Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/3R2oLYAWIxvU3vOCY9T-jGflBdY.roa
File: 3R2oLYAWIxvU3vOCY9T-jGflBdY.roa (raw, json)
Hash identifier: 2FML5v0SfL1lum2iuE3qWeIT2u7iaV71VaL91S9NgIQ=
Subject key identifier: DD:1D:A8:2D:80:16:23:1B:D4:DE:F3:82:63:D4:FE:8C:67:E5:05:D6
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0195D2E26FAB466DB86EBE2834E492437CAB
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/3R2oLYAWIxvU3vOCY9T-jGflBdY.roa
Signing time: Wed 26 Mar 2025 14:36:49 +0000
ROA not before: Wed 26 Mar 2025 14:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 92.61.64.0/24 maxlen: 24
92.61.65.0/24 maxlen: 24
109.172.16.0/24 maxlen: 24
109.172.17.0/24 maxlen: 24
109.172.18.0/24 maxlen: 24
109.172.19.0/24 maxlen: 24
109.172.20.0/24 maxlen: 24
109.172.21.0/24 maxlen: 24
109.172.22.0/24 maxlen: 24
109.172.23.0/24 maxlen: 24
109.172.96.0/24 maxlen: 24
109.172.97.0/24 maxlen: 24
109.172.98.0/24 maxlen: 24
109.172.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 13:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:e2:6f:ab:46:6d:b8:6e:be:28:34:e4:92:43:7c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Mar 26 14:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd1da82d8016231bd4def38263d4fe8c67e505d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:74:e2:c6:35:43:0f:05:3e:f7:82:f6:dd:
08:ad:25:2a:cc:94:c3:3b:c8:1c:41:45:4d:c5:9e:
c4:e5:53:a1:20:d8:53:35:89:73:af:51:76:44:84:
47:69:be:bd:ad:9d:e5:48:8d:cf:2e:e0:5e:ca:67:
9f:9d:2f:01:8b:2c:5a:4c:8b:5c:48:5b:5c:cd:e0:
6a:b0:88:f0:5e:ff:68:db:34:8f:2e:36:90:4c:14:
b2:65:3d:a8:b5:1e:68:0f:4c:a2:0e:e0:38:1e:75:
7e:b4:43:4b:0a:5b:5a:1e:c5:3b:ba:7a:a3:8d:88:
44:57:27:f6:95:77:dd:99:f9:09:33:5f:2d:60:f1:
94:50:81:87:f0:b5:5a:56:c3:45:16:fc:70:96:49:
22:da:ed:17:21:6b:8c:92:a5:78:a7:ac:5c:5e:2b:
20:51:8c:df:af:59:3b:87:ea:17:d7:54:ec:c9:a5:
b1:01:85:27:fa:74:ed:22:40:59:8d:37:60:0e:55:
bb:86:99:19:ac:26:d8:d8:1d:8a:0b:24:76:41:f7:
d9:27:0a:bb:da:a5:17:e5:33:5b:60:85:17:fb:0f:
2b:f6:bc:29:42:c3:4a:13:69:ac:dd:64:f1:94:2b:
ca:d3:6d:9f:80:85:62:a6:2b:c0:8b:96:0c:84:b1:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:A8:2D:80:16:23:1B:D4:DE:F3:82:63:D4:FE:8C:67:E5:05:D6
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/3R2oLYAWIxvU3vOCY9T-jGflBdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.64.0/23
109.172.16.0/21
109.172.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:34:1a:ee:3e:cd:d7:44:84:72:ff:54:d4:4c:e1:b4:25:a5:
1f:f5:14:65:1c:08:d6:d7:e1:95:2e:b5:31:9b:2e:b3:7c:b8:
66:96:f8:b8:c3:ca:a9:f4:ba:ee:ef:f3:a9:5f:6c:ec:3d:d8:
4c:89:d7:9c:66:60:6c:e1:24:bb:01:a3:12:8d:e4:c6:6a:96:
10:a3:c9:dd:75:e4:c5:de:d8:41:58:63:39:e7:65:ec:21:04:
50:04:c5:07:55:dc:fe:0a:8f:02:fd:7b:bd:f4:18:ef:fb:80:
06:b2:13:fb:e6:d4:85:2b:c9:28:f7:d3:c2:01:a7:03:b3:96:
b3:6d:d4:8b:a3:1a:fa:40:ce:39:e6:dd:3a:c6:29:8e:b0:e0:
63:97:de:86:24:98:28:52:79:82:c3:03:38:ee:f2:48:c1:f4:
37:6e:6e:80:80:a3:27:40:23:f2:64:89:be:68:ff:79:f3:bc:
82:b0:cb:a5:b5:35:77:18:f9:9c:2f:2f:c8:2b:69:d1:72:13:
03:80:2b:69:a5:ad:70:ee:83:2b:c2:63:64:6a:24:c5:24:84:
6d:17:db:a1:93:cf:1e:6b:f6:0e:82:0c:17:73:38:6c:dc:d5:
17:51:19:89:ae:35:3b:eb:7d:96:6e:f8:3f:e5:52:89:77:71:
7e:70:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:27:59 2025 by rpki-client