Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/3HH58WmzWmQCD-OlTJN8dT8qa1M.roa
File: 3HH58WmzWmQCD-OlTJN8dT8qa1M.roa (raw, json)
Hash identifier: of/nshXajmaTh0hvVJ+3GLNAI3gzOJPgVJPnBaDun6w=
Subject key identifier: DC:71:F9:F1:69:B3:5A:64:02:0F:E3:A5:4C:93:7C:75:3F:2A:6B:53
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F81EF386BDC95B9417508F98F4AB4
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/3HH58WmzWmQCD-OlTJN8dT8qa1M.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6807
IP address blocks: 195.178.155.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
2a01:5c40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:81:ef:38:6b:dc:95:b9:41:75:08:f9:8f:4a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc71f9f169b35a64020fe3a54c937c753f2a6b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:79:59:b4:47:84:11:19:32:bb:c5:d2:0a:
a8:97:5b:45:c8:15:99:4f:6e:88:89:c5:19:37:f6:
1f:32:7b:2d:65:cc:7e:c0:02:2e:52:5e:78:d5:12:
cc:5e:63:85:c3:65:07:ec:90:ee:db:c3:5d:b4:38:
46:ca:80:e7:39:6f:67:55:89:49:31:83:37:d5:ef:
a5:e2:90:02:0d:25:75:be:7c:48:96:76:06:4d:c5:
1a:77:d4:3a:50:f8:99:8b:16:f1:9b:2d:d8:30:8f:
30:d5:f2:64:79:00:4c:ad:0d:7e:13:a7:1d:34:2c:
64:74:60:fa:95:94:99:5e:de:a4:e0:ee:eb:09:75:
d4:78:70:71:9d:59:33:ba:75:8f:8f:b2:7d:62:2c:
8f:2e:48:fd:6f:38:7a:8c:e6:e8:9f:f4:f2:b5:b5:
3d:34:4b:30:af:34:fe:be:ce:87:d1:92:71:a4:c0:
61:01:21:7e:b3:2c:5b:a4:d3:24:77:2f:b0:2e:2c:
92:39:3f:c9:d4:7d:1f:f1:ca:d7:a8:ad:bb:89:29:
54:75:45:48:1b:0d:2b:0e:95:4c:5c:01:d8:12:2f:
48:8b:65:f5:68:2b:45:40:5a:26:e0:bb:8d:96:f3:
c0:07:c8:e9:45:4c:74:ae:59:0f:a6:40:3e:a9:35:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:71:F9:F1:69:B3:5A:64:02:0F:E3:A5:4C:93:7C:75:3F:2A:6B:53
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/3HH58WmzWmQCD-OlTJN8dT8qa1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.155.0/24
212.111.194.0/24
IPv6:
2a01:5c40:3::/48
Signature Algorithm: sha256WithRSAEncryption
c3:b5:5a:3a:dd:eb:a2:3d:04:a4:16:89:46:54:ed:c2:49:71:
56:96:6d:a0:a5:64:da:b6:28:b1:d7:0f:84:7e:e6:f3:fd:e3:
41:ba:24:9b:cf:b0:33:95:39:a2:f1:09:ed:79:fa:fe:39:59:
33:78:8c:ec:05:76:a7:a4:6c:c2:96:0b:a0:de:1e:0b:e9:06:
20:a0:29:5c:b8:74:59:90:dd:7d:74:aa:f7:cb:39:83:86:22:
93:0e:28:49:a0:9a:cd:21:09:2b:23:f0:c4:ee:85:0c:c5:be:
b8:d1:fc:82:b2:2b:28:aa:fd:5e:cf:05:22:c2:cb:07:b3:95:
d3:a3:4a:c2:40:5b:2b:a9:93:22:c3:03:cb:49:8d:f6:7d:d3:
bd:ca:63:b7:99:41:b0:f5:86:9d:4c:a6:07:0e:77:cc:b7:fa:
f3:c1:26:e0:73:a3:e4:7f:25:c5:5b:d3:de:b8:67:75:b9:30:
7b:02:4b:2a:29:7c:c5:d3:e6:62:df:82:47:8f:ce:8a:0f:de:
cb:0e:49:f9:a0:f9:77:93:18:67:26:57:27:13:fd:a9:28:40:
6d:29:2c:b5:d5:64:a4:5e:53:d7:b5:10:b6:81:34:bf:df:28:
f7:8f:4e:a3:cf:f8:9a:64:90:07:7e:d8:a5:dc:da:cb:63:43:
48:d0:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:16 2025 by rpki-client