Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/R3FrJ7azRWeXMsdR6lJsvB98e9w.roa
File: R3FrJ7azRWeXMsdR6lJsvB98e9w.roa (raw, json)
Hash identifier: OLdkmQ3yiWqrLjLdUAsWXaOdC7/R8xEElXuDqmUjdPs=
Subject key identifier: 47:71:6B:27:B6:B3:45:67:97:32:C7:51:EA:52:6C:BC:1F:7C:7B:DC
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 0195CD04F87BA7546D7BAA43102F9E71E0EE
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/R3FrJ7azRWeXMsdR6lJsvB98e9w.roa
Signing time: Tue 25 Mar 2025 11:16:49 +0000
ROA not before: Tue 25 Mar 2025 11:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.42.176.0/23 maxlen: 24
37.16.75.0/24 maxlen: 24
91.202.4.0/23 maxlen: 24
91.239.76.0/24 maxlen: 24
2a11:6100::/32 maxlen: 32
2a11:6101::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:04:f8:7b:a7:54:6d:7b:aa:43:10:2f:9e:71:e0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Mar 25 11:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47716b27b6b345679732c751ea526cbc1f7c7bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:03:35:50:32:59:44:7b:48:2b:8e:7f:f0:b1:
9a:e8:f8:c7:ad:37:34:d6:47:c6:8d:4b:bf:f7:3e:
8f:93:45:1c:a1:eb:a0:7f:c6:00:2d:73:8d:d4:cd:
b8:01:85:52:03:a7:74:1a:e8:04:69:62:89:72:3f:
11:6c:b4:65:de:8c:12:4b:ff:d8:f3:a8:2e:90:70:
2d:c2:e5:91:07:df:71:77:7b:33:33:7e:38:d3:1c:
98:76:ac:10:6b:95:ef:87:64:ce:e1:2d:4d:f0:32:
3b:f0:9d:ca:05:17:a7:ee:53:5d:d5:7b:ab:6a:bb:
4f:5b:a9:af:7b:dd:af:9c:57:dc:11:ca:63:52:8e:
3a:be:bd:21:3a:15:8f:fd:c6:53:dd:19:93:8d:d7:
f5:77:95:90:39:c8:30:1f:09:46:c6:8f:94:f6:6f:
f5:3a:8b:d7:3e:51:73:45:c2:18:62:7a:b8:43:a5:
8c:2b:25:b6:9c:21:69:88:fa:d4:93:fb:bf:b0:a0:
40:b7:63:8e:0c:69:1c:f0:89:d0:f8:2b:ae:c5:33:
c7:a5:d7:f7:17:ee:9b:60:15:35:9d:b5:6d:d6:0a:
32:bb:cb:24:26:c3:ad:1f:10:10:ff:1f:86:23:50:
5b:d1:b3:9e:f7:1d:00:37:49:02:4c:da:63:4a:07:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:6B:27:B6:B3:45:67:97:32:C7:51:EA:52:6C:BC:1F:7C:7B:DC
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/R3FrJ7azRWeXMsdR6lJsvB98e9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.176.0/23
37.16.75.0/24
91.202.4.0/23
91.239.76.0/24
IPv6:
2a11:6100::/31
Signature Algorithm: sha256WithRSAEncryption
ab:53:ec:78:0f:9e:05:82:76:f2:02:e7:a0:7c:40:99:3f:53:
cc:82:aa:34:22:21:cd:01:5f:04:06:c6:df:33:da:36:2c:0d:
d0:ac:36:ba:d6:9b:7e:28:d3:a7:75:91:58:f4:52:d8:23:89:
83:4f:2b:24:4c:8c:bc:3a:cf:72:9c:97:b2:dc:8f:ee:dc:bc:
c4:95:20:51:d6:4f:a0:23:82:c5:03:9a:ff:bd:47:e9:0d:a3:
ad:eb:54:cf:e4:ca:5a:f0:a3:13:0d:0a:fb:22:34:c5:a5:18:
06:f8:78:7d:ae:0c:57:db:46:a7:ac:ff:10:25:72:e4:b3:40:
10:b7:70:6b:1e:b8:2d:1d:2e:69:9a:44:de:7a:cf:ee:16:ba:
cc:cc:31:9b:ce:3a:44:85:d2:b4:28:86:6e:2c:1c:8d:a9:dc:
1f:02:14:87:89:0f:37:91:7f:34:78:c9:3d:86:0f:49:6b:41:
f9:51:2e:1c:05:6e:3d:34:59:53:6b:ac:13:83:b5:ad:93:0f:
3a:67:ce:8e:a8:20:d7:08:a9:99:cc:11:fa:5f:9b:2d:f7:5e:
13:10:7e:f8:ed:ca:6b:bf:c5:3b:33:32:fd:4e:c6:a4:fc:8d:
09:21:e3:26:c7:25:75:1d:9e:20:85:be:f3:41:c9:61:b2:82:
2f:4b:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:36 2025 by rpki-client