Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/3FxUxvyalEPW74QSSmy9O2QWzSA.roa
File: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (raw, json)
Hash identifier: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=
Subject key identifier: DC:5C:54:C6:FC:9A:94:43:D6:EF:84:12:4A:6C:BD:3B:64:16:CD:20
Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial: 0194236936CED88AC092945465EEE8CA76A0
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/3FxUxvyalEPW74QSSmy9O2QWzSA.roa
Signing time: Wed 01 Jan 2025 19:48:05 +0000
ROA not before: Wed 01 Jan 2025 19:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205876
IP address blocks: 31.24.250.0/24 maxlen: 24
45.152.249.0/24 maxlen: 24
45.152.250.0/24 maxlen: 24
194.5.132.0/24 maxlen: 24
194.5.145.0/24 maxlen: 24
212.125.138.0/24 maxlen: 24
212.125.139.0/24 maxlen: 24
2a12:5040:1::/48 maxlen: 48
2a12:5040:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:36:ce:d8:8a:c0:92:94:54:65:ee:e8:ca:76:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
Validity
Not Before: Jan 1 19:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc5c54c6fc9a9443d6ef84124a6cbd3b6416cd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:2e:0b:a4:9a:9e:18:80:3c:d8:48:84:67:
94:be:cc:e7:9d:a3:f3:aa:66:7a:15:e3:77:a9:42:
a6:fc:ef:5d:6a:96:a7:8b:23:52:31:2a:aa:43:b6:
55:ab:de:88:34:ca:db:a5:30:63:a8:b9:f0:39:40:
f0:86:c1:65:38:e2:af:11:73:0d:da:12:31:af:d5:
12:d7:7c:46:a2:73:85:7b:c7:8b:bb:62:5a:f7:8e:
4e:f1:b6:f1:09:49:05:6e:db:a4:09:97:b8:e2:10:
63:12:d5:9a:8a:00:9e:80:a7:11:8e:db:a6:74:6d:
ff:e1:33:cc:dc:43:48:c6:9f:11:32:e1:4f:4e:9d:
3e:a9:69:5c:f4:ec:5c:b3:e1:b4:0c:da:06:2d:4d:
a1:9b:ea:eb:c5:eb:3c:49:07:4b:fa:69:ee:1c:4f:
81:72:70:3f:89:cf:fe:0d:31:95:3e:9b:d9:d3:7d:
a3:1d:0f:27:4e:55:15:87:01:04:c7:60:46:91:0b:
2b:d4:08:68:f0:10:db:2f:32:22:b3:03:a1:3d:d8:
e1:b5:7c:b6:cd:b3:27:59:97:03:ca:ee:94:58:7e:
7e:03:50:86:5a:a0:cf:0b:b1:97:8c:3a:85:c9:5d:
6a:d0:7d:d2:18:ab:43:39:72:45:f1:99:92:f4:1a:
dc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:54:C6:FC:9A:94:43:D6:EF:84:12:4A:6C:BD:3B:64:16:CD:20
X509v3 Authority Key Identifier:
keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/3FxUxvyalEPW74QSSmy9O2QWzSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.250.0/24
45.152.249.0-45.152.250.255
194.5.132.0/24
194.5.145.0/24
212.125.138.0/23
IPv6:
2a12:5040:1::-2a12:5040:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:cf:ef:de:46:ef:46:67:dd:49:dd:84:a1:e6:51:0a:a0:72:
0d:b8:b6:f1:7b:87:2e:d9:4d:89:ff:17:bc:d6:92:b8:a7:e2:
6f:e9:bd:19:8e:38:99:1a:c6:13:1e:a3:7c:b7:db:8d:e9:b3:
86:8a:c0:5a:58:82:99:75:7c:72:60:be:09:08:d8:f3:0d:96:
de:dd:e7:98:17:30:e2:ed:f3:6a:03:e8:e8:7b:85:1e:78:ca:
0a:b1:3b:36:2b:78:2c:31:bf:44:91:8c:8f:9f:c8:0c:f3:f4:
b9:59:e9:ef:a9:1a:e0:4f:0f:bf:ea:19:51:ed:6d:45:49:4a:
e3:f8:8e:23:1b:11:2b:20:23:e9:1d:64:a1:f7:9a:77:08:e9:
bb:57:41:a8:82:08:cb:08:af:ee:aa:9a:f0:16:1e:4e:1c:2e:
e6:c7:b2:29:9e:38:15:44:69:27:df:bf:4c:b6:b3:dc:2b:ad:
f8:be:5d:51:c3:71:29:96:42:98:2e:b0:25:dd:f1:a9:02:04:
49:9b:58:5d:8e:6a:e5:45:fe:e8:25:6c:63:ed:c9:25:c0:89:
b3:af:07:11:75:e4:2b:61:a0:22:e6:38:45:c9:54:12:4a:16:
5c:ed:b4:37:27:66:58:54:b9:38:e4:fc:3c:1d:ed:92:4f:c7:
c2:ea:72:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:24 2025 by rpki-client