Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3r-AiriI5Nt1sTqaZf0gFnxlu6Y.roa
File: 3r-AiriI5Nt1sTqaZf0gFnxlu6Y.roa (raw, json)
Hash identifier: hl18HhpznKiArQIS814Lo0XD8S2L1lC7HgHfb4QaZB4=
Subject key identifier: DE:BF:80:8A:B8:88:E4:DB:75:B1:3A:9A:65:FD:20:16:7C:65:BB:A6
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D2A459190236398E94298AB6B644
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3r-AiriI5Nt1sTqaZf0gFnxlu6Y.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43357
IP address blocks: 194.50.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d2:a4:59:19:02:36:39:8e:94:29:8a:b6:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=debf808ab888e4db75b13a9a65fd20167c65bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:98:c3:59:f4:68:39:52:b2:24:97:a1:e3:
b0:42:ef:df:fc:1c:23:72:8d:62:03:37:6e:c6:1b:
ff:9b:cd:94:cc:cb:5b:27:cd:f4:6b:ed:3e:31:8e:
e6:db:0e:8b:c3:6d:2e:c5:48:2b:55:e2:ef:99:31:
e1:8c:71:65:1d:75:0a:69:07:37:ca:cb:92:ff:ec:
f5:99:c2:2b:a0:e7:a5:66:8d:5e:1b:5d:3e:f3:7c:
7a:51:30:9c:85:6f:4a:a1:dc:21:02:50:32:32:69:
b0:55:20:6f:41:a6:17:fa:73:da:7a:90:4c:d5:a3:
f6:17:4b:86:c5:f3:89:e4:24:39:97:4e:70:9e:c3:
1d:0f:23:50:55:0d:f1:d1:2d:8e:7f:5c:26:8d:92:
7a:35:18:91:c6:32:3b:10:4f:fd:ae:7f:e7:a8:62:
b4:a0:b6:54:a0:a1:7d:f7:35:b2:bb:c5:ec:8f:9c:
f7:4c:29:cb:31:af:2f:01:45:0a:7c:10:25:e1:2b:
b3:27:88:49:57:be:a8:b5:24:ad:75:6a:0b:d5:20:
e3:c9:d5:4f:70:83:fa:8a:2f:a4:7a:c0:c8:c1:cb:
b8:a7:b5:b1:3d:2f:f9:44:be:6d:3c:e0:d6:a7:60:
93:77:97:5c:48:98:28:9a:25:99:96:21:ac:32:68:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:80:8A:B8:88:E4:DB:75:B1:3A:9A:65:FD:20:16:7C:65:BB:A6
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3r-AiriI5Nt1sTqaZf0gFnxlu6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:47:76:37:be:58:3c:b2:12:9a:1a:9e:22:0c:09:c8:e9:fd:
5c:d3:16:cc:0e:12:56:cd:07:6d:b6:b6:48:84:25:5d:d4:81:
ea:3f:b5:11:a9:fe:9f:9a:c8:ed:62:fe:d4:6f:ea:50:66:fd:
f3:3e:1e:c2:75:0e:87:39:3d:10:f7:37:3b:1f:05:d1:e3:77:
4e:22:20:e1:b3:1f:e1:de:ac:5a:43:bb:d2:55:02:b4:b0:68:
1b:70:4e:80:a9:63:1e:08:62:e8:3a:c1:0e:0f:f3:cf:92:2e:
a1:7b:09:c8:c0:fe:a6:5f:5f:d5:28:b4:62:68:10:48:06:11:
dd:35:68:0c:5d:9a:e5:d3:98:61:f4:b2:62:62:36:be:4f:fc:
45:c5:4d:6b:e5:96:69:c6:62:63:a2:db:9f:23:61:8c:53:58:
d8:ec:44:1f:a0:89:bb:af:55:6a:00:0a:a5:b7:16:7b:fd:73:
e7:c0:7f:88:35:1a:d7:0d:1b:46:c2:d0:96:b6:6d:78:cb:a1:
50:5e:7a:17:14:a2:68:81:3b:05:ee:6a:83:b1:0d:cd:f9:9d:
64:95:da:4e:bd:d4:a3:6d:dc:89:fb:ad:6c:d5:1d:a3:ed:ff:
46:da:e5:bd:24:70:82:fa:7b:db:49:f7:cc:1e:5d:7a:c2:de:
b2:41:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:41 2025 by rpki-client