Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/f3bddzjzl2OW_STgzFCbigwsw8k.roa
File: f3bddzjzl2OW_STgzFCbigwsw8k.roa (raw, json)
Hash identifier: T+BY8qIofug0gv/898Y7gZSrRS2FO7bbqLBdCP+UYYA=
Subject key identifier: 7F:76:DD:77:38:F3:97:63:96:FD:24:E0:CC:50:9B:8A:0C:2C:C3:C9
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C220B63F99A7739A5C45932852232
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/f3bddzjzl2OW_STgzFCbigwsw8k.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 62.122.188.0/24 maxlen: 24
77.246.240.0/24 maxlen: 24
84.246.111.0/24 maxlen: 24
91.247.178.0/24 maxlen: 24
178.23.188.0/24 maxlen: 24
213.232.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:22:0b:63:f9:9a:77:39:a5:c4:59:32:85:22:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f76dd7738f3976396fd24e0cc509b8a0c2cc3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:34:fe:11:b3:41:b7:24:68:89:34:09:98:
5c:27:b8:c3:9d:b6:a7:cc:67:1e:f0:9a:0e:81:00:
69:6f:90:da:44:59:1e:84:5e:cf:de:3e:85:c2:61:
79:c4:dc:e7:17:9c:d7:de:d2:bf:6f:69:f6:fb:df:
aa:57:a5:bf:bc:1a:98:6e:c8:d8:19:48:de:14:71:
c5:94:3d:b3:5e:a5:d6:54:72:90:70:88:e8:43:fd:
d1:ac:d1:18:5e:48:59:9c:d2:76:f2:12:a7:73:25:
36:7e:45:e3:2c:28:60:8a:a7:c2:2b:e2:b2:5c:20:
3c:f7:34:2e:d5:10:d7:e1:45:b2:5a:ed:20:6e:0a:
db:86:cb:47:b4:8e:ed:ee:43:b1:3f:11:9b:d8:11:
e5:ee:63:1c:b0:83:af:d6:03:1d:5f:fe:fc:0f:94:
92:76:fe:c3:86:a4:10:66:7d:61:80:ef:2c:44:46:
63:08:a1:d3:bc:73:ea:1f:28:f4:10:3e:50:da:db:
5d:fe:49:68:09:47:14:1d:f4:97:f4:15:6a:5c:3e:
59:55:9c:86:21:de:46:a8:a4:49:a0:09:10:62:87:
25:95:37:20:22:16:07:f7:2c:92:32:8d:e8:06:ac:
44:f4:5b:70:de:61:16:aa:41:ae:99:f9:bc:3e:77:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:DD:77:38:F3:97:63:96:FD:24:E0:CC:50:9B:8A:0C:2C:C3:C9
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/f3bddzjzl2OW_STgzFCbigwsw8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
77.246.240.0/24
84.246.111.0/24
91.247.178.0/24
178.23.188.0/24
213.232.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:88:10:69:7a:54:a9:c3:8f:69:85:11:cc:e0:b7:a8:a6:18:
9a:28:db:c8:f2:f5:0b:31:2e:7e:9f:48:a8:4a:b3:65:76:84:
6d:40:83:75:67:a4:2b:cd:33:88:a8:39:25:ea:aa:4d:a7:4d:
3e:c6:cb:67:dd:46:fa:75:6c:20:32:59:b5:cc:bf:41:77:15:
bc:1d:52:b7:bf:b1:53:af:13:85:bb:00:69:d2:49:e0:e9:88:
0b:9c:82:e6:c6:09:28:45:33:65:37:05:df:07:72:95:94:45:
ed:66:05:84:de:bf:7c:92:f4:68:6b:c5:38:10:5e:98:5a:37:
6c:c9:ff:83:a6:32:2a:18:92:6c:77:7d:78:1f:71:1d:2c:ef:
4f:d8:45:7a:b1:bf:07:06:b4:7b:45:87:af:09:47:12:cb:b3:
66:6e:d3:7b:c8:b6:c2:9a:cf:c4:4f:53:19:6d:7f:de:42:24:
6b:d9:84:9a:7b:95:98:27:ea:d0:80:81:00:29:ed:e9:da:3e:
c8:79:a8:16:82:5e:6e:2d:a2:58:88:81:7b:4d:4e:a4:de:b4:
bf:8c:14:dc:1a:70:9c:b1:e2:fa:13:e8:40:7f:c0:0d:3f:31:
91:ac:34:1f:34:df:21:ef:3c:a8:e4:01:6c:b2:26:17:75:97:
55:62:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:34 2025 by rpki-client