Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa
File: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (raw, json)
Hash identifier: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=
Subject key identifier: 3F:77:FF:5C:D4:AE:85:59:99:C9:1C:5D:00:F4:49:F3:86:0D:95:70
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F84C204CAEB8AC4965E35B5A998AF
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 82.150.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:84:c2:04:ca:eb:8a:c4:96:5e:35:b5:a9:98:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f77ff5cd4ae855999c91c5d00f449f3860d9570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:6f:23:bf:fe:da:59:58:e1:8b:f1:78:57:
86:fc:c9:3d:01:50:7a:ce:8b:1c:b4:77:62:af:4b:
21:8d:7a:c9:76:d2:1c:00:89:5a:25:a3:98:02:6e:
ed:1b:5d:0d:b4:50:8d:4b:e4:46:c3:f3:1d:43:94:
11:e5:15:02:3a:4d:ed:fc:56:72:9d:c2:bf:7a:ba:
66:38:4f:5a:e8:e5:b9:66:41:2b:55:37:14:0d:a3:
92:05:01:95:95:f4:09:bd:93:1c:3f:81:84:05:0d:
38:85:ff:95:ef:03:d2:bd:cc:70:b9:a7:ef:a4:57:
0b:85:78:76:bf:7d:a0:86:5f:3a:ae:44:2b:52:a8:
20:b4:5f:d6:36:05:fc:58:58:49:2d:9e:00:23:fa:
10:41:8e:06:51:38:e9:4f:ca:26:8e:0a:d5:98:aa:
4f:73:56:10:d2:1a:e5:60:e5:a7:4d:2c:3d:ba:a3:
81:ab:58:25:69:08:1a:38:4b:1f:9b:ae:01:12:5d:
e2:9e:2b:1b:c1:8a:08:6c:2a:de:e0:10:43:47:89:
47:24:ab:e9:e8:39:d6:76:d4:73:28:f6:14:11:be:
d9:57:f1:a3:2a:80:76:bf:dd:92:20:57:31:ce:94:
e7:b4:d7:95:59:04:0a:d8:c9:d7:2b:c6:87:e1:42:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:FF:5C:D4:AE:85:59:99:C9:1C:5D:00:F4:49:F3:86:0D:95:70
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ea:7b:9f:30:34:4f:dd:4b:7a:a3:cc:63:02:2d:11:76:de:
2f:ff:fa:e1:d3:22:b7:19:cd:92:bd:83:d8:cb:d1:a1:f9:c3:
0e:68:aa:d9:ec:d6:0f:32:b0:36:13:81:02:da:74:98:03:c9:
5b:24:63:43:d2:95:aa:5f:39:25:e6:89:7b:ff:e7:fd:a0:3c:
d5:83:2a:24:fb:6b:2a:17:a6:de:e7:fa:32:35:13:fb:ab:31:
d1:f6:aa:48:13:5e:8e:16:6f:e1:04:83:82:0a:6a:7a:54:50:
ea:93:ea:40:26:94:24:56:8c:b1:42:3b:d2:ef:c2:0f:ac:6a:
27:22:35:0c:01:26:52:39:70:93:9c:d1:a6:c2:4e:e7:b7:df:
53:1a:39:c1:7d:42:28:b5:7a:26:f5:be:09:8a:b2:d3:24:37:
40:d4:64:87:45:6b:78:3f:f6:f8:a2:38:9b:cd:5f:d2:96:75:
f3:c5:2f:7f:ae:e9:af:d8:2d:4b:eb:fb:9c:b4:27:ba:a5:77:
38:0c:63:a4:6d:48:10:54:b9:3c:15:36:c8:8f:7f:92:51:6b:
32:11:60:4d:c6:c9:f1:7d:2e:10:f9:f3:05:d3:15:c6:29:65:
02:5f:4f:e4:19:75:90:e2:49:12:0f:1b:84:d6:34:4b:95:a3:
9a:35:a8:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj4TCBMrrisSWXjW1qZivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjUwMTAyMDU0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjc3ZmY1Y2Q0YWU4NTU5OTljOTFjNWQwMGY0NDlmMzg2MGQ5NTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBZvI7/+2llY4YvxeFeG/Mk9AVB6
zosctHdir0shjXrJdtIcAIlaJaOYAm7tG10NtFCNS+RGw/MdQ5QR5RUCOk3t/FZy
ncK/erpmOE9a6OW5ZkErVTcUDaOSBQGVlfQJvZMcP4GEBQ04hf+V7wPSvcxwuafv
pFcLhXh2v32ghl86rkQrUqggtF/WNgX8WFhJLZ4AI/oQQY4GUTjpT8omjgrVmKpP
c1YQ0hrlYOWnTSw9uqOBq1glaQgaOEsfm64BEl3inisbwYoIbCre4BBDR4lHJKvp
6DnWdtRzKPYUEb7ZV/GjKoB2v92SIFcxzpTntNeVWQQK2MnXK8aH4UJVVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD93/1zUroVZmckcXQD0SfOGDZVwMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvUDNmX1hOU3VoVm1aeVJ4ZEFQUko4NFlObFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaYMA0G
CSqGSIb3DQEBCwUAA4IBAQAr6nufMDRP3Ut6o8xjAi0Rdt4v//rh0yK3Gc2SvYPY
y9Gh+cMOaKrZ7NYPMrA2E4EC2nSYA8lbJGND0pWqXzkl5ol7/+f9oDzVgyok+2sq
F6be5/oyNRP7qzHR9qpIE16OFm/hBIOCCmp6VFDqk+pAJpQkVoyxQjvS78IPrGon
IjUMASZSOXCTnNGmwk7nt99TGjnBfUIotXom9b4JirLTJDdA1GSHRWt4P/b4ojib
zV/SlnXzxS9/rumv2C1L6/uctCe6pXc4DGOkbUgQVLk8FTbIj3+SUWsyEWBNxsnx
fS4Q+fMF0xXGKWUCX0/kGXWQ4kkSDxuE1jRLlaOaNahM
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:54 2025 by rpki-client