Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/w3g4Q6aTfVevp6COhE1618_UEpo.roa
File: w3g4Q6aTfVevp6COhE1618_UEpo.roa (raw, json)
Hash identifier: OILWL7JqdZLsWKiYyVkTfZSv9EPE18ajIqjcTio33fg=
Subject key identifier: C3:78:38:43:A6:93:7D:57:AF:A7:A0:8E:84:4D:7A:D7:CF:D4:12:9A
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 0194236A3B4A59984D4F8D2D6F7773656A2C
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/w3g4Q6aTfVevp6COhE1618_UEpo.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51942
IP address blocks: 195.72.120.0/23 maxlen: 23
2001:678:56c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3b:4a:59:98:4d:4f:8d:2d:6f:77:73:65:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3783843a6937d57afa7a08e844d7ad7cfd4129a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:17:cf:b9:eb:0b:74:43:a9:18:6f:e4:9b:
a0:86:4f:de:2f:c3:f3:3f:5c:8c:a3:49:52:43:97:
b9:50:6b:be:2e:a8:c3:8d:b1:27:c2:87:dc:7c:d9:
83:83:78:35:5c:7c:2d:89:56:0c:bd:79:20:23:1c:
ea:e6:dd:5c:78:65:ef:19:5c:09:1e:8e:0f:22:28:
2c:df:04:54:89:42:aa:7d:d0:9b:ee:4e:29:62:31:
c2:1f:07:d3:f6:ea:28:09:4e:e9:39:b6:d2:6d:9f:
c6:5c:4f:b6:c5:ae:6a:72:c4:87:5f:a3:99:61:88:
ab:94:dc:9e:a7:db:08:80:7d:87:13:71:79:6a:6b:
03:4e:4c:e4:c6:0f:25:b6:01:e5:14:de:6a:68:81:
b0:99:38:f3:b9:79:69:1a:c7:5e:3e:0a:9c:be:c3:
a9:6b:40:4a:35:9b:eb:64:4f:48:98:05:32:6a:1c:
19:4d:df:56:0d:e5:b1:67:60:84:1d:73:e1:63:73:
2f:06:06:19:e4:d4:c6:46:ac:13:0d:fe:0a:c2:7a:
02:2d:b4:4d:ac:b1:06:0e:87:63:95:44:a9:e2:74:
2b:74:69:32:96:60:e0:8d:d1:61:01:f8:02:11:c6:
57:56:8a:13:08:cb:b4:4a:61:76:f4:08:93:9f:a3:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:38:43:A6:93:7D:57:AF:A7:A0:8E:84:4D:7A:D7:CF:D4:12:9A
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/w3g4Q6aTfVevp6COhE1618_UEpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.120.0/23
IPv6:
2001:678:56c::/48
Signature Algorithm: sha256WithRSAEncryption
0c:fc:00:c9:b0:ca:ca:62:25:29:82:89:0a:67:02:58:b4:ff:
db:26:f9:36:f8:54:50:87:0d:76:9b:67:13:a6:76:cd:cb:2e:
31:16:e3:80:56:1c:53:4a:96:6c:48:cd:3d:04:0f:35:fe:18:
89:8d:c3:24:d6:f4:70:71:85:36:ca:e0:21:4a:0c:3c:b7:79:
1c:58:32:5c:ec:43:39:92:58:c3:25:59:3c:75:68:58:43:de:
ca:af:97:54:93:cf:31:f8:99:d1:39:d2:74:80:69:8b:98:1f:
62:29:35:5d:88:22:17:66:88:ce:b4:f1:30:ae:2d:b6:a2:bf:
01:90:05:3d:e9:38:cf:7d:5c:89:da:14:f4:f6:22:f3:66:cc:
82:4e:2b:28:75:8e:e4:0f:e8:2b:67:56:1c:c7:aa:f7:97:80:
0d:a4:6f:74:64:94:d7:60:ab:d4:42:41:b8:3f:d4:cf:b4:b3:
ee:7c:0a:bd:f0:21:e1:3b:00:bb:a2:5e:3b:58:76:75:f0:45:
99:83:36:89:cc:ad:09:51:f9:72:4b:93:c9:49:24:da:f9:e5:
ba:71:7e:ec:c1:63:22:3a:db:63:c6:2c:f8:7f:50:d5:94:74:
a9:2e:58:a1:fc:c5:c4:b6:cf:1b:0a:83:c7:94:a1:9c:83:68:
80:b9:31:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:49 2025 by rpki-client