Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/3f06hh4hNU107JXVzfvArHZPE4U.roa
File: 3f06hh4hNU107JXVzfvArHZPE4U.roa (raw, json)
Hash identifier: BPCtwW3aJroKK5cBsU9SlKsGCU1RSfVJmSFO/AqP8Rs=
Subject key identifier: DD:FD:3A:86:1E:21:35:4D:74:EC:95:D5:CD:FB:C0:AC:76:4F:13:85
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 0195CD549F0709C9DF3C2FB5D4F8CE98622F
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/3f06hh4hNU107JXVzfvArHZPE4U.roa
Signing time: Tue 25 Mar 2025 12:43:49 +0000
ROA not before: Tue 25 Mar 2025 12:43:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 92.249.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:54:9f:07:09:c9:df:3c:2f:b5:d4:f8:ce:98:62:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Mar 25 12:43:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddfd3a861e21354d74ec95d5cdfbc0ac764f1385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:eb:c5:1a:4e:f1:83:12:29:bd:bf:dd:c1:
34:d0:65:d2:26:58:64:a2:ad:67:45:9b:05:a2:ca:
c9:22:e1:eb:5d:3c:a5:d6:1d:94:21:de:6e:15:e0:
3e:10:e4:97:70:c5:88:ad:41:b9:fe:e3:9e:ac:29:
ef:f4:5b:be:8e:f3:27:44:aa:66:4a:b6:7d:d8:66:
bc:93:c9:31:50:df:96:1b:02:ef:03:c0:ef:a5:60:
b6:df:1a:24:09:68:fa:7d:26:1d:47:35:96:d7:4a:
5b:0c:16:35:ff:e9:82:91:b6:8f:1f:2c:07:4c:54:
55:cd:bb:91:41:a3:df:13:b0:b7:06:ef:85:d5:a4:
37:1e:2e:85:09:fd:91:29:46:14:e1:4b:57:f6:5f:
29:53:f2:e4:1f:a8:01:37:73:55:50:99:ea:03:d5:
ff:07:f0:73:44:64:7a:d4:df:d6:bb:1a:a4:3c:0c:
d5:12:93:5c:92:ed:7f:e2:6f:ce:5e:64:75:8e:97:
05:f1:6d:c2:29:2f:8a:e6:73:09:00:52:65:b5:91:
50:26:02:f4:69:b6:10:68:61:b4:ae:b4:9a:95:13:
dc:5d:3b:45:10:7a:57:c1:0a:b1:24:ab:bf:27:4f:
ef:0a:88:dd:9f:a5:2b:96:e5:d8:c7:b4:16:ac:d2:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:3A:86:1E:21:35:4D:74:EC:95:D5:CD:FB:C0:AC:76:4F:13:85
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/3f06hh4hNU107JXVzfvArHZPE4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7d:9b:ea:be:4c:93:93:04:8d:ac:3a:d4:65:ac:ed:d6:3a:
67:c1:0f:75:35:c2:5c:21:3c:ce:c9:58:8d:1f:5e:4f:53:b1:
4a:e1:54:47:81:c6:22:36:dc:76:84:ab:03:74:42:b1:0c:bf:
c1:7b:21:c8:5d:ab:ab:31:2b:c5:4c:2a:21:c8:d1:9d:db:a9:
0d:e3:27:34:98:20:fd:b9:11:36:45:f5:d1:d3:9a:8a:5b:38:
ec:14:a3:c0:07:fb:1b:a6:2c:09:8f:ae:b4:86:07:92:31:49:
c9:d3:e7:45:87:09:55:7c:05:61:d1:87:07:82:2c:a1:3d:e3:
f9:85:73:99:71:c1:e9:2f:aa:54:cc:d1:30:bd:8b:e7:9c:c4:
1f:27:50:16:fc:3a:23:67:98:7f:43:a7:6d:e1:ba:44:e5:02:
bd:ce:8c:8c:e1:d6:2f:18:0c:50:5e:2f:df:46:77:f8:0b:ea:
eb:94:aa:ea:ff:bc:4e:1b:10:41:e6:dc:bc:a9:a5:82:f0:d2:
1e:42:57:c5:72:cd:cb:bd:dd:d7:19:6d:c7:f0:18:90:27:ad:
e3:d8:ae:e3:40:b1:1c:45:f2:1b:1a:9f:c6:e7:bc:4a:f9:50:
a7:ab:94:19:f4:3e:3e:62:df:bf:6d:b5:08:1f:ca:53:52:dc:
bf:7d:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:21 2025 by rpki-client