Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/w3B_b_hTCziVeuO8PCcq3YSHu2s.roa
File: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (raw, json)
Hash identifier: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=
Subject key identifier: C3:70:7F:6F:F8:53:0B:38:95:7A:E3:BC:3C:27:2A:DD:84:87:BB:6B
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D65544C020B0176798ED1840BD274C
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/w3B_b_hTCziVeuO8PCcq3YSHu2s.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200422
IP address blocks: 94.155.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:55:44:c0:20:b0:17:67:98:ed:18:40:bd:27:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3707f6ff8530b38957ae3bc3c272add8487bb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:87:cd:3f:99:e6:f2:10:1f:75:20:fa:ba:
59:76:68:2e:e2:38:e9:14:15:f4:bd:1b:37:f0:e2:
b4:f2:8c:9e:e6:88:36:67:65:61:fc:cc:17:c4:49:
d0:31:c8:69:a4:44:43:ff:30:bb:6e:6a:57:cb:b1:
fd:6a:ea:11:12:00:dc:85:46:20:35:ff:e8:cc:63:
3b:28:11:9b:0e:23:01:ae:b2:f6:16:57:cd:67:8e:
4c:3e:6a:57:c6:bd:ce:e3:c0:31:0e:e0:d5:b8:ec:
8b:f5:a7:b5:e4:25:cf:b1:a0:5b:98:44:46:d1:b0:
27:98:91:65:e3:ab:c8:69:20:96:39:55:49:a8:74:
d5:80:44:ed:2d:1c:3f:a6:35:fc:f5:a3:85:fa:05:
b2:80:f5:5e:4d:29:de:44:d5:50:79:04:73:3d:93:
85:52:ae:68:fb:de:9d:5f:21:19:22:2c:6c:35:6d:
73:77:d5:45:13:4b:37:89:42:13:1c:b8:6c:3a:e0:
4d:88:8e:a8:ea:1e:8c:95:50:22:98:3c:ff:b6:a7:
cf:54:99:8f:07:e9:05:85:57:c4:a0:4e:c5:d2:b0:
ee:a2:34:d1:0f:ae:dd:bc:7c:07:e4:90:68:f8:03:
a2:f5:c2:e5:58:61:b8:da:69:cc:d4:bf:fe:0f:80:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:7F:6F:F8:53:0B:38:95:7A:E3:BC:3C:27:2A:DD:84:87:BB:6B
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/w3B_b_hTCziVeuO8PCcq3YSHu2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
be:20:f4:09:50:83:32:e4:74:83:d4:62:5f:d5:7f:d7:d3:04:
85:29:83:a0:e9:4e:7f:aa:06:39:fb:01:78:13:ed:b9:15:4a:
dc:ab:25:27:13:34:c8:48:bc:a5:f2:30:4e:17:46:56:1a:d6:
37:27:71:4d:5f:1a:53:e7:d0:a2:39:e4:48:f2:ef:e7:1a:62:
e9:94:33:16:a0:6a:9f:f5:1a:28:c4:6a:96:09:86:56:00:74:
46:40:81:d7:27:3a:26:6f:aa:69:dc:1e:5d:6c:74:b1:4e:ec:
ff:23:8e:9c:89:8a:5f:26:18:e9:0a:7f:6a:b3:86:e5:e1:3c:
8f:11:ab:8d:fc:04:5c:62:f2:ce:c5:a7:3b:b3:a8:f5:3f:c5:
ae:c6:82:1a:43:1e:67:2b:c1:a4:bb:7e:ab:39:b0:a1:69:87:
a4:60:16:e7:8c:20:19:91:50:af:58:d9:cb:ec:40:82:fc:4a:
95:08:6b:69:82:14:11:e4:10:de:80:11:c7:00:b7:d3:14:12:
9a:50:03:e0:f8:e2:ec:3b:87:44:61:f7:3c:8b:34:db:5d:6a:
82:95:00:d0:fc:d8:1f:cd:87:6c:04:97:4a:7e:86:dd:97:32:
9c:aa:c1:8c:57:eb:c4:1d:54:e0:14:81:e4:c4:e5:4c:cb:d4:
29:c5:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:55:39 2025 by rpki-client