Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/3srpGduL_zOjHqnp8WJJguH4g-0.roa
File: 3srpGduL_zOjHqnp8WJJguH4g-0.roa (raw, json)
Hash identifier: 0YdFBJ148GiXs/92XtOcHZ9J9KnY83sjjDOEJj+352E=
Subject key identifier: DE:CA:E9:19:DB:8B:FF:33:A3:1E:A9:E9:F1:62:49:82:E1:F8:83:ED
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019421440E49DDECD53BD2EFBDAAA5700360
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/3srpGduL_zOjHqnp8WJJguH4g-0.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204393
IP address blocks: 185.187.48.0/24 maxlen: 24
185.187.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0e:49:dd:ec:d5:3b:d2:ef:bd:aa:a5:70:03:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=decae919db8bff33a31ea9e9f1624982e1f883ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:91:ea:c7:fc:cb:86:12:9c:e0:51:b0:a3:
2c:11:f9:ab:2e:29:6c:32:3c:2e:c8:8f:f2:6f:ae:
43:46:97:55:37:09:3e:78:2d:b2:59:bf:32:75:00:
7e:ca:4b:4d:57:aa:45:94:a9:a9:88:4e:16:14:3c:
21:3f:e8:11:27:47:d0:8a:49:cb:a4:47:d9:04:ff:
60:49:c4:c7:5e:3b:b0:f3:67:a3:73:7c:1d:21:52:
11:0d:f5:e5:5c:df:dd:1f:d3:ff:e7:5e:a4:b6:1e:
88:dc:16:3d:b8:89:b5:68:eb:cb:ac:92:a9:3c:e0:
9b:19:0c:69:3f:d8:39:32:fc:ad:fe:24:50:5c:6f:
fe:0d:5d:54:90:a6:38:e1:83:ce:f7:ba:5e:9c:6c:
f2:0d:e5:88:5d:e5:be:dc:0b:86:73:00:ee:77:b1:
24:6e:5f:db:6e:d6:7a:0a:33:4e:15:f0:b3:13:9b:
bc:89:1e:f3:dc:02:92:fc:9a:18:63:59:5f:43:51:
dd:0f:08:08:94:30:54:67:4e:61:12:c1:db:df:70:
9d:6a:8a:88:7b:b9:03:33:65:1c:72:59:32:37:1f:
d6:c3:13:03:a5:f8:f8:b5:58:f2:a1:8c:7c:97:12:
e7:77:c0:c2:37:76:dd:28:2d:bf:e0:ea:79:c3:aa:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:E9:19:DB:8B:FF:33:A3:1E:A9:E9:F1:62:49:82:E1:F8:83:ED
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/3srpGduL_zOjHqnp8WJJguH4g-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.48.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:e3:65:53:cb:f6:a1:c6:99:89:7f:ff:2b:1c:d9:05:4f:01:
e9:e3:3b:4d:bd:7f:a3:71:eb:a3:e2:03:80:a6:57:3d:0a:fb:
4b:74:a5:40:14:31:9a:4f:cf:da:0e:75:64:c2:e7:79:bd:03:
8b:6f:d4:dc:3d:7c:ea:0f:6c:70:c6:46:39:e7:33:c5:b0:da:
87:44:13:32:c5:49:b7:99:01:fd:64:77:33:17:31:77:97:2f:
86:fa:fb:e9:58:bb:73:0f:1e:f2:93:22:e3:ba:62:30:a1:cd:
15:af:e9:a5:75:43:fb:31:cc:bf:59:94:e9:c2:05:99:24:e5:
8b:16:c0:a4:d0:16:62:96:7e:9f:c0:66:f2:e2:b1:e0:33:37:
52:db:18:02:c7:80:5c:01:00:55:31:76:3c:50:b3:cb:8c:15:
4e:1f:96:ca:3b:0c:c4:13:f9:43:45:0a:2c:cc:1d:d4:95:09:
10:2c:d5:b0:45:9d:7e:aa:48:df:1b:e4:ed:42:71:28:22:10:
49:f2:a4:3b:77:ab:3d:1d:f1:73:73:3e:9a:38:50:40:fd:ad:
33:84:b3:ee:b3:1b:6a:69:1f:b3:0c:f8:cf:20:d6:ef:d4:da:
95:92:89:cf:f1:3a:ae:54:cd:35:25:17:c4:c1:3f:71:fe:c4:
75:ed:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:24 2025 by rpki-client