Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa
File: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (raw, json)
Hash identifier: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=
Subject key identifier: DE:BF:DF:4B:68:AA:4C:74:E9:A9:5A:E6:01:D9:A6:2F:2F:21:E5:4A
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA6BCDE1F70F6F4D4AE67FC8F4E46D
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.134.23.0/24 maxlen: 24
45.152.150.0/23 maxlen: 24
185.94.65.0/24 maxlen: 24
185.94.66.0/24 maxlen: 24
185.198.155.0/24 maxlen: 24
195.64.107.0/24 maxlen: 24
195.64.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6b:cd:e1:f7:0f:6f:4d:4a:e6:7f:c8:f4:e4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=debfdf4b68aa4c74e9a95ae601d9a62f2f21e54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:e2:30:9b:9a:ac:9b:e4:41:2e:c3:ab:82:
b0:8f:45:8d:1d:62:fc:bc:41:e2:83:d9:3a:77:1f:
c7:dd:02:2b:0d:d7:e5:38:ca:d1:76:0f:73:35:00:
a5:06:e8:07:f5:1d:4f:94:58:c7:a9:ab:31:c0:cf:
24:26:c0:8b:e0:f3:7e:57:0a:27:ea:cb:0d:d8:ce:
0c:0f:e7:4c:7f:da:9f:b9:ac:11:ea:79:1b:5c:e3:
b3:ba:24:6c:c8:b4:54:1a:c0:12:03:8a:02:67:f4:
70:2e:ba:e4:8f:bc:e8:67:3e:a7:42:84:22:65:f9:
bd:b6:19:2f:34:9b:d3:2b:cc:a5:5b:aa:ad:89:81:
37:96:fc:03:d0:29:f8:b2:16:31:4c:b6:74:59:61:
a1:07:c3:ff:ad:1f:45:52:b4:8d:47:03:23:7d:34:
56:07:f4:6e:6e:ce:0d:ab:e0:07:0e:90:30:59:ab:
9d:88:f0:72:75:15:8f:dc:25:5a:ff:a9:d6:4f:31:
e5:16:bf:27:80:69:41:1f:4a:2b:5f:cd:20:1e:a9:
a5:d8:3d:9c:cf:00:c9:ba:32:63:ca:14:6c:d9:b2:
b5:a2:93:00:3b:af:f6:3e:19:a7:18:39:5b:8b:c1:
3b:46:91:e2:30:80:3c:9b:43:b0:73:59:02:3b:73:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:DF:4B:68:AA:4C:74:E9:A9:5A:E6:01:D9:A6:2F:2F:21:E5:4A
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.23.0/24
45.152.150.0/23
185.94.65.0-185.94.66.255
185.198.155.0/24
195.64.107.0/24
195.64.113.0/24
Signature Algorithm: sha256WithRSAEncryption
14:19:a4:29:ec:0c:5d:06:b5:46:04:23:2c:eb:0d:cf:76:e5:
9f:16:27:eb:84:6f:d9:69:92:e5:0d:0c:ee:6b:a9:aa:5d:34:
6e:a6:e2:9a:45:4b:c4:3e:a9:e2:d6:f1:28:b2:f5:d3:18:8e:
e5:c0:f4:b5:16:d6:a6:4c:93:56:4e:ad:95:31:9c:c0:aa:3e:
b0:80:be:ea:d9:d4:c3:c3:1c:71:b9:5f:2d:12:51:c3:32:49:
a9:b8:56:a0:76:e2:1b:71:f1:86:eb:48:67:7e:4f:39:13:cc:
a8:72:75:31:4d:aa:d1:55:39:0e:1c:2a:ed:52:f1:51:8e:61:
90:77:0d:9d:d4:b6:bc:1f:cd:0c:4f:d1:61:8f:61:e2:81:9e:
43:1e:5c:7d:63:29:05:87:ce:ad:3a:13:80:ef:15:c7:34:4b:
96:12:83:e2:45:ea:95:dd:73:98:16:cb:46:fa:26:83:3d:b1:
de:18:3e:a3:ad:c8:e1:0b:4c:8a:06:83:1e:5f:68:d3:cf:4c:
48:10:d7:c6:84:b7:d3:cb:d9:0b:c0:3e:3f:af:87:2a:e1:0e:
38:c2:9c:68:95:e5:d4:7c:82:4c:9a:69:1b:fe:cc:35:a8:9e:
18:1d:22:12:e1:1c:ae:bb:bc:f9:69:b2:fb:70:d0:9e:26:03:
39:4c:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:08 2025 by rpki-client