Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/3_aLlMCZrFNyrDqx_8nf23jx9U8.roa
File: 3_aLlMCZrFNyrDqx_8nf23jx9U8.roa (raw, json)
Hash identifier: a8Ve5VVmClDkiSHwLRYAsujqRGwPwv/c9KSL3svTGpw=
Subject key identifier: DF:F6:8B:94:C0:99:AC:53:72:AC:3A:B1:FF:C9:DF:DB:78:F1:F5:4F
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 01942067D75F33ACC6ABA639EDC5B76CD4C9
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/3_aLlMCZrFNyrDqx_8nf23jx9U8.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215311
IP address blocks: 193.56.135.0/24 maxlen: 24
2a14:4200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d7:5f:33:ac:c6:ab:a6:39:ed:c5:b7:6c:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dff68b94c099ac5372ac3ab1ffc9dfdb78f1f54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:ea:d1:bb:59:dc:49:6a:3e:ed:c5:e3:ed:
d1:a9:df:c3:2d:48:db:29:45:d4:a5:37:1b:39:da:
8f:01:fa:69:a3:d7:71:73:c6:51:bd:22:d6:b2:ac:
9b:2e:e7:3f:30:05:69:f7:c9:45:92:c4:8e:2b:2a:
97:cb:99:e0:df:62:5d:5c:52:d8:6a:1a:90:d1:fd:
97:a5:57:90:cf:e7:0f:4b:0c:4f:eb:f1:26:b8:55:
05:1d:e6:5b:6c:41:d6:76:80:8e:4b:18:32:0f:e7:
ee:43:60:c7:48:1b:11:38:b3:82:85:e4:0e:5f:d4:
5d:36:32:c8:09:ca:c9:ab:4a:3c:e3:39:d1:25:d1:
a2:e1:19:a3:4a:16:c4:03:6c:bc:0e:9f:e0:f2:8d:
ed:7a:26:10:e7:a3:17:91:7f:55:b5:d0:fc:f6:7e:
d4:66:20:58:c6:81:99:dd:f6:93:e2:f2:37:6e:c8:
80:66:51:4b:c5:cf:d2:31:66:06:9f:2c:6f:a9:b0:
a5:fe:9b:f3:65:c7:ef:62:ab:90:2d:67:d1:10:83:
cf:36:d1:61:53:49:2f:ae:4b:5b:e0:30:77:da:db:
7f:22:d4:6d:b3:cf:10:3d:5a:3b:d2:d9:54:a1:c1:
71:24:64:89:f3:0b:e2:b6:a9:34:69:33:cb:1c:f9:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F6:8B:94:C0:99:AC:53:72:AC:3A:B1:FF:C9:DF:DB:78:F1:F5:4F
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/3_aLlMCZrFNyrDqx_8nf23jx9U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.135.0/24
IPv6:
2a14:4200::/29
Signature Algorithm: sha256WithRSAEncryption
c4:1a:19:7e:cf:f7:ee:22:c4:2c:97:1d:60:c8:08:51:7e:0d:
31:11:10:2a:d0:16:0c:df:47:db:80:45:04:2a:5a:e9:ee:b1:
dc:42:34:04:d3:f1:aa:ea:2d:01:eb:60:cb:71:ff:d0:70:93:
6f:0e:21:e3:d2:a4:14:8c:54:8b:ee:62:8e:a2:fe:95:ed:5d:
f6:99:f2:e1:5f:cd:0a:77:6b:a0:0f:38:d8:b7:b0:44:61:61:
8a:39:a5:81:9f:dd:d8:07:bb:c4:03:63:a0:72:d8:9f:65:f9:
fd:df:55:49:4e:24:d6:87:09:16:7f:74:9e:21:73:77:fd:68:
b1:dd:70:db:9e:c0:cf:7a:e4:b7:bb:39:5c:73:8c:3f:2f:14:
50:4e:c0:fb:ef:0d:48:83:08:e4:94:0b:5a:2f:90:b3:46:f6:
9d:01:70:52:80:ef:74:85:98:d2:e2:ca:83:64:95:64:9d:c2:
90:ae:74:a2:cc:34:55:66:a2:aa:bb:fb:4d:e7:a4:f2:12:65:
da:10:31:a0:dc:1e:32:9c:c5:e5:24:94:c8:93:02:37:b1:3f:
f9:f1:af:66:8e:8b:aa:bc:07:0b:2b:13:cb:c0:4f:b1:4e:1e:
c4:0d:cb:5d:44:d2:d4:90:09:ed:bd:9b:6a:0f:38:72:cf:95:
dd:e4:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:05:59 2025 by rpki-client