Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/3RdZANpVovPRB4zCH-Lkf3Prtaw.roa
File: 3RdZANpVovPRB4zCH-Lkf3Prtaw.roa (raw, json)
Hash identifier: l5w5cnd2tEXGGJFzz40s0YV//kdA+ReRwmR0KmdVVDU=
Subject key identifier: DD:17:59:00:DA:55:A2:F3:D1:07:8C:C2:1F:E2:E4:7F:73:EB:B5:AC
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01959D79F3D5B7C7D89E6660E0005D9A88AF
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/3RdZANpVovPRB4zCH-Lkf3Prtaw.roa
Signing time: Sun 16 Mar 2025 05:42:49 +0000
ROA not before: Sun 16 Mar 2025 05:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
193.24.208.0/22 maxlen: 22
193.24.208.0/23 maxlen: 23
193.24.210.0/24 maxlen: 24
194.24.160.0/23 maxlen: 23
2001:67c:2c58::/48 maxlen: 48
2a00:1910::/32 maxlen: 32
2a00:1911::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9d:79:f3:d5:b7:c7:d8:9e:66:60:e0:00:5d:9a:88:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Mar 16 05:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd175900da55a2f3d1078cc21fe2e47f73ebb5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:1c:a8:53:3c:3f:ea:34:4a:ea:58:b1:bf:
bc:23:d4:31:51:85:f6:85:11:34:24:7e:d4:52:e4:
d7:12:44:c3:4c:c0:3e:94:df:5a:47:a4:b2:41:3d:
7c:b6:54:49:88:a1:50:c5:54:a1:15:55:d7:1f:1d:
46:93:3c:0f:f0:a1:3a:dd:5a:5d:43:98:51:05:1e:
5e:29:ea:7c:56:55:4a:cb:39:48:ff:26:eb:de:58:
4a:ec:b1:ef:7f:4e:ec:69:d5:27:19:8b:96:77:8d:
5d:55:4c:ae:b0:1b:98:4a:3b:5f:df:f0:c5:8d:27:
f8:56:df:e8:3d:a4:cb:51:88:9b:44:ea:6b:93:c8:
f2:49:a6:f0:45:d3:df:17:e1:6b:a7:52:e7:55:ee:
64:bc:6c:06:a2:2a:7a:5f:4a:c4:24:bf:3d:58:4e:
3e:8e:32:a8:a3:a4:00:af:a9:63:4d:99:d0:00:34:
11:ce:e9:82:f1:ee:dc:02:75:38:4e:4f:c1:a8:08:
48:03:59:59:c2:ed:cd:f6:34:3a:ee:1f:60:3e:d3:
6a:5b:69:1e:06:76:62:c3:e9:7c:e2:05:08:e4:e5:
bf:15:e5:4c:4f:1f:83:f4:6e:b7:b2:ab:65:c4:48:
5b:d5:14:fc:25:bd:e4:de:44:d4:c7:75:a6:c9:1e:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:59:00:DA:55:A2:F3:D1:07:8C:C2:1F:E2:E4:7F:73:EB:B5:AC
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/3RdZANpVovPRB4zCH-Lkf3Prtaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
193.24.208.0/22
194.24.160.0/23
IPv6:
2001:67c:2c58::/48
2a00:1910::/31
Signature Algorithm: sha256WithRSAEncryption
5b:e9:f9:d0:b8:d4:80:ea:3a:11:3c:76:60:53:61:91:b5:6a:
c9:9b:15:79:a7:0e:f0:78:38:20:01:9e:41:68:e6:52:69:4b:
e7:09:89:15:f8:5c:ab:d6:ff:41:3c:7e:12:d5:fd:f1:58:b8:
5f:0f:42:56:b2:95:06:78:6a:fb:31:a0:66:12:93:9c:b1:07:
10:e7:85:0e:e3:9f:b4:b0:0b:2e:37:15:1e:7a:5a:f5:2c:49:
bc:c2:0a:74:1e:b0:03:3a:d4:84:a6:2b:2d:a8:80:b9:20:97:
c5:ec:a0:2f:8a:a9:ec:69:8f:4d:b3:37:af:24:7c:e5:4e:5f:
fc:76:36:df:4a:9c:6a:df:5b:4b:a2:1e:68:e8:be:55:03:f9:
13:82:c3:d3:c6:b3:1d:da:39:31:f6:92:6e:b0:d1:ae:4e:5b:
34:15:00:ed:57:8b:7a:97:22:7e:ff:bc:dc:a5:fe:3e:50:e2:
53:4b:98:3e:7c:52:5c:a0:5a:8c:78:a3:71:15:89:93:40:4b:
f3:43:91:30:2a:4b:3c:2c:1b:78:32:5e:e5:3c:b2:ed:1b:b4:
fb:53:a5:16:b4:01:37:7b:ab:43:c1:d2:72:34:0e:6c:e5:6d:
5d:d1:66:4b:03:8e:58:52:2c:59:f4:cd:81:22:c4:6d:64:4b:
00:8b:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:06 2025 by rpki-client