Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa
File: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (raw, json)
Hash identifier: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=
Subject key identifier: D2:12:B7:C0:14:B1:5A:BC:C2:2B:D5:D5:44:28:EA:02:4E:E2:47:71
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 0194258FBF46696718C9A1E188838BBEC0B3
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203329
IP address blocks: 149.233.0.0/19 maxlen: 24
185.138.140.0/22 maxlen: 24
2a07:e80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bf:46:69:67:18:c9:a1:e1:88:83:8b:be:c0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d212b7c014b15abcc22bd5d54428ea024ee24771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:d3:cf:ef:5f:e1:e4:d9:d1:7a:c7:ab:e1:
ab:af:d0:91:73:ca:0f:1a:e5:0e:8f:74:ae:35:8b:
67:43:64:26:70:fd:1a:e5:3a:49:ab:aa:87:b5:29:
18:d2:75:5b:66:56:38:f4:91:5f:73:81:31:3e:64:
66:92:f3:fe:36:28:e7:bd:57:82:35:1f:c0:4e:bd:
de:6e:de:17:a3:5d:cc:f6:12:9b:47:75:03:cd:0d:
e8:6e:ed:6d:9a:63:50:37:70:f0:ef:d0:f8:32:58:
29:0b:52:cd:a5:48:5d:3f:32:f4:47:25:6f:0a:f9:
44:21:68:76:4e:c5:2a:00:98:2f:66:0b:f3:31:e9:
0b:67:53:b7:d0:c6:34:d9:4d:8f:d9:06:f8:19:bf:
c6:e6:d4:84:d5:f0:59:d7:eb:b0:90:fe:f8:d5:b2:
7f:a6:5c:81:9a:b0:c4:89:94:8e:6d:35:1b:4b:d8:
1f:a4:5e:1b:37:7c:81:8d:83:e2:48:a1:93:0c:12:
43:42:48:5a:fc:99:b5:a9:28:86:83:be:88:67:3e:
dd:58:38:a8:51:f3:1d:a2:79:91:16:d8:cd:57:3f:
e3:db:af:6a:f5:17:fc:55:99:fd:b4:76:48:f5:2a:
52:58:2f:d2:69:00:a5:ee:14:6e:fb:e2:bd:5f:5c:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:B7:C0:14:B1:5A:BC:C2:2B:D5:D5:44:28:EA:02:4E:E2:47:71
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.233.0.0/19
185.138.140.0/22
IPv6:
2a07:e80::/29
Signature Algorithm: sha256WithRSAEncryption
74:82:33:7c:6d:65:cb:e4:86:fa:30:92:58:21:6b:d9:e1:91:
19:48:cd:08:10:c8:a0:ca:a9:c9:f3:2b:ed:eb:0a:8a:42:94:
7f:a5:d6:8a:eb:07:5f:11:db:d3:06:29:57:5f:cd:1c:da:41:
2c:42:fd:10:7d:c8:dd:50:29:54:03:22:7a:c7:3c:65:b6:ad:
ac:fe:8c:24:03:a0:49:72:0a:71:cc:6a:cc:09:b3:5e:40:ca:
d7:35:2f:fb:59:b2:55:84:91:d4:ab:c2:f3:9c:20:bb:fe:64:
7a:93:af:6a:b2:cd:c6:fd:5a:ff:19:f9:77:3c:c5:35:fe:5a:
9e:bf:1e:88:c1:dc:73:95:ad:ff:30:cd:b4:b9:dd:fd:a4:23:
1a:2c:20:d4:35:db:79:7d:45:df:01:cb:76:e3:65:9c:a5:ca:
39:5c:db:c3:44:9e:bb:13:4e:cc:e8:fc:a5:5e:ce:41:4a:b9:
e9:9e:06:80:6e:c0:82:3d:46:32:5b:a3:66:1d:10:d4:ec:f3:
17:67:54:40:ed:fb:67:47:77:17:89:4b:d6:d6:5c:25:c8:ee:
b0:f8:e2:44:72:02:87:b2:77:20:9f:e1:11:ad:68:bf:1c:4e:
f9:c0:1f:9c:c7:ab:9d:ef:b9:54:2c:cc:34:61:d4:5e:78:ab:
55:2e:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:08:07 2025 by rpki-client