXhnB4uHOp4va4TiJM.roa
File: 3sXbnheUCQXhnB4uHOp4va4TiJM.roa (raw, json)
Hash identifier: uyEoZMdeQNWZewaEv7D69o7VgUXJzS6Io688dhhSGjw=
Subject key identifier: DE:C5:DB:9E:17:94:09:05:E1:9C:1E:2E:1C:EA:78:BD:AE:13:88:93
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 019421B1C2A180511DCFCF17819E9FF55F72
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/3sXbnheUCQXhnB4uHOp4va4TiJM.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212301
IP address blocks: 5.252.206.0/24 maxlen: 24
45.67.232.0/24 maxlen: 24
45.67.233.0/24 maxlen: 24
45.67.234.0/24 maxlen: 24
91.230.149.0/24 maxlen: 24
185.130.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c2:a1:80:51:1d:cf:cf:17:81:9e:9f:f5:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dec5db9e17940905e19c1e2e1cea78bdae138893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:49:54:ae:b1:49:4a:d8:71:04:4f:6d:c8:
e7:4d:e3:e3:73:dd:c4:13:5f:da:c2:83:29:02:0e:
60:69:63:82:d2:13:63:ac:18:9c:0b:3f:2d:4d:4f:
5b:bb:04:b4:10:b3:66:3b:74:ab:ca:eb:d3:47:57:
3a:98:80:86:5e:29:51:cc:64:cb:07:a0:01:01:aa:
6b:8d:90:45:50:17:2e:3c:1e:56:74:d4:d6:79:25:
19:f4:58:0b:94:3c:80:14:9f:fa:0d:db:be:4f:5d:
51:22:0b:94:de:7d:e7:f5:0d:eb:e2:8f:92:0e:b0:
d8:57:73:f1:de:ac:d1:5d:49:f1:16:a2:8a:ce:38:
b1:2e:52:f6:87:5b:95:8b:6c:cd:cd:06:11:db:b3:
fa:86:85:e1:db:25:0a:c1:f8:d0:b3:93:ff:36:5a:
52:43:65:13:86:33:10:b2:a0:73:c2:7b:df:a1:da:
94:73:f5:8f:0a:a0:b0:b3:d2:93:97:08:f6:06:42:
d1:20:ea:17:08:78:fb:d2:8d:2b:15:90:3e:c4:87:
9f:2a:19:ba:44:33:3d:5e:00:f0:72:ae:ea:e4:61:
f3:64:9a:5b:04:f6:76:8e:8a:18:93:22:5a:32:05:
6e:e8:0d:69:a1:e6:fc:c0:74:41:4f:ce:8c:51:44:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:DB:9E:17:94:09:05:E1:9C:1E:2E:1C:EA:78:BD:AE:13:88:93
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/3sXbnheUCQXhnB4uHOp4va4TiJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.206.0/24
45.67.232.0-45.67.234.255
91.230.149.0/24
185.130.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1b:a1:5e:84:aa:64:d1:88:6f:b8:2d:b6:e2:db:99:22:3b:
5b:ff:8a:31:60:44:cf:c7:ff:82:d8:e4:25:f3:e5:dd:61:83:
ca:f2:eb:12:9f:09:89:3b:f6:20:3f:cc:7f:b9:e9:3a:f9:8d:
14:24:73:18:b7:00:62:28:e2:1a:4b:60:f4:54:cd:c3:e5:65:
a5:bb:d0:6d:09:f4:82:c7:5b:7f:82:b4:0a:21:1a:cd:cb:3a:
e9:16:85:27:07:b5:ee:f8:46:ce:9d:df:d3:14:f1:c7:5c:9f:
78:6e:78:63:e0:a8:24:47:f4:00:62:61:32:48:df:a1:84:65:
a6:9b:b8:e7:3d:fb:4b:92:00:c2:68:ed:de:a4:d5:4c:3d:e6:
02:50:21:5f:2d:3b:e4:53:a6:20:06:6d:7c:c4:b5:2e:e4:e2:
de:3f:bc:1f:d4:bc:d5:86:b3:dd:49:eb:82:d8:bc:cb:e7:4a:
f7:bb:be:d4:46:b0:a8:2a:02:69:21:00:bf:23:76:6d:12:8e:
fa:53:b8:41:a6:e4:40:0d:98:68:d4:29:e3:dd:b0:6f:a5:13:
8e:91:b1:e8:d4:f6:b4:9a:ca:28:1b:a4:8b:05:ef:fe:f2:6b:
ab:e8:ac:15:20:5d:e8:cf:0f:b8:2b:98:a4:bc:55:2d:d5:96:
5a:5b:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:35 2025 by rpki-client