Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/3vl8XIfuhRt73vGy6IwhrWPuLQI.roa
File: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (raw, json)
Hash identifier: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=
Subject key identifier: DE:F9:7C:5C:87:EE:85:1B:7B:DE:F1:B2:E8:8C:21:AD:63:EE:2D:02
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 019421B19D39C5D6335BCE1A136950C3F8EF
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/3vl8XIfuhRt73vGy6IwhrWPuLQI.roa
Signing time: Wed 01 Jan 2025 11:47:55 +0000
ROA not before: Wed 01 Jan 2025 11:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 193.103.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:9d:39:c5:d6:33:5b:ce:1a:13:69:50:c3:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 11:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=def97c5c87ee851b7bdef1b2e88c21ad63ee2d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:bd:4e:0c:f6:21:97:a0:ae:5f:64:d5:67:
50:d1:5b:2c:54:9a:da:c9:0b:4a:45:c8:d7:00:7d:
c5:f3:7a:1c:f8:63:f0:11:7b:3e:3d:cf:3b:7a:23:
8f:48:44:70:e4:bd:28:cd:8c:1f:d6:2e:99:27:bb:
7d:c0:ae:67:f3:b8:46:c4:07:d9:f2:32:2c:c0:7f:
b3:32:e2:2e:5e:b8:e7:0c:c8:23:f8:ca:91:58:e2:
3a:4b:b6:51:11:fe:a8:87:d8:79:d8:da:0c:23:f2:
3b:16:2a:d6:46:60:a4:90:df:31:1f:5d:b5:9d:32:
ea:7c:35:94:60:e7:76:dd:df:0e:20:c5:4e:fb:ac:
ba:46:48:75:2f:08:79:44:72:ef:b2:3d:bb:05:3a:
91:b5:b8:ed:7a:92:6b:2a:e2:03:6c:e6:ca:a0:cd:
d8:20:e1:ce:5a:48:bc:01:96:17:c3:00:05:ca:b0:
8b:c4:0c:bb:b7:58:92:63:27:e1:87:ed:61:c8:d5:
3b:ed:4d:0d:a4:d4:32:72:9a:f9:e3:6e:73:2d:a9:
01:e3:23:d9:fb:d5:3b:99:c9:ce:d7:74:fe:59:c7:
03:95:d4:a7:53:e9:e1:51:42:fa:cc:7d:a7:c9:58:
5d:4f:60:95:26:76:1d:e6:b9:27:e4:07:07:03:41:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F9:7C:5C:87:EE:85:1B:7B:DE:F1:B2:E8:8C:21:AD:63:EE:2D:02
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/3vl8XIfuhRt73vGy6IwhrWPuLQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.165.0/24
Signature Algorithm: sha256WithRSAEncryption
20:26:48:5f:ad:c7:d1:ab:5e:c1:36:13:f0:b8:0c:14:10:40:
af:ae:51:1e:89:d9:4a:ca:a6:10:1b:19:c3:06:0a:50:22:5f:
5a:c8:11:31:d1:1b:cc:e0:02:44:b6:ff:cf:c5:cd:64:8c:90:
72:72:5e:65:04:5d:5f:e8:12:69:18:ba:f3:fe:1f:70:d9:aa:
c8:e3:c6:86:89:27:ab:cc:e1:2f:95:c6:01:9a:94:6a:20:38:
88:fc:c1:e8:a3:6d:24:be:3e:79:cd:a9:c4:66:11:16:e1:35:
5f:df:6a:5a:c7:4d:42:9a:03:c4:a6:c8:52:57:61:f4:c2:c8:
f4:f1:fe:f6:87:9a:fb:41:77:88:58:37:b2:8d:49:cc:07:d3:
aa:ce:d4:95:50:0e:28:fb:dc:2b:dd:dd:cd:19:b5:d8:b0:e9:
0b:f6:89:df:e2:38:41:79:ea:99:86:d9:12:de:b5:1a:37:13:
a1:aa:28:11:99:3d:2c:4c:bd:be:87:0e:fc:77:66:bc:21:65:
3a:35:9c:0c:5b:a5:db:1d:7e:8b:8e:d3:23:1c:88:81:97:4a:
c0:ef:81:cd:76:f8:02:1a:1b:79:94:99:8f:21:4a:be:68:89:
e9:83:8a:cd:4d:cf:ef:cb:e9:fb:ef:81:bc:d8:ea:a2:ea:27:
ca:e6:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:32 2025 by rpki-client