Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/O7CxZy12v7upnoiIaFI8HeMQsj8.roa
File: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (raw, json)
Hash identifier: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=
Subject key identifier: 3B:B0:B1:67:2D:76:BF:BB:A9:9E:88:88:68:52:3C:1D:E3:10:B2:3F
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA28A1B0AAEF53C306EAE691E8CD8
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/O7CxZy12v7upnoiIaFI8HeMQsj8.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19844
IP address blocks: 31.40.193.0/24 maxlen: 24
45.141.13.0/24 maxlen: 24
83.136.48.0/24 maxlen: 24
93.177.111.0/24 maxlen: 24
185.240.86.0/24 maxlen: 24
194.62.164.0/24 maxlen: 24
194.62.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a2:8a:1b:0a:ae:f5:3c:30:6e:ae:69:1e:8c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bb0b1672d76bfbba99e888868523c1de310b23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:81:d7:42:b2:70:a7:a3:91:77:1c:81:5e:
9c:c5:71:29:29:ce:e0:96:ed:a2:48:45:1b:2f:c7:
12:1c:81:7c:b3:96:d9:71:39:e1:22:2b:6c:2d:62:
7e:29:7c:08:8d:a8:ef:c0:c7:50:9f:12:0f:42:c0:
b4:1b:66:18:5f:a6:78:79:b2:d2:b3:65:5a:e7:1e:
0f:73:5d:84:d4:f4:ee:64:3d:27:0f:98:fe:07:f4:
82:aa:93:f4:0b:a6:7a:fa:c6:11:06:82:a9:94:1c:
e4:79:d5:85:8a:1f:c5:ca:8e:71:e5:6e:20:e1:39:
b9:96:e2:5a:80:bd:08:9a:d5:ac:b8:88:e3:18:03:
7d:01:c5:4d:5c:c0:ae:8a:e2:36:00:d7:f6:09:c4:
b0:51:39:b7:82:b3:dc:01:77:4b:31:05:4a:37:82:
37:86:78:8a:b2:75:2b:95:2c:32:a3:ab:bd:c3:30:
eb:08:dc:a3:35:78:58:a5:cf:06:25:31:c8:e1:3c:
ba:be:4b:62:76:31:47:b3:85:af:5b:69:bd:7f:ea:
ba:d0:4a:69:01:f3:59:81:94:1a:af:09:ad:ad:94:
e9:af:fb:f9:29:90:60:7f:bc:f0:21:36:1c:7a:2e:
c9:30:75:65:50:2a:0b:71:d4:7c:1d:9b:c0:8d:40:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B0:B1:67:2D:76:BF:BB:A9:9E:88:88:68:52:3C:1D:E3:10:B2:3F
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/O7CxZy12v7upnoiIaFI8HeMQsj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.193.0/24
45.141.13.0/24
83.136.48.0/24
93.177.111.0/24
185.240.86.0/24
194.62.164.0/24
194.62.167.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a6:1a:cd:b4:ff:bd:6a:9b:37:e8:99:d9:8f:57:97:ad:bf:
a3:89:80:04:62:55:54:1c:c9:51:1a:47:f3:b8:fc:25:54:4f:
59:ad:2d:1f:1f:90:49:e2:08:76:4d:5f:08:9b:74:29:1b:9a:
ce:17:89:31:1a:03:a0:0f:3c:67:e7:19:1c:36:1b:ab:61:69:
f6:bc:89:c5:16:3b:cc:35:e0:52:94:6e:b5:05:4d:51:d2:37:
65:2d:d4:d9:9e:11:93:2f:dd:e1:05:6b:f3:40:81:24:7f:f3:
d2:31:91:5a:a5:1c:af:88:bf:07:4b:c9:b7:79:88:19:a8:39:
f0:77:8c:df:dc:2f:9f:c7:f9:a4:1d:1c:31:94:c8:ac:f7:f7:
a8:9b:dd:94:63:42:d6:34:26:69:91:4c:a5:58:60:dc:ad:44:
a6:51:ad:71:c4:17:35:7f:ae:a9:12:93:f0:35:56:72:54:6a:
9b:58:a1:18:cd:5d:97:32:7b:b8:6b:f7:9b:eb:27:71:31:b8:
fe:04:15:02:74:b1:ac:b8:5b:d1:09:9a:99:57:cd:d2:24:d1:
42:2c:3e:f7:e1:23:35:55:c5:84:27:55:08:73:6b:96:83:97:
73:9f:ae:54:6c:39:af:20:5c:64:ba:ef:79:df:92:eb:f8:70:
fe:2f:4e:a9
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQma6KKGwqu9Twwbq5pHozYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwMTAyMDk0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmIwYjE2NzJkNzZiZmJiYTk5ZTg4ODg2ODUyM2MxZGUzMTBiMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WWB10KycKejkXccgV6cxXEpKc7g
lu2iSEUbL8cSHIF8s5bZcTnhIitsLWJ+KXwIjajvwMdQnxIPQsC0G2YYX6Z4ebLS
s2Va5x4Pc12E1PTuZD0nD5j+B/SCqpP0C6Z6+sYRBoKplBzkedWFih/Fyo5x5W4g
4Tm5luJagL0ImtWsuIjjGAN9AcVNXMCuiuI2ANf2CcSwUTm3grPcAXdLMQVKN4I3
hniKsnUrlSwyo6u9wzDrCNyjNXhYpc8GJTHI4Ty6vktidjFHs4WvW2m9f+q60Epp
AfNZgZQarwmtrZTpr/v5KZBgf7zwITYcei7JMHVlUCoLcdR8HZvAjUCjOQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFDuwsWctdr+7qZ6IiGhSPB3jELI/MB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvTzdDeFp5MTJ2N3Vwbm9pSWFGSThIZU1Rc2o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHyjBAwQA
LY0NAwQAU4gwAwQAXbFvAwQAufBWAwQAwj6kAwQAwj6nMA0GCSqGSIb3DQEBCwUA
A4IBAQCTphrNtP+9aps36JnZj1eXrb+jiYAEYlVUHMlRGkfzuPwlVE9ZrS0fH5BJ
4gh2TV8Im3QpG5rOF4kxGgOgDzxn5xkcNhurYWn2vInFFjvMNeBSlG61BU1R0jdl
LdTZnhGTL93hBWvzQIEkf/PSMZFapRyviL8HS8m3eYgZqDnwd4zf3C+fx/mkHRwx
lMis9/eom92UY0LWNCZpkUylWGDcrUSmUa1xxBc1f66pEpPwNVZyVGqbWKEYzV2X
Mnu4a/eb6ydxMbj+BBUCdLGsuFvRCZqZV83SJNFCLD734SM1VcWEJ1UIc2uWg5dz
n65UbDmvIFxkuu9535Lr+HD+L06p
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:01 2025 by rpki-client