Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa
File: 3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa (raw, json)
Hash identifier: HJZxVsPJLjA3XvzP/RTBRhqyf06FeLW1mBD5DxrU/Io=
Subject key identifier: DE:EE:59:6A:13:B2:06:15:0D:1B:AB:C3:67:88:51:18:2A:F1:E4:01
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 01941FFA1E76200A131406146B5259892003
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 37.99.128.0/18 maxlen: 24
46.184.0.0/17 maxlen: 24
94.77.192.0/18 maxlen: 24
185.139.120.0/22 maxlen: 24
188.248.0.0/15 maxlen: 24
2a02:888::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1e:76:20:0a:13:14:06:14:6b:52:59:89:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deee596a13b206150d1babc3678851182af1e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:5a:d4:62:4f:32:fa:92:ec:a6:fe:1a:ab:
e4:c2:b7:8d:79:bc:df:29:cc:a1:3e:42:41:8e:8e:
6a:fe:b3:5d:fb:93:ef:75:c4:dc:0a:de:19:bc:24:
8b:4d:08:ef:63:7c:f2:f9:18:ac:96:47:60:9f:13:
42:8b:41:23:84:7a:5c:d6:22:18:5c:d1:0a:6f:05:
2c:ad:c8:c4:58:6d:d9:78:ab:ca:85:c6:98:d4:24:
20:86:5b:ca:b6:98:2f:ee:f6:72:69:e8:29:cd:6f:
7c:a5:3e:c5:8e:7f:e2:29:4f:1d:ec:34:33:8f:e1:
e4:1c:a7:af:ac:05:f1:51:d4:e1:91:e7:63:10:b1:
8b:0a:f5:9c:db:8a:25:e6:f6:56:59:7c:b9:c7:d7:
e2:0f:53:2e:56:76:c4:bf:7a:5b:db:19:27:56:5b:
91:be:12:1d:4b:e5:84:15:3e:3d:b1:3e:e8:bb:79:
48:a6:6f:31:38:93:65:da:a8:b2:ba:1f:2a:50:79:
07:3b:58:16:97:7a:f6:d8:56:a2:c6:fa:6e:49:50:
2e:c8:63:b1:ce:50:fe:10:3a:b7:f7:01:18:8e:13:
79:15:4e:ce:1e:28:b5:18:d6:38:84:9e:56:ef:2e:
b5:69:02:e6:df:88:a5:6d:fc:2b:c1:22:cf:cc:7b:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:59:6A:13:B2:06:15:0D:1B:AB:C3:67:88:51:18:2A:F1:E4:01
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.128.0/18
46.184.0.0/17
94.77.192.0/18
185.139.120.0/22
188.248.0.0/15
IPv6:
2a02:888::/29
Signature Algorithm: sha256WithRSAEncryption
35:4b:ae:a7:47:6d:5c:93:0f:28:2c:3f:90:ea:30:f4:5a:31:
ff:50:72:b6:d7:9a:4c:32:9f:80:56:b5:1c:3b:42:3e:0d:3e:
d1:60:3b:68:0d:c9:10:60:17:94:fe:a7:7e:be:21:fb:8f:c2:
b3:5c:b6:6d:45:83:90:18:8e:7a:29:0a:5d:0b:ec:44:4e:c2:
59:08:43:a4:6b:54:1a:f3:fc:5c:11:0f:26:10:07:49:3e:43:
dd:7d:31:81:f2:44:34:a2:01:25:07:77:2c:0e:69:01:72:df:
36:92:97:01:84:21:37:1d:85:7e:8b:4c:7a:4e:7a:70:aa:ae:
c6:05:14:6b:e5:ca:29:b8:fe:db:8c:f0:34:83:7e:13:19:4c:
7f:6e:3b:1c:4e:a1:70:58:cd:8a:75:72:c9:11:c1:29:06:35:
e8:ba:b9:fc:e0:63:a6:25:fb:0d:72:d5:fe:07:0b:00:8d:67:
93:af:a9:7f:b2:58:78:75:1b:2f:db:7e:28:b4:ce:b6:0f:e6:
2e:92:40:a9:1d:26:ac:7f:79:83:81:b1:c4:a7:9a:e0:8b:37:
fd:07:cc:ea:9b:fa:1a:4b:43:df:c4:07:4f:5a:9e:2c:fa:73:
af:5e:aa:2a:f8:ed:ed:7c:c4:a0:98:ac:0a:02:ea:d2:fc:41:
c0:e2:79:43
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQf+h52IAoTFAYUa1JZiSADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzIxOTIyMWNjMGEyMTMyNmNlMDA2YzQyODI1YmFjMmJl
MzFlMTcwHhcNMjUwMTAxMDM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWVlNTk2YTEzYjIwNjE1MGQxYmFiYzM2Nzg4NTExODJhZjFlNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pFa1GJPMvqS7Kb+GqvkwreNebzf
KcyhPkJBjo5q/rNd+5PvdcTcCt4ZvCSLTQjvY3zy+RislkdgnxNCi0EjhHpc1iIY
XNEKbwUsrcjEWG3ZeKvKhcaY1CQghlvKtpgv7vZyaegpzW98pT7Fjn/iKU8d7DQz
j+HkHKevrAXxUdThkedjELGLCvWc24ol5vZWWXy5x9fiD1MuVnbEv3pb2xknVluR
vhIdS+WEFT49sT7ou3lIpm8xOJNl2qiyuh8qUHkHO1gWl3r22FaixvpuSVAuyGOx
zlD+EDq39wEYjhN5FU7OHii1GNY4hJ5W7y61aQLm34ilbfwrwSLPzHvofwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFN7uWWoTsgYVDRurw2eIURgq8eQBMB8GA1UdIwQY
MBaAFPEyGSIcwKITJs4AbEKCW6wr4x4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMt
NDVlNjk2YTVhZTQ1LzEvM3U1WmFoT3lCaFVORzZ2RFo0aFJHQ3J4NUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMtNDVlNjk2YTVhZTQ1
LzEvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwQGJWOAAwQH
LrgAAwQGXk3AAwQCuYt4AwMBvPgwDQQCAAIwBwMFAyoCCIgwDQYJKoZIhvcNAQEL
BQADggEBADVLrqdHbVyTDygsP5DqMPRaMf9QcrbXmkwyn4BWtRw7Qj4NPtFgO2gN
yRBgF5T+p36+IfuPwrNctm1Fg5AYjnopCl0L7EROwlkIQ6RrVBrz/FwRDyYQB0k+
Q919MYHyRDSiASUHdywOaQFy3zaSlwGEITcdhX6LTHpOenCqrsYFFGvlyim4/tuM
8DSDfhMZTH9uOxxOoXBYzYp1cskRwSkGNei6ufzgY6Yl+w1y1f4HCwCNZ5OvqX+y
WHh1Gy/bfii0zrYP5i6SQKkdJqx/eYOBscSnmuCLN/0HzOqb+hpLQ9/EB09aniz6
c69eqir47e18xKCYrAoC6tL8QcDieUM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:52:08 2025 by rpki-client