Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pT_ZWeWrDBZXlJT59YfSXenr7UY.roa
File: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (raw, json)
Hash identifier: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=
Subject key identifier: A5:3F:D9:59:E5:AB:0C:16:57:94:94:F9:F5:87:D2:5D:E9:EB:ED:46
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01948E4187F5B8D1A94FB1088CB180AD90ED
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pT_ZWeWrDBZXlJT59YfSXenr7UY.roa
Signing time: Wed 22 Jan 2025 13:44:06 +0000
ROA not before: Wed 22 Jan 2025 13:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210878
IP address blocks: 31.135.3.0/24 maxlen: 24
64.43.76.0/24 maxlen: 24
77.36.59.0/24 maxlen: 24
91.235.166.0/24 maxlen: 24
91.237.195.0/24 maxlen: 24
91.246.201.0/24 maxlen: 24
109.207.131.0/24 maxlen: 24
193.36.202.0/24 maxlen: 24
193.221.82.0/24 maxlen: 24
195.80.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:41:87:f5:b8:d1:a9:4f:b1:08:8c:b1:80:ad:90:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 22 13:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a53fd959e5ab0c16579494f9f587d25de9ebed46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:80:c9:d7:79:44:a3:f5:58:fd:3e:6f:d3:
18:40:89:a0:a5:3f:eb:19:a1:cf:76:ac:58:a2:c2:
11:3b:84:70:16:55:5b:38:db:7f:74:44:84:7a:8f:
b7:32:d7:ae:ae:e6:30:f8:d1:2d:b7:dc:36:d1:5f:
cd:e8:12:cc:dc:e1:5e:72:9d:6d:28:b0:1b:14:eb:
6b:52:e5:d0:0b:c9:eb:99:96:1e:11:4f:ea:6c:b5:
b1:b9:3f:08:1c:d3:d0:16:20:41:0d:80:7d:c8:e1:
7b:83:f2:8a:ca:a5:1e:5c:66:5f:d9:eb:d9:d0:45:
6c:92:1e:95:9a:2c:11:c2:87:60:7e:d2:70:30:05:
f9:3c:ed:c8:ec:75:06:03:c5:b6:93:0f:ca:19:1b:
89:6e:4a:19:bc:4f:50:de:ab:1f:4a:c0:dc:93:78:
2d:c4:8d:ef:85:58:eb:27:8b:35:57:f2:b4:95:26:
ab:1d:ec:f0:1f:c5:03:a8:c3:6f:29:f2:b6:fe:6f:
90:ec:4f:ef:70:d8:69:3f:7a:49:20:f2:e4:d1:09:
ee:13:33:f7:81:7f:ea:e2:6f:49:ac:16:b5:95:b0:
35:c8:e5:d3:dc:ae:b3:d8:cd:fe:02:44:65:b0:3f:
3a:44:8d:56:c4:da:c5:51:f9:a3:75:ad:17:81:8f:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:D9:59:E5:AB:0C:16:57:94:94:F9:F5:87:D2:5D:E9:EB:ED:46
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pT_ZWeWrDBZXlJT59YfSXenr7UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.3.0/24
64.43.76.0/24
77.36.59.0/24
91.235.166.0/24
91.237.195.0/24
91.246.201.0/24
109.207.131.0/24
193.36.202.0/24
193.221.82.0/24
195.80.142.0/24
Signature Algorithm: sha256WithRSAEncryption
26:10:5d:26:b2:c8:d2:4e:8e:cb:d7:cc:e6:a8:24:85:cc:85:
e9:8b:81:52:5f:04:3d:76:88:2f:9a:bc:93:ba:3a:50:c5:68:
7f:81:0e:c3:00:aa:25:45:3b:b6:12:b8:81:05:d4:b8:c0:ed:
1a:65:ec:5e:f4:fd:c8:5c:84:53:e7:75:40:9d:9f:94:8c:77:
89:30:6e:e1:8b:d3:ec:96:ba:b1:9f:00:35:10:a7:63:d3:65:
5e:5f:b6:82:33:8e:a7:7a:f6:a4:11:79:32:b1:99:a9:d4:c3:
96:1a:17:4d:74:ee:30:17:87:87:5f:66:ec:e4:a0:56:c9:d6:
89:64:4c:0f:c0:32:1c:d1:cb:0b:e5:66:a0:47:6b:35:e1:a7:
6a:74:f5:4a:fc:98:47:1f:52:2e:9e:1c:43:ad:46:0a:e4:d8:
f1:19:bb:04:4f:d0:3c:67:da:b1:8f:94:48:26:c4:5f:a2:ec:
ed:b7:3a:f0:2a:18:36:45:1c:17:bb:54:58:5c:a6:cf:43:36:
4e:ad:f5:52:71:3e:00:48:3e:e7:23:db:be:3a:05:a3:64:60:
c2:e0:00:a2:11:b1:62:67:01:f1:d7:e3:a8:db:94:d3:7f:8c:
e6:11:c4:82:49:7a:ec:4f:ae:5b:c5:33:a9:69:4f:c4:22:ef:
7c:7c:c0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:53 2025 by rpki-client