Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/1-3XflNe0k3QXZPA5cmOmVXUVk4k.roa
File: 1-3XflNe0k3QXZPA5cmOmVXUVk4k.roa (raw, json)
Hash identifier: EOxsCadON2KcZNrQxz29cfWR8eSAuCeFKTgS66ed6p8=
Subject key identifier: FB:75:DF:94:D7:B4:93:74:17:64:F0:39:72:63:A6:55:75:15:93:89
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01961B8DADFC39974DCB698A812AA094F64A
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/1-3XflNe0k3QXZPA5cmOmVXUVk4k.roa
Signing time: Wed 09 Apr 2025 17:16:31 +0000
ROA not before: Wed 09 Apr 2025 17:16:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28944
IP address blocks: 80.231.174.0/24 maxlen: 24
80.231.248.0/24 maxlen: 24
85.187.213.0/24 maxlen: 24
85.187.214.0/24 maxlen: 24
85.187.215.0/24 maxlen: 24
130.250.109.0/24 maxlen: 24
130.250.133.0/24 maxlen: 24
130.250.134.0/24 maxlen: 24
147.185.246.0/23 maxlen: 24
147.185.246.0/24 maxlen: 24
147.185.247.0/24 maxlen: 24
147.185.254.0/23 maxlen: 24
147.185.254.0/24 maxlen: 24
147.185.255.0/24 maxlen: 24
151.237.11.0/24 maxlen: 24
151.237.12.0/24 maxlen: 24
151.237.13.0/24 maxlen: 24
151.237.14.0/24 maxlen: 24
151.237.15.0/24 maxlen: 24
151.237.95.0/24 maxlen: 24
195.219.123.0/24 maxlen: 24
195.234.98.0/24 maxlen: 24
2a01:3e7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:8d:ad:fc:39:97:4d:cb:69:8a:81:2a:a0:94:f6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Apr 9 17:16:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb75df94d7b493741764f0397263a65575159389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:04:71:68:c4:f4:9c:e2:de:99:dc:f0:11:
00:2c:9a:00:6d:3f:01:cb:0a:25:b3:e3:d3:cb:f0:
9a:ab:f4:86:32:3e:04:a8:14:c1:c4:eb:18:57:56:
f4:26:bc:59:47:df:9a:82:b0:36:66:9f:b9:f7:44:
e4:75:4d:a7:3e:46:08:14:a6:5b:47:df:72:f0:af:
52:48:bc:61:16:bc:3c:8f:e8:17:8c:51:d8:b1:5f:
18:7d:23:05:c5:2f:5a:b5:09:8e:30:a4:b4:93:03:
19:1d:b6:62:6d:87:1b:d4:28:80:31:5c:79:31:99:
97:9f:b8:22:40:61:92:7e:f0:1f:56:f2:ba:1c:18:
54:3f:8d:64:04:3e:13:cc:d3:89:cc:ad:0c:37:2a:
64:54:96:02:8d:f8:79:a2:e6:97:71:9f:f6:e7:8b:
0f:28:af:e3:24:05:75:21:c7:96:b9:44:94:9a:e9:
7b:d5:fd:85:00:7a:a9:95:8e:5b:0b:1a:2d:f9:0b:
2f:71:7e:19:9a:1e:b9:5d:51:87:6b:02:52:32:fc:
c2:e1:43:f8:f4:43:14:09:1b:a5:3b:1c:34:12:b2:
4a:43:b3:be:06:6c:55:c9:ee:a1:c3:2f:13:bc:b6:
5e:44:fc:95:4c:a2:b7:b0:24:63:d1:0a:42:7a:5e:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:DF:94:D7:B4:93:74:17:64:F0:39:72:63:A6:55:75:15:93:89
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/1-3XflNe0k3QXZPA5cmOmVXUVk4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.174.0/24
80.231.248.0/24
85.187.213.0-85.187.215.255
130.250.109.0/24
130.250.133.0-130.250.134.255
147.185.246.0/23
147.185.254.0/23
151.237.11.0-151.237.15.255
151.237.95.0/24
195.219.123.0/24
195.234.98.0/24
IPv6:
2a01:3e7::/32
Signature Algorithm: sha256WithRSAEncryption
d2:eb:56:0e:69:18:45:f4:79:c6:2a:b8:6e:f0:45:94:41:db:
9b:0a:0e:62:e6:7d:7e:c8:a0:35:09:09:20:b0:76:a8:0a:8f:
eb:13:80:a8:c6:87:88:0a:d1:9c:bf:80:28:62:c7:6c:f5:da:
c3:29:75:76:ea:77:fd:cb:fa:54:38:2c:83:dc:54:c2:b0:bb:
38:08:1d:c2:52:fc:d9:f3:65:e1:21:ca:fc:8d:da:57:71:be:
10:ec:04:a5:71:b0:45:02:b6:d6:42:b8:34:d3:6a:2f:2e:5e:
8e:48:3d:23:78:f5:f6:d6:b7:48:0b:5e:17:de:f3:12:b3:08:
3f:73:d3:94:b7:98:a9:27:79:27:ef:25:2e:92:b6:4e:a9:0c:
d7:39:82:5f:41:6c:8d:35:7a:9d:eb:8e:5d:6b:9a:43:c9:4e:
35:58:36:0a:25:89:42:17:94:2b:bf:31:b7:4c:74:15:61:f7:
f5:fb:89:5e:28:da:3a:b7:99:14:c0:f7:33:ad:1b:93:ad:8b:
88:25:97:70:d6:be:cb:e2:94:06:89:3a:67:3b:fe:46:00:d5:
3c:e8:b9:87:b1:9d:9d:53:e3:96:87:89:c4:0c:23:c7:9f:77:
f0:8e:4b:53:25:35:b7:a7:58:4d:47:60:b9:fa:cf:49:3f:9b:
0f:bd:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:31 2025 by rpki-client