Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/PbQAq4tBfBzJf67NNR29Pj0FkmA.roa
File: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (raw, json)
Hash identifier: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=
Subject key identifier: 3D:B4:00:AB:8B:41:7C:1C:C9:7F:AE:CD:35:1D:BD:3E:3D:05:92:60
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019424B3A0436D021DFF01D7B2F1B71A587B
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/PbQAq4tBfBzJf67NNR29Pj0FkmA.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9136
IP address blocks: 185.225.135.0/24 maxlen: 24
2a0d:c405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a0:43:6d:02:1d:ff:01:d7:b2:f1:b7:1a:58:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3db400ab8b417c1cc97faecd351dbd3e3d059260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:bd:c8:b7:fb:74:77:cb:ba:d2:7c:7e:8d:
a1:40:44:b4:d4:63:c0:55:d9:e7:a9:93:d8:3c:7d:
44:ec:ef:58:2f:9d:7b:bf:76:b1:64:b4:5b:ce:25:
55:99:75:a4:47:9d:4d:eb:6c:df:0c:a4:e9:4a:c3:
e9:46:5f:20:1d:54:3b:a4:32:9f:cb:1a:5c:00:31:
6a:52:a9:41:dd:e1:35:33:99:69:a9:f9:73:98:ec:
1f:bb:b9:08:6c:a3:e1:cc:06:04:ac:81:8e:99:32:
b2:89:16:f8:2d:92:e9:22:33:b2:c0:aa:fd:11:f6:
e3:e2:1f:c5:53:66:8d:63:d1:87:7d:f3:4c:d5:0e:
49:18:4a:15:19:b3:56:ce:5b:15:bf:23:76:28:99:
12:09:96:cd:fb:66:67:31:5c:3a:45:d6:f5:10:10:
84:48:1b:56:d1:3d:b4:94:95:3f:32:e8:31:2a:60:
fc:09:b2:0c:09:77:2d:41:71:f5:86:f3:e3:5d:6f:
a7:61:73:71:a4:c1:19:29:c5:7a:b6:81:e1:ab:79:
b7:56:71:25:8b:af:27:52:b7:27:bb:02:e4:6b:bb:
ec:5f:db:bb:2f:bb:b3:98:a1:94:89:c8:a9:f9:3c:
01:50:f8:e6:e3:1f:dd:13:38:03:5c:02:2a:f7:a9:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B4:00:AB:8B:41:7C:1C:C9:7F:AE:CD:35:1D:BD:3E:3D:05:92:60
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/PbQAq4tBfBzJf67NNR29Pj0FkmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.135.0/24
IPv6:
2a0d:c405::/32
Signature Algorithm: sha256WithRSAEncryption
18:55:3b:b0:c0:2e:49:37:a0:4e:06:a2:de:80:52:53:80:49:
e4:17:d8:23:77:de:a1:e6:08:96:60:bc:74:d5:8d:c4:97:48:
e0:90:99:5d:f3:7a:c1:46:bf:10:9f:50:ed:07:4d:93:20:69:
f2:47:be:02:4f:fa:f3:18:c8:9e:1e:84:0a:4e:47:fd:ab:a6:
76:8e:b8:25:be:77:3f:df:d7:75:05:c6:f8:92:56:8f:fa:b1:
62:32:1b:b7:19:15:2b:c8:9f:be:45:16:cd:71:5e:58:0a:38:
e3:ea:f4:6f:52:26:14:c4:2b:63:9d:aa:2d:63:99:bd:0f:11:
2a:8c:ce:63:fb:ec:e6:64:1b:70:9d:d4:10:f4:8c:34:ef:e2:
0f:05:56:c8:09:f2:7a:2f:6c:05:d4:37:85:23:01:ab:5c:3a:
fd:6b:b7:69:c5:bd:72:27:00:85:8e:6a:f1:60:c4:fa:ec:54:
00:c6:d7:3d:59:51:6f:93:9e:b2:16:02:48:8c:8b:20:7a:33:
e1:e7:17:95:1e:4b:ef:4e:97:2f:a6:1b:c1:9e:56:88:89:b0:
ab:a6:a0:33:30:ca:62:cc:4f:d3:03:80:1b:97:d5:7b:6e:26:
8b:16:f4:d4:cc:99:0a:ea:a4:59:8f:fb:0b:d8:91:d8:d6:08:
39:0e:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:40 2025 by rpki-client