Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa
File: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (raw, json)
Hash identifier: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=
Subject key identifier: 0D:0F:58:D9:32:88:41:07:E7:02:49:79:74:3D:56:62:01:99:7D:32
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5B1C2C6DE49F8A660BAE62251901F
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211332
IP address blocks: 62.3.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b1:c2:c6:de:49:f8:a6:60:ba:e6:22:51:90:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d0f58d932884107e7024979743d566201997d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:77:cd:44:59:8a:3b:52:e2:70:c9:26:58:
73:2f:10:14:d4:24:48:5e:42:f2:64:d1:19:a6:74:
92:a5:cc:89:a4:88:f1:3f:4a:e5:78:df:31:46:51:
d5:71:a0:21:76:28:6a:61:32:1c:07:91:5a:35:91:
6d:3e:94:fc:ee:30:14:11:81:24:cc:d8:64:e8:4f:
fa:e5:9a:78:2d:34:fc:18:1e:87:47:cf:e0:75:4c:
16:4f:7f:eb:08:94:6f:8a:31:eb:55:7c:ea:b8:d9:
b4:1a:fc:a2:6f:77:17:40:41:bf:e3:f1:91:82:e4:
fa:e6:d9:5d:3c:a4:de:6f:fb:99:a4:e3:5b:1e:8b:
8a:11:e4:53:b8:f1:fe:ab:3a:a2:f1:06:a5:b3:6e:
f4:2d:51:da:19:f8:fc:b1:74:f5:5b:2d:ed:fb:87:
ad:97:68:56:d3:19:50:d7:55:a9:9a:87:9e:c4:74:
2b:69:2c:5f:76:35:57:6b:4d:f6:a6:fc:5b:1d:bd:
1b:49:6b:ab:f6:42:15:f8:22:7e:f9:3f:15:68:83:
d6:6c:4e:69:0e:45:8b:0e:c2:bf:90:da:08:d3:6e:
68:52:11:05:d2:23:90:6f:26:9e:88:30:10:cd:a6:
52:46:39:8f:1b:3e:3c:2d:09:24:63:c0:da:2d:71:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0F:58:D9:32:88:41:07:E7:02:49:79:74:3D:56:62:01:99:7D:32
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.26.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0a:e5:49:a0:74:5d:b3:f6:25:31:cd:be:32:df:c5:9d:7c:
70:c1:4f:44:ad:e1:ca:33:73:20:e0:0f:0e:93:16:cf:c0:45:
8b:ab:ca:9d:64:cc:73:84:72:70:a6:e7:7f:50:06:44:8a:9b:
96:41:24:11:44:b9:94:85:05:e8:fc:f9:47:45:0e:66:3a:6e:
63:ec:59:79:0a:be:46:89:ca:4d:24:9c:0d:bb:ac:72:65:2a:
86:4a:88:b7:2a:5b:e1:60:7e:da:84:a6:33:33:63:ec:4d:e8:
77:c6:71:ed:54:3f:50:46:4c:bb:43:0a:77:da:61:48:71:79:
97:f9:e4:f8:5a:9d:0b:09:23:30:f4:83:e2:9c:63:3c:5b:a6:
81:05:dc:30:53:6c:c0:33:c0:55:61:68:8d:e1:17:8b:8f:7a:
91:d1:1d:d1:33:ad:1e:53:e8:86:7f:61:e2:15:6a:f4:57:e3:
dd:90:1b:cc:43:e6:27:51:fc:6d:b8:6f:90:31:9d:4e:f8:80:
13:74:d9:d0:68:c7:2f:b3:92:58:01:55:fa:cf:79:9a:22:39:
37:0f:64:d8:51:11:08:ae:28:20:0b:2d:99:5f:cd:96:02:18:
88:30:0a:76:50:00:84:0a:18:a6:66:d0:09:d8:18:80:68:b6:
c4:38:07:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntbHCxt5J+KZguuYiUZAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjUwMTAyMTU1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDBmNThkOTMyODg0MTA3ZTcwMjQ5Nzk3NDNkNTY2MjAxOTk3ZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9l3zURZijtS4nDJJlhzLxAU1CRI
XkLyZNEZpnSSpcyJpIjxP0rleN8xRlHVcaAhdihqYTIcB5FaNZFtPpT87jAUEYEk
zNhk6E/65Zp4LTT8GB6HR8/gdUwWT3/rCJRvijHrVXzquNm0Gvyib3cXQEG/4/GR
guT65tldPKTeb/uZpONbHouKEeRTuPH+qzqi8Qals270LVHaGfj8sXT1Wy3t+4et
l2hW0xlQ11WpmoeexHQraSxfdjVXa032pvxbHb0bSWur9kIV+CJ++T8VaIPWbE5p
DkWLDsK/kNoI025oUhEF0iOQbyaeiDAQzaZSRjmPGz48LQkkY8DaLXGL6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0PWNkyiEEH5wJJeXQ9VmIBmX0yMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvRFE5WTJUS0lRUWZuQWtsNWREMVdZZ0daZlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMaMA0G
CSqGSIb3DQEBCwUAA4IBAQAXCuVJoHRds/YlMc2+Mt/FnXxwwU9EreHKM3Mg4A8O
kxbPwEWLq8qdZMxzhHJwpud/UAZEipuWQSQRRLmUhQXo/PlHRQ5mOm5j7Fl5Cr5G
icpNJJwNu6xyZSqGSoi3KlvhYH7ahKYzM2PsTeh3xnHtVD9QRky7Qwp32mFIcXmX
+eT4Wp0LCSMw9IPinGM8W6aBBdwwU2zAM8BVYWiN4ReLj3qR0R3RM60eU+iGf2Hi
FWr0V+PdkBvMQ+YnUfxtuG+QMZ1O+IATdNnQaMcvs5JYAVX6z3maIjk3D2TYUREI
riggCy2ZX82WAhiIMAp2UACEChimZtAJ2BiAaLbEOAc3
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:42 2025 by rpki-client