Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa
File: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (raw, json)
Hash identifier: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=
Subject key identifier: AF:72:39:3B:0E:AE:F5:3C:78:20:F1:DB:90:CB:7A:9D:61:95:DC:3D
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 019422FC3A516BB6A85BEDA11F49F39A698E
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209257
IP address blocks: 185.186.221.0/24 maxlen: 24
185.186.222.0/24 maxlen: 24
2a11:1e40:ba5e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3a:51:6b:b6:a8:5b:ed:a1:1f:49:f3:9a:69:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af72393b0eaef53c7820f1db90cb7a9d6195dc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:78:3b:e9:e0:fd:cb:8d:8f:58:25:5d:92:
4d:0e:25:1b:fb:98:a9:45:00:ae:e3:9d:d8:db:71:
30:56:47:b7:99:39:b9:9f:86:2f:36:d3:c8:60:cf:
cf:ac:33:68:d2:bc:df:c6:49:f3:58:4a:be:38:98:
e4:75:7a:44:c8:92:24:9b:a1:1e:24:f0:13:b3:52:
49:17:4e:61:e4:89:1b:17:4b:6a:e0:0c:93:c9:24:
f1:25:46:ad:d5:3f:69:ff:e9:9f:96:da:72:9f:2f:
4c:86:b4:61:3a:f5:bd:83:dd:64:e4:91:88:08:dd:
4e:f0:8c:5c:e3:0d:2e:6a:77:39:bb:15:95:e5:3a:
0a:8e:17:22:71:f8:23:4e:39:fc:76:40:60:e2:69:
e2:5c:dc:85:f2:c8:db:59:30:f9:03:09:f7:8e:04:
da:1d:03:9d:35:40:c4:ea:78:00:db:b3:04:9f:90:
11:44:86:ee:4b:7d:38:8c:a1:e9:63:c9:f3:d5:4d:
16:25:c5:e5:56:b0:ec:d8:15:8a:04:9e:23:15:06:
9b:6b:bb:6d:4e:78:e8:68:f0:4e:0d:bf:b1:07:88:
f9:ad:de:a3:f4:76:2d:fc:a0:77:b7:a8:33:f5:e8:
06:46:97:c7:82:fb:2c:74:43:6d:19:a0:1b:57:b2:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:72:39:3B:0E:AE:F5:3C:78:20:F1:DB:90:CB:7A:9D:61:95:DC:3D
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.221.0-185.186.222.255
IPv6:
2a11:1e40:ba5e::/48
Signature Algorithm: sha256WithRSAEncryption
6c:2a:cf:d0:ad:92:b9:8f:e5:75:42:f0:ab:8e:76:31:b0:03:
6f:85:1f:f5:9f:4b:23:6f:4c:c0:ee:40:8f:83:9d:f6:92:6d:
d8:94:a5:f3:60:36:21:14:3d:7d:fa:11:04:1f:43:cc:90:35:
0b:e3:6f:49:5e:75:e8:64:14:16:bb:58:ff:7b:15:6d:ce:f3:
d9:c4:98:bc:4b:50:04:96:97:f4:3f:1d:12:65:16:73:83:84:
4f:01:c6:e9:95:3a:6f:7e:5d:36:28:e4:88:df:3b:0c:e3:eb:
60:75:24:f1:bb:1a:78:ba:54:ad:e9:61:20:4e:1f:bc:29:41:
aa:2d:80:f3:f1:91:e2:8c:71:73:13:4a:60:e3:38:5a:51:a9:
bf:63:0c:dc:d6:4f:89:47:46:16:b0:57:87:87:a8:6b:77:0f:
50:7c:9d:f3:97:b1:b2:93:54:2b:c0:64:37:86:8a:36:e7:34:
47:24:36:0e:a6:6d:30:33:34:de:27:bd:5b:36:1b:04:a3:4f:
12:43:6b:45:c0:c2:06:74:1d:4c:12:a4:47:a6:fd:be:c8:09:
e1:cf:8c:00:28:77:ea:0a:2a:37:d4:fb:da:d9:0a:44:a8:e8:
5e:e7:a5:c1:db:8e:aa:f6:e1:50:78:6c:51:c4:cb:fd:76:e5:
15:48:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:42 2025 by rpki-client