Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa
File: zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa (raw, json)
Hash identifier: KQ8uWDK74BxQd55e4CkD8HOGjkQGRjBDcA3U74QNwgw=
Subject key identifier: CC:ED:DB:E3:F8:24:A2:9E:DB:A5:11:66:C1:4C:90:4A:73:F7:0A:E4
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 0194258F1F3F53A9D959825CDE86EEB1FD22
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43989
IP address blocks: 79.98.40.0/21 maxlen: 21
93.188.96.0/21 maxlen: 21
109.234.56.0/21 maxlen: 21
185.181.136.0/22 maxlen: 22
195.206.246.0/23 maxlen: 23
195.216.202.0/23 maxlen: 23
213.217.7.0/24 maxlen: 24
2a01:b600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1f:3f:53:a9:d9:59:82:5c:de:86:ee:b1:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cceddbe3f824a29edba51166c14c904a73f70ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:4b:48:29:f4:ae:7f:22:b8:41:e9:3a:e7:
43:ee:d3:fc:08:45:7c:b0:3e:4d:8e:77:81:26:10:
49:fd:16:52:df:68:8e:e6:c9:97:cc:fb:7d:b0:4d:
1e:11:cd:b9:4a:c9:80:16:03:97:18:59:54:a1:19:
46:77:4d:ad:3b:80:60:e4:12:d0:95:90:0c:f7:c7:
67:f4:84:5c:0c:e6:b0:02:b3:ef:16:1b:a1:c9:0e:
5c:fc:5e:d6:93:e0:8a:2e:12:89:94:e1:df:2a:25:
1f:c2:e3:13:54:47:aa:ca:00:9b:d8:b0:64:a9:4a:
4f:1c:c2:ba:cb:93:86:ae:06:26:3d:29:c4:ce:21:
33:50:f3:3a:c5:5c:30:c3:69:13:9f:d1:6d:28:10:
3a:82:41:79:c8:8d:8f:08:d6:43:90:66:5e:cd:cf:
d2:c7:e1:57:6c:99:72:f7:f7:6d:fe:b8:bb:d2:54:
88:2e:7b:83:3e:27:ce:12:19:25:4c:69:e1:a5:9d:
dd:db:c0:56:31:cd:0f:c0:dd:ae:a2:45:d3:41:c0:
f1:03:80:ae:eb:54:f9:87:54:51:e2:f9:c0:7f:ba:
19:97:75:50:cd:97:b9:82:d7:0d:ec:62:a6:62:12:
a0:1a:9c:86:c9:dc:03:35:c5:be:be:8a:f9:dd:32:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:DB:E3:F8:24:A2:9E:DB:A5:11:66:C1:4C:90:4A:73:F7:0A:E4
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.40.0/21
93.188.96.0/21
109.234.56.0/21
185.181.136.0/22
195.206.246.0/23
195.216.202.0/23
213.217.7.0/24
IPv6:
2a01:b600::/32
Signature Algorithm: sha256WithRSAEncryption
75:1f:c3:40:02:30:89:0c:c8:64:32:90:59:18:e6:49:4f:b3:
5f:d7:e4:85:91:38:1f:0e:f1:e4:f9:eb:1c:bf:1f:a9:e0:77:
e2:7c:db:2d:02:64:0d:d3:0f:5d:27:ee:56:ae:cc:3c:bb:ea:
c6:6b:4b:8c:80:67:98:01:95:9e:8c:a4:fe:4d:71:ab:a4:96:
8f:0c:05:26:d5:4b:13:d9:93:c5:4e:58:7d:52:f7:b1:08:59:
1e:fb:15:18:42:94:bf:73:18:50:d6:74:ea:36:57:d8:63:3c:
62:46:33:7e:f6:b4:75:e0:87:91:60:ab:5c:c0:61:94:f5:9a:
b0:f7:c5:77:50:ec:d6:e5:99:5d:b8:ad:9d:cd:00:66:65:3c:
3a:3c:37:8c:a9:77:9c:d5:cc:8b:b8:cf:ff:6e:8c:33:2b:0d:
90:8d:5a:3f:88:75:36:50:82:f8:7a:10:ed:68:3f:46:9e:23:
1d:3c:d7:04:18:7f:c0:e2:7a:28:68:d3:3e:56:27:e2:57:b6:
61:32:22:87:d3:d9:4d:72:27:b9:af:f9:75:6f:39:67:53:44:
34:7d:4c:c9:2e:8e:fc:8b:ab:f9:89:4e:9b:6e:fd:a7:d2:c7:
f7:2b:0f:af:19:bb:22:9a:ec:7b:78:6a:45:8d:24:ce:19:e2:
7f:ac:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:31 2025 by rpki-client