Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa
File: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (raw, json)
Hash identifier: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=
Subject key identifier: DC:FA:60:28:D1:B4:02:64:55:FD:A0:96:0A:C5:D9:FE:D0:79:78:88
Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial: 01942144401E544185AE5B5247E1C2061BE0
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28876
IP address blocks: 5.100.0.0/18 maxlen: 18
5.100.0.0/19 maxlen: 19
5.100.0.0/24 maxlen: 24
5.100.32.0/19 maxlen: 19
37.61.128.0/20 maxlen: 20
176.52.192.0/21 maxlen: 21
185.53.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:40:1e:54:41:85:ae:5b:52:47:e1:c2:06:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcfa6028d1b4026455fda0960ac5d9fed0797888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:c0:d0:4c:09:bc:aa:6e:40:14:30:f2:3e:
65:34:b0:d2:e7:85:ec:24:30:02:63:93:a9:25:ac:
97:cc:d2:3a:9e:64:ad:78:41:93:c3:fd:70:55:f0:
41:76:b8:6c:3b:30:0f:11:0f:c3:1e:e2:4e:4a:26:
0f:9d:e7:fe:68:4b:88:db:4a:5e:b0:13:90:4e:a9:
06:60:96:12:15:3a:26:ff:d8:15:b7:ad:67:9e:59:
d7:87:ba:00:48:be:54:cc:b8:3f:ae:ca:83:f2:9f:
3f:3e:ff:25:98:25:b1:9e:a5:38:90:a1:d1:e4:89:
45:ae:10:6e:82:dc:a4:60:6c:9c:36:be:b3:75:41:
03:ea:53:b2:61:d6:ad:8c:8e:4b:29:7b:9d:75:23:
b6:d7:e3:d5:f6:a8:1f:17:5d:73:9f:48:a8:fc:2f:
e7:e8:33:14:21:17:2c:27:d1:3c:01:54:4f:d6:17:
b9:2b:20:41:da:04:6c:84:38:54:9c:98:9e:96:06:
46:28:ba:b5:3a:ed:f0:0a:3e:43:4c:0b:8e:2b:6b:
bd:42:b4:57:58:b6:08:a8:8a:aa:b4:f1:06:cd:6e:
07:77:c6:95:7e:8c:c3:01:66:a2:ea:bd:75:72:32:
c6:58:e1:70:9a:1f:cb:fb:bf:90:4b:49:82:49:a3:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:60:28:D1:B4:02:64:55:FD:A0:96:0A:C5:D9:FE:D0:79:78:88
X509v3 Authority Key Identifier:
keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.0.0/18
37.61.128.0/20
176.52.192.0/21
185.53.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:d7:b2:4e:0b:52:9b:3b:0d:28:6c:a2:b6:68:21:96:06:df:
69:82:ce:dd:d4:45:b5:df:eb:11:3b:e4:4c:6b:a5:33:29:3d:
0f:77:f5:23:50:a8:5c:e8:bf:f1:59:44:72:4d:22:ae:f1:65:
1f:27:49:63:da:4a:e1:7a:b8:f2:e5:a6:fa:5f:cf:0e:57:fc:
d8:7b:21:fb:24:df:8c:9f:46:79:84:c0:5b:18:9f:57:e3:49:
a1:14:06:07:55:a0:8a:7d:fe:b6:98:19:ea:56:16:92:f2:8c:
80:e7:ae:1c:da:ee:32:89:66:23:99:bf:b1:c6:69:17:19:8e:
8c:33:3a:4a:54:72:9c:4b:6f:56:f7:ab:1c:02:9b:f2:da:5e:
c0:84:49:8c:e7:60:cf:6f:94:fc:9b:ee:1e:67:b3:ed:e4:01:
0f:89:de:6a:4f:84:92:1b:82:32:97:69:08:7a:f6:5c:e3:0c:
3f:8b:a7:c8:7a:90:77:2d:6d:f6:1d:67:67:0a:3e:09:ef:c0:
f1:14:11:af:b5:ee:6a:ca:18:95:52:87:e9:28:45:2e:45:80:
dc:1a:50:df:8e:7a:f7:68:a0:98:56:52:44:9c:7e:60:96:b6:
da:a1:b2:a4:d6:c0:cd:4e:6e:1c:56:8f:94:9e:ab:04:31:83:
1c:86:06:e7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQhREAeVEGFrltSR+HCBhvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTRkMmU0MmYyMzYyYzJlNmVmNTJiODJmMTlmN2U1NjM3
NTdlMGMwHhcNMjUwMTAxMDk0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2ZhNjAyOGQxYjQwMjY0NTVmZGEwOTYwYWM1ZDlmZWQwNzk3ODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsTA0EwJvKpuQBQw8j5lNLDS54Xs
JDACY5OpJayXzNI6nmSteEGTw/1wVfBBdrhsOzAPEQ/DHuJOSiYPnef+aEuI20pe
sBOQTqkGYJYSFTom/9gVt61nnlnXh7oASL5UzLg/rsqD8p8/Pv8lmCWxnqU4kKHR
5IlFrhBugtykYGycNr6zdUED6lOyYdatjI5LKXuddSO21+PV9qgfF11zn0io/C/n
6DMUIRcsJ9E8AVRP1he5KyBB2gRshDhUnJielgZGKLq1Ou3wCj5DTAuOK2u9QrRX
WLYIqIqqtPEGzW4Hd8aVfozDAWai6r11cjLGWOFwmh/L+7+QS0mCSaP+YQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNz6YCjRtAJkVf2glgrF2f7QeXiIMB8GA1UdIwQY
MBaAFDek0uQvI2LC5u9SuC8Z9+VjdX4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yNWZiNTQtZDQ2Ny00ZTkwLWE0MWYt
OTFjMGQ4ZTc1NDlkLzEvM1BwZ0tORzBBbVJWX2FDV0NzWFpfdEI1ZUlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yNWZiNTQtZDQ2Ny00ZTkwLWE0MWYtOTFjMGQ4ZTc1NDlk
LzEvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGBWQAAwQE
JT2AAwQDsDTAAwQCuTXYMA0GCSqGSIb3DQEBCwUAA4IBAQCb17JOC1KbOw0obKK2
aCGWBt9pgs7d1EW13+sRO+RMa6UzKT0Pd/UjUKhc6L/xWURyTSKu8WUfJ0lj2krh
erjy5ab6X88OV/zYeyH7JN+Mn0Z5hMBbGJ9X40mhFAYHVaCKff62mBnqVhaS8oyA
564c2u4yiWYjmb+xxmkXGY6MMzpKVHKcS29W96scApvy2l7AhEmM52DPb5T8m+4e
Z7Pt5AEPid5qT4SSG4Iyl2kIevZc4ww/i6fIepB3LW32HWdnCj4J78DxFBGvte5q
yhiVUofpKEUuRYDcGlDfjnr3aKCYVlJEnH5glrbaobKk1sDNTm4cVo+UnqsEMYMc
hgbn
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:39 2025 by rpki-client