Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/3kN5HczaKLC1vDzc4T6OQ767Uq0.roa
File: 3kN5HczaKLC1vDzc4T6OQ767Uq0.roa (raw, json)
Hash identifier: ZGwS+xHk4JSopWZ3QlH5/tdsWooS6ScieKAhsK9alu4=
Subject key identifier: DE:43:79:1D:CC:DA:28:B0:B5:BC:3C:DC:E1:3E:8E:43:BE:BB:52:AD
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 0194236A0B1545FBEB0BB8BB046300A141BD
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/3kN5HczaKLC1vDzc4T6OQ767Uq0.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12676
IP address blocks: 88.205.0.0/20 maxlen: 21
88.205.96.0/19 maxlen: 24
185.90.228.0/22 maxlen: 22
212.46.96.0/19 maxlen: 24
213.9.0.0/17 maxlen: 17
2a02:4c00::/40 maxlen: 40
2a02:4c00:100::/40 maxlen: 40
2a02:4c07:4000::/34 maxlen: 34
2a02:4c07:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0b:15:45:fb:eb:0b:b8:bb:04:63:00:a1:41:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de43791dccda28b0b5bc3cdce13e8e43bebb52ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:66:40:4b:c5:67:06:32:4d:9d:e6:9a:f6:
f7:b7:51:dc:6a:92:63:7d:ad:7e:33:da:f2:f1:5c:
a1:ca:05:0b:b8:fe:15:42:56:54:29:ed:b7:cf:ff:
83:54:e5:6a:b1:83:c0:17:06:be:c2:1d:98:82:ab:
e1:e4:ee:40:22:14:fd:d6:a7:ec:a1:95:ab:75:7f:
e1:ee:1c:ed:c4:4a:aa:16:56:fc:68:80:05:0c:b4:
44:31:a8:75:42:f8:24:3d:12:c2:71:ac:17:4a:d8:
78:b6:3a:f6:71:52:64:97:07:12:69:57:d5:8b:96:
e5:23:e5:83:15:67:4e:d9:04:c7:eb:1e:63:23:b3:
77:98:35:36:a5:c4:56:47:95:f7:a3:ec:39:01:db:
e6:7a:86:b9:be:3b:00:6d:2c:d2:57:df:23:33:70:
9d:c0:69:a2:18:ed:e0:ed:89:1f:d4:8d:b5:06:cc:
eb:f3:ee:ef:63:7c:d3:34:26:1d:cd:76:ee:9e:c5:
a2:54:c5:00:98:6e:6a:b6:82:25:5a:a8:0b:47:87:
e7:40:39:2b:96:95:33:da:97:0b:b5:0f:6e:cf:b3:
69:6a:e9:18:cd:b0:ab:a1:f3:d0:06:e5:3f:d2:93:
e2:2b:6e:b4:14:67:f0:de:36:0b:8b:9b:d0:cd:6b:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:43:79:1D:CC:DA:28:B0:B5:BC:3C:DC:E1:3E:8E:43:BE:BB:52:AD
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/3kN5HczaKLC1vDzc4T6OQ767Uq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.0.0/20
88.205.96.0/19
185.90.228.0/22
212.46.96.0/19
213.9.0.0/17
IPv6:
2a02:4c00::/39
2a02:4c07:4000::-2a02:4c07:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:f0:ea:d2:79:cf:c2:fa:91:8d:53:42:dd:d4:28:83:12:22:
25:48:f1:86:4c:77:c8:19:4b:9b:99:1b:7b:73:a6:cd:9c:42:
67:3d:e0:00:b4:ac:16:d3:49:f8:d9:4c:a3:47:59:e4:2f:f5:
97:27:2b:38:7b:82:9b:86:62:4a:b4:ad:bf:f7:b2:c2:e3:6b:
cb:7e:ad:d9:c6:ed:d9:fb:d1:22:15:8c:cc:19:5e:14:a6:37:
3f:dd:55:a9:34:0e:42:d2:5b:1f:1f:44:d7:3a:c5:db:3c:23:
88:93:2c:0a:db:aa:e4:6a:8a:00:3e:e2:b7:d6:cb:f9:37:b2:
4f:cd:40:40:27:4c:e2:5c:00:d8:fa:18:21:c0:37:f4:0e:ad:
cd:0e:3d:0f:01:9f:a3:fc:b4:ca:8b:67:88:b1:ac:50:1a:06:
57:93:7a:84:d8:27:fd:d8:5f:ed:39:e4:88:93:d5:90:95:04:
ac:0e:4c:0c:02:74:6f:f4:03:93:5c:c8:9c:79:6d:3e:eb:32:
f7:1c:38:94:d5:8a:d9:d4:1a:d0:45:6c:92:39:a7:b4:a1:16:
18:0a:6b:c2:b1:ec:58:ad:b6:c5:d9:4b:56:c3:ca:3f:54:9c:
e8:71:24:f2:42:25:4b:e2:af:d7:97:aa:55:87:e0:85:99:91:
b1:4c:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:36:15 2025 by rpki-client