Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/rm3UHUFplAChrToLa297UrTCIuo.roa
File: rm3UHUFplAChrToLa297UrTCIuo.roa (raw, json)
Hash identifier: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=
Subject key identifier: AE:6D:D4:1D:41:69:94:00:A1:AD:3A:0B:6B:6F:7B:52:B4:C2:22:EA
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019426D8A592833ED92941342B6202C9BBA1
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/rm3UHUFplAChrToLa297UrTCIuo.roa
Signing time: Thu 02 Jan 2025 11:48:39 +0000
ROA not before: Thu 02 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209090
IP address blocks: 80.67.186.0/24 maxlen: 24
2001:913:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a5:92:83:3e:d9:29:41:34:2b:62:02:c9:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae6dd41d41699400a1ad3a0b6b6f7b52b4c222ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:c5:13:f6:c3:c5:c6:69:8b:2e:1e:52:85:
22:d8:49:a0:9b:4b:4b:4c:a0:a1:d9:c6:4a:a3:03:
ec:16:09:23:5d:f3:a6:63:83:8a:2b:b1:a8:0b:c8:
c9:3a:1f:17:49:0b:e0:95:03:bf:d3:9a:c6:84:21:
45:7a:07:d1:dd:9c:ca:72:f2:3e:91:a6:3e:8b:99:
b1:d0:f1:df:0a:80:be:42:1a:3a:57:16:e3:fe:df:
a8:bd:ab:ec:5f:76:16:4f:19:01:93:8e:fd:d6:0d:
28:60:41:fe:9c:7a:22:5f:f4:67:7d:d4:be:df:00:
6b:73:cb:ac:a5:2d:75:8e:81:97:4e:f0:b0:62:11:
bb:e2:c0:d7:92:2d:a9:ca:f1:f2:70:b4:66:dc:d3:
55:a2:f9:b8:9a:cb:da:91:21:d4:8a:b1:d3:d0:44:
fd:31:19:38:7d:c2:f7:32:df:5f:36:31:01:e1:5f:
5e:35:b7:86:08:ab:b8:b0:72:12:8e:52:40:f9:73:
52:b7:cf:48:c4:51:b3:a4:f6:7a:3e:7c:c8:be:59:
eb:0c:12:17:9b:16:50:07:63:1c:59:19:19:fd:6c:
57:c7:25:f1:0c:0b:90:42:53:8c:24:71:07:3d:91:
e4:26:8e:4a:eb:cc:fa:23:e7:6c:00:a6:8f:0e:f9:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6D:D4:1D:41:69:94:00:A1:AD:3A:0B:6B:6F:7B:52:B4:C2:22:EA
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/rm3UHUFplAChrToLa297UrTCIuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.186.0/24
IPv6:
2001:913:5000::/36
Signature Algorithm: sha256WithRSAEncryption
c2:f8:64:52:0b:2b:35:b5:72:5e:3b:f1:d1:d5:97:91:58:0f:
b0:99:4d:4e:97:31:67:21:d1:0f:7f:4e:b6:b1:8f:c8:e8:7b:
06:df:a3:f4:9c:bf:f6:5f:3e:b9:4c:fc:ab:f7:4c:32:63:64:
b5:b1:6e:86:37:3a:5c:d0:8f:87:3e:f8:46:22:cc:52:27:ee:
44:f3:5e:ed:85:97:7c:66:20:e4:9b:42:de:4e:37:33:89:ac:
ec:a2:4a:89:a6:2a:2e:4f:42:5e:7e:7f:5f:1e:a7:1f:bc:8e:
69:8a:4c:75:41:b7:67:57:73:0f:f2:64:ab:13:5b:fe:ba:de:
55:65:dc:b2:26:37:bb:ca:97:22:6f:f0:05:04:56:09:15:75:
29:df:4c:87:1d:60:2e:d6:4d:8c:14:99:88:58:5b:00:33:54:
0f:7d:42:bd:ea:b0:eb:a8:bd:aa:c4:cc:bf:6e:6e:a4:02:74:
f3:97:bb:c3:e5:a7:9b:be:78:90:8c:1c:21:54:fd:2c:44:e1:
60:ec:9f:23:05:ad:63:bd:30:de:15:56:f1:78:03:fa:a0:58:
23:f1:87:26:ee:6b:3b:0f:4a:f6:75:72:62:72:ec:fb:df:39:
28:93:e9:ed:3f:cd:43:26:f5:95:8c:9f:9c:a4:98:24:b2:13:
47:68:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:48 2025 by rpki-client