Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/P3XxS3_mq-k03JC18lyjAECzFgE.roa
File: P3XxS3_mq-k03JC18lyjAECzFgE.roa (raw, json)
Hash identifier: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=
Subject key identifier: 3F:75:F1:4B:7F:E6:AB:E9:34:DC:90:B5:F2:5C:A3:00:40:B3:16:01
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0194228D1A183BAC47372DD33565BB177D27
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/P3XxS3_mq-k03JC18lyjAECzFgE.roa
Signing time: Wed 01 Jan 2025 15:47:40 +0000
ROA not before: Wed 01 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206810
IP address blocks: 176.96.184.0/22 maxlen: 22
176.96.184.0/24 maxlen: 24
176.96.185.0/24 maxlen: 24
176.96.186.0/24 maxlen: 24
176.96.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1a:18:3b:ac:47:37:2d:d3:35:65:bb:17:7d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f75f14b7fe6abe934dc90b5f25ca30040b31601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:c8:87:ab:df:7c:75:cc:ef:da:c8:4d:f5:
8a:cb:56:1f:cc:4e:b9:d4:28:c7:63:86:07:5a:d3:
cb:1f:12:f6:f8:6e:c7:67:ef:1d:83:70:7b:4b:98:
15:19:13:b6:43:c2:65:f3:85:b2:68:dc:9e:39:d6:
54:23:d5:55:f1:e7:ae:e6:2c:c7:7e:df:38:b1:9d:
7c:f3:5e:9b:95:3a:52:18:7c:23:da:cd:5e:5a:1c:
7c:ba:27:64:95:80:f7:87:a6:26:4e:22:4d:ce:9e:
46:99:73:6e:56:4d:cc:71:a5:42:c0:e3:c7:ce:9d:
61:2d:0a:46:1c:6e:e9:cd:a5:a3:a3:0c:69:83:96:
b4:eb:53:c1:e4:e0:11:d0:14:db:83:fe:47:3e:d0:
1a:d0:a5:c1:a3:9a:ee:78:35:7c:bc:40:7f:0e:0a:
e1:00:06:49:07:a5:b2:e0:d4:03:34:66:74:e5:33:
22:56:6f:56:03:d0:e1:4f:a2:23:27:68:74:09:77:
86:12:ec:80:7d:59:47:36:6f:6d:8d:e5:56:6f:45:
07:a1:6f:cd:12:e5:0c:b1:7b:a4:84:1e:63:60:a3:
0c:48:0a:66:19:0d:45:c3:72:bc:9f:22:5e:25:8d:
b5:ce:95:cf:04:f8:9e:9d:c9:94:35:d0:6e:dc:d5:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:F1:4B:7F:E6:AB:E9:34:DC:90:B5:F2:5C:A3:00:40:B3:16:01
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/P3XxS3_mq-k03JC18lyjAECzFgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.184.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a9:a6:3a:49:46:f2:0f:14:85:73:19:4a:94:0b:45:4c:0d:
cf:02:c0:d2:f0:6b:8b:dd:45:76:38:60:de:0f:d6:66:2b:02:
79:da:34:33:28:31:2e:e4:0a:4a:7b:e5:4a:64:76:5e:ea:fe:
84:11:20:4d:10:1f:be:2c:f0:25:52:7a:cb:d6:ed:b5:ae:55:
59:63:59:6b:21:c8:19:4a:56:5a:70:38:cf:4f:1f:94:3b:72:
bf:e2:3f:ea:ef:02:fb:d9:f4:4c:90:21:6c:65:ec:ea:53:e0:
b1:d3:59:19:f5:30:d9:31:4f:0a:bd:42:fe:9e:24:f6:64:b0:
22:3a:25:b9:44:2f:ca:ed:f4:b1:30:7f:d1:22:3c:ce:7e:e9:
32:66:fd:21:69:4e:75:ad:94:f0:92:1a:27:66:19:67:f1:a1:
40:23:56:61:03:a4:60:b4:41:e8:96:d6:d3:37:14:b4:6b:c4:
cf:96:3f:cb:92:3a:24:21:a5:bc:d1:26:61:62:4a:cb:17:fb:
8b:b2:82:c5:d7:33:9b:b1:7c:2f:fd:b7:a1:ea:12:76:d8:c0:
05:95:8b:22:2e:34:a7:0a:93:5d:7f:46:10:e1:7f:a7:a2:11:
3c:ea:29:c3:80:ee:b4:f8:15:9f:19:f5:47:ee:5d:21:cd:f2:
c2:8b:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:53 2025 by rpki-client