Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/I3HMzg_QmJAYWZSbsxJu7-jY00E.roa
File: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (raw, json)
Hash identifier: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=
Subject key identifier: 23:71:CC:CE:0F:D0:98:90:18:59:94:9B:B3:12:6E:EF:E8:D8:D3:41
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA67EA70F2B084234FD88401855598
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/I3HMzg_QmJAYWZSbsxJu7-jY00E.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 45.131.195.0/24 maxlen: 24
92.119.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:67:ea:70:f2:b0:84:23:4f:d8:84:01:85:55:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2371ccce0fd098901859949bb3126eefe8d8d341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:80:02:fa:41:60:ee:ff:89:08:86:5f:db:
68:f7:02:87:6c:87:2e:e5:ec:e3:d9:b0:09:fd:9c:
b6:d2:47:8a:22:38:33:e8:13:5b:44:f6:1f:45:c7:
df:8b:8c:b5:86:2d:20:76:9f:9d:b9:f7:11:74:b2:
7d:70:1e:c8:53:39:70:ac:8f:55:87:4f:3d:c0:3e:
b7:d0:6f:d9:6c:6b:96:da:40:9c:bb:1f:ce:3d:0e:
e8:f6:10:1f:21:f5:15:58:87:0f:b7:8a:f8:f1:40:
50:69:e4:d9:09:b2:9b:26:f4:03:00:43:10:9d:1a:
9e:4a:87:80:28:0f:cb:95:0f:e8:8e:f8:12:25:44:
e9:77:41:55:1e:e9:d6:09:5a:f4:60:3d:c2:6c:78:
e5:13:8e:28:18:df:0e:dd:79:af:83:93:f4:30:3b:
a5:d8:c6:ed:18:d4:81:15:dc:3a:07:c8:b1:20:64:
9a:15:14:59:ec:73:09:e6:63:ca:d3:48:0a:c7:ef:
ee:ac:ee:6b:2f:8c:22:6d:19:f9:18:52:38:50:f9:
ff:02:97:d7:be:4e:f2:c9:65:f6:5e:26:93:8d:3a:
cd:20:2b:58:ad:d2:36:b9:45:5d:a2:13:74:f2:9a:
8f:12:cf:cd:d9:2b:3a:1f:0d:b6:b2:85:36:62:b3:
57:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:71:CC:CE:0F:D0:98:90:18:59:94:9B:B3:12:6E:EF:E8:D8:D3:41
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/I3HMzg_QmJAYWZSbsxJu7-jY00E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.195.0/24
92.119.36.0/24
Signature Algorithm: sha256WithRSAEncryption
21:39:ce:12:5a:1f:d8:98:1a:b5:ab:cd:94:86:5b:73:af:d5:
8d:5a:08:cd:85:7e:ac:ec:ce:a3:b5:f0:e8:f9:e1:b0:4e:c3:
53:b3:2f:77:0c:47:c9:f3:f1:d3:f9:d0:9c:37:b1:7c:9d:73:
a0:e7:7a:bc:25:81:a5:91:65:18:d5:1c:51:73:a3:6a:d2:84:
99:22:89:04:b4:ee:98:b2:b7:9e:4d:24:1b:bb:b3:e4:e1:b5:
dc:a6:a1:6a:ac:fc:84:fa:7c:19:0d:53:eb:ab:58:0b:a7:f3:
91:25:3e:d0:74:68:b2:62:93:26:1d:40:2b:7a:c9:4b:a1:ab:
ad:67:f3:44:6f:16:f7:14:8d:35:c1:c7:26:6e:12:9b:96:f0:
47:5b:da:ed:7d:84:f6:1d:ef:4a:f1:ef:6f:cc:ca:64:77:ee:
79:45:e0:a7:f7:c2:ac:b9:37:51:1b:a6:d9:ff:4d:55:86:cd:
63:71:dc:fb:90:3a:5f:62:67:dd:39:9c:dc:fe:59:ce:84:d6:
ed:eb:54:c3:fa:fd:60:e4:cc:c9:ce:20:0a:a3:1a:bd:ae:aa:
d3:4d:00:55:21:cd:0f:83:15:12:d8:39:74:0e:ad:ac:52:c4:
a8:8d:8a:16:69:ea:88:b6:a1:e9:56:5c:2a:a5:bf:89:88:a3:
c6:1b:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:32:28 2025 by rpki-client