Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa
File: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (raw, json)
Hash identifier: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=
Subject key identifier: 8B:73:6E:2D:5F:7E:49:53:92:43:8A:CB:7F:54:67:CE:2E:FA:47:CB
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 0194252121833D72ACAB7D2C80D1B630725D
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa
Signing time: Thu 02 Jan 2025 03:48:35 +0000
ROA not before: Thu 02 Jan 2025 03:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 185.98.152.0/22 maxlen: 22
2a01:a480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:21:83:3d:72:ac:ab:7d:2c:80:d1:b6:30:72:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Jan 2 03:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b736e2d5f7e495392438acb7f5467ce2efa47cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:40:22:9f:e3:ff:da:b2:cf:47:06:55:3c:
81:19:06:f1:82:66:b6:8d:d1:33:4b:97:0a:d5:b8:
b4:03:f2:d6:e9:cd:ef:55:25:d3:d4:ef:e1:5b:37:
80:7d:16:1d:b6:5c:25:15:61:24:1d:79:dc:57:1c:
21:d7:40:70:05:85:5a:ae:9a:ce:52:38:31:b5:0b:
c9:2c:31:7f:fc:50:bc:70:a3:d7:4d:ab:93:4a:03:
b0:2d:1c:b9:dc:e4:de:e0:92:14:f0:ba:35:96:27:
6f:05:da:86:c1:6f:1b:f0:3c:31:95:50:c3:2f:3d:
dd:ed:90:59:c0:88:ec:6e:15:a4:00:8c:89:6d:ee:
43:a5:46:03:de:d5:cd:8d:2f:79:ed:f5:25:e7:0f:
95:2a:25:ad:92:1e:c5:24:b3:10:4c:9c:f5:da:e9:
08:04:27:0b:88:77:04:43:99:59:b3:fb:94:01:81:
d8:1f:8a:e2:5b:1d:fd:ba:35:29:eb:42:9f:b4:48:
b2:5a:26:b1:4c:12:fa:3e:51:85:05:2b:d7:ae:e4:
75:94:f6:69:0c:fb:78:e5:3d:ab:83:4c:39:e2:0a:
b4:bd:60:d7:40:3b:26:17:28:47:1d:f6:ae:d8:f7:
ed:7c:25:21:b8:72:e6:e5:83:c3:d0:16:c1:c1:ca:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:6E:2D:5F:7E:49:53:92:43:8A:CB:7F:54:67:CE:2E:FA:47:CB
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.152.0/22
IPv6:
2a01:a480::/32
Signature Algorithm: sha256WithRSAEncryption
13:31:71:ed:d0:e7:4d:a1:39:52:c3:02:d9:ba:ec:93:ca:25:
73:16:86:89:c0:73:e3:32:2c:45:f6:dc:88:d4:f5:bf:fe:77:
ca:25:d9:42:3f:53:c2:84:0c:a5:f4:4e:39:ea:0e:6d:ea:50:
28:c3:44:e3:74:81:9a:12:23:24:59:31:5f:ee:18:b4:96:37:
b0:66:8f:2c:02:af:05:bd:b1:77:1c:6a:2b:1a:43:4b:27:88:
d7:fd:0b:d3:b5:70:fa:77:da:ab:51:96:29:17:84:f6:04:db:
2a:6a:bd:dc:b5:66:a6:69:98:f9:8b:8f:5c:da:83:7b:e8:47:
af:32:e2:dc:9c:2d:60:be:a8:55:47:54:d6:33:c4:2c:0e:f2:
2f:e9:1c:62:33:4e:06:07:63:40:a7:76:8c:f2:0b:b9:62:25:
f6:2e:a0:49:5a:f5:82:fc:a0:91:96:ba:05:88:2c:61:ce:97:
2a:69:8b:9f:e6:e5:60:e0:ca:ed:24:b3:d1:24:f5:50:4e:3f:
6e:95:3c:b9:94:0e:55:62:ab:85:dc:ab:ba:9e:d0:02:61:7c:
26:b7:f0:d0:ad:83:02:6e:1f:8e:8b:a2:d0:c4:91:6b:ef:38:
e4:c2:60:69:eb:71:02:d6:bc:48:9e:07:57:7a:f1:18:da:af:
d4:19:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:59 2025 by rpki-client