Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa
File: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (raw, json)
Hash identifier: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=
Subject key identifier: DE:8D:8E:84:45:FC:0F:E0:BD:B1:6D:71:A3:BF:E3:94:E9:83:FE:3D
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 0194258EDD5550537CCBC0EBD0FC78C4F61E
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa
Signing time: Thu 02 Jan 2025 05:48:27 +0000
ROA not before: Thu 02 Jan 2025 05:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206098
IP address blocks: 185.193.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:dd:55:50:53:7c:cb:c0:eb:d0:fc:78:c4:f6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de8d8e8445fc0fe0bdb16d71a3bfe394e983fe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:65:5d:eb:de:6e:d2:42:6d:c0:03:50:aa:
4f:10:35:87:20:3d:a8:d0:cd:65:62:db:e3:b9:cc:
93:d6:c1:9b:c4:1e:76:e0:bd:05:ee:50:81:84:a8:
d4:88:9c:bb:6e:4d:12:2b:32:c3:73:ae:08:d7:16:
5a:0f:c8:ef:0c:e3:1f:eb:82:51:ef:82:9c:67:c8:
ba:76:62:97:bc:66:c4:b1:6e:14:7e:98:6a:17:33:
47:cc:40:3e:b5:fc:5f:4b:ce:96:c9:35:a7:9b:27:
30:d9:f1:5d:67:39:b8:e1:9b:43:46:d4:fe:9b:04:
e0:92:dc:6b:ab:8f:21:58:45:9b:c2:a2:5d:be:6c:
9c:46:4e:98:3f:41:d3:d9:74:8e:c8:e4:0c:4c:77:
04:a3:d0:70:2d:cf:23:ca:b4:9e:a1:71:80:3d:a3:
50:02:f9:56:88:77:75:a6:c1:23:a2:8c:ae:21:2e:
07:93:eb:7a:4d:ba:5a:97:27:2b:02:3c:9a:69:47:
23:9a:4f:0a:8d:ba:30:10:8b:a6:44:e9:23:79:b7:
69:bc:1f:38:c0:83:39:c3:9b:97:38:27:a1:4f:71:
77:0d:71:a3:0d:23:1d:8b:ac:03:cd:ba:d9:a1:a5:
35:86:ba:30:d5:29:1d:9b:8c:04:bd:89:5d:3c:a4:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8D:8E:84:45:FC:0F:E0:BD:B1:6D:71:A3:BF:E3:94:E9:83:FE:3D
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.58.0/24
Signature Algorithm: sha256WithRSAEncryption
27:69:30:ad:8c:44:fb:d3:25:eb:86:d5:da:65:4c:fe:ac:24:
e8:c1:5c:54:9d:c2:a4:87:55:a8:56:23:96:2b:6c:7e:bf:5e:
a8:10:c2:a3:9f:19:d2:6c:8d:dd:ec:a1:c9:a2:35:f6:26:6a:
c5:04:4f:b1:f6:76:5d:c9:8f:ca:61:cb:45:aa:a1:33:9f:be:
68:06:39:e3:93:b3:5f:38:21:2e:45:fb:c8:87:e1:c8:fa:8d:
e3:db:37:a1:3c:ea:a4:0f:b1:98:20:52:68:f5:f1:63:f6:54:
6b:1d:5f:a7:3a:3d:c9:5d:c6:f5:68:06:f2:29:a8:0f:05:9f:
b2:fd:9b:f3:bd:e4:b0:4b:78:4f:74:a4:34:f0:0a:da:0c:f5:
86:ad:ab:8a:d9:af:a0:fc:4b:8d:7d:f3:09:18:98:92:a3:b0:
2b:dd:d6:c4:11:fa:8c:97:dd:77:e8:e6:b6:c6:0a:b1:5f:cd:
3d:2f:c9:ea:e9:da:70:da:c4:3e:02:81:b2:02:72:3b:17:51:
9e:46:ff:8e:0e:cc:d2:38:f6:5e:5f:5b:90:95:23:bb:f5:f5:
72:b1:ab:4d:80:41:ca:ec:04:ba:30:29:02:d9:f5:04:04:fe:
1b:f4:54:91:c0:5d:d2:3a:15:76:e6:30:a3:b4:4f:74:97:82:
c4:ef:79:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljt1VUFN8y8Dr0Px4xPYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZmM0OTE5NWE0MzlkNWI5ZDcxMTJiMzM2MDE1ZWVlMmM5
NDRkODkwHhcNMjUwMTAyMDU0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZThkOGU4NDQ1ZmMwZmUwYmRiMTZkNzFhM2JmZTM5NGU5ODNmZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjVlXevebtJCbcADUKpPEDWHID2o
0M1lYtvjucyT1sGbxB524L0F7lCBhKjUiJy7bk0SKzLDc64I1xZaD8jvDOMf64JR
74KcZ8i6dmKXvGbEsW4UfphqFzNHzEA+tfxfS86WyTWnmycw2fFdZzm44ZtDRtT+
mwTgktxrq48hWEWbwqJdvmycRk6YP0HT2XSOyOQMTHcEo9BwLc8jyrSeoXGAPaNQ
AvlWiHd1psEjooyuIS4Hk+t6TbpalycrAjyaaUcjmk8KjbowEIumROkjebdpvB84
wIM5w5uXOCehT3F3DXGjDSMdi6wDzbrZoaU1hrow1Skdm4wEvYldPKQE+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN6NjoRF/A/gvbFtcaO/45Tpg/49MB8GA1UdIwQY
MBaAFN/8SRlaQ51bnXESszYBXu4slE2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4Yzct
N2ViYjZiOWUzNjlkLzEvM28yT2hFWDhELUM5c1cxeG83X2psT21EX2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4YzctN2ViYjZiOWUzNjlk
LzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucE6MA0G
CSqGSIb3DQEBCwUAA4IBAQAnaTCtjET70yXrhtXaZUz+rCTowVxUncKkh1WoViOW
K2x+v16oEMKjnxnSbI3d7KHJojX2JmrFBE+x9nZdyY/KYctFqqEzn75oBjnjk7Nf
OCEuRfvIh+HI+o3j2zehPOqkD7GYIFJo9fFj9lRrHV+nOj3JXcb1aAbyKagPBZ+y
/ZvzveSwS3hPdKQ08AraDPWGrauK2a+g/EuNffMJGJiSo7Ar3dbEEfqMl9136Oa2
xgqxX809L8nq6dpw2sQ+AoGyAnI7F1GeRv+ODszSOPZeX1uQlSO79fVysatNgEHK
7AS6MCkC2fUEBP4b9FSRwF3SOhV25jCjtE90l4LE73kZ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:35 2025 by rpki-client