Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa
File: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (raw, json)
Hash identifier: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=
Subject key identifier: DD:79:1F:82:CC:B9:17:42:28:C0:D7:32:D4:F7:9D:00:1D:D0:EB:0D
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0194258E43088F16BFE25B825730F6814B9B
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa
Signing time: Thu 02 Jan 2025 05:47:47 +0000
ROA not before: Thu 02 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20978
IP address blocks: 213.161.151.0/24 maxlen: 24
213.161.153.0/24 maxlen: 24
213.161.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:43:08:8f:16:bf:e2:5b:82:57:30:f6:81:4b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 2 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd791f82ccb9174228c0d732d4f79d001dd0eb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:0d:9c:b9:03:35:95:91:cc:e8:d5:ae:39:
a0:c3:4d:7a:00:2e:24:f0:26:7b:2e:a8:de:f8:18:
25:b2:dd:4a:86:4e:1c:e0:46:78:70:ad:d5:22:e0:
85:c8:f4:85:40:07:81:af:8e:93:59:87:d4:89:da:
ca:93:7a:41:fe:7a:cc:c0:ed:5b:47:0b:2f:6a:ad:
47:0d:4e:c1:b1:bc:f3:43:22:09:ae:f2:4a:3d:aa:
47:f0:68:db:82:1e:37:21:ce:fa:f7:ea:da:0d:53:
0b:9e:4c:3e:11:20:8e:0a:9e:90:4a:de:d2:8e:06:
0f:47:99:69:ea:9d:3b:06:d7:56:7a:d8:37:e0:84:
d4:0f:fb:4e:29:dc:67:cc:7e:f9:dc:1a:0b:58:0f:
c2:bb:db:40:7e:70:90:91:e2:7e:76:b1:5d:9e:80:
da:e5:fb:b6:d4:ce:bf:ad:ea:ea:39:4f:e4:ce:10:
32:f4:4d:4d:fb:5a:62:c5:06:8f:87:94:64:8f:30:
5a:d2:74:23:e9:07:1c:be:ba:85:66:0c:ed:d4:ed:
b8:64:ca:5b:94:fd:ba:6d:74:be:f5:96:8a:2d:1d:
e1:61:5c:f8:5a:2a:8e:2b:f6:30:a6:d5:7d:8e:b3:
63:db:bf:22:31:9e:a2:0e:22:ea:a2:0a:79:a3:bc:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:79:1F:82:CC:B9:17:42:28:C0:D7:32:D4:F7:9D:00:1D:D0:EB:0D
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.151.0/24
213.161.153.0/24
213.161.157.0/24
Signature Algorithm: sha256WithRSAEncryption
63:70:f4:d2:73:94:ef:2c:fc:05:62:fa:c0:d5:7b:76:a5:a5:
b0:48:04:5e:47:bc:98:d8:bb:b6:96:a1:01:77:20:23:5f:ef:
31:bb:14:7f:0a:e2:e0:77:02:8c:20:43:f4:d0:e7:3a:8b:ab:
1b:ff:77:5f:05:cf:a0:60:f8:e6:dd:93:9c:c7:66:a0:53:63:
8a:8e:09:02:48:0d:ca:a4:e4:8e:e9:00:c3:34:ca:b4:9d:ac:
bd:db:e1:9c:6c:78:58:e5:31:10:80:38:a7:09:d1:0a:cd:27:
c3:d1:c9:fc:fa:ae:17:8a:c8:94:ea:bf:db:10:a7:8f:51:19:
bd:0e:03:3c:81:36:79:ba:9b:d9:e2:ee:24:3e:f6:f1:92:0e:
8d:aa:6b:ef:b3:82:80:29:8a:70:85:50:04:ef:39:d7:6b:6a:
74:1e:2c:d6:95:fe:e8:81:a7:fa:45:77:d8:00:0e:58:c7:99:
a2:00:02:54:78:8c:f2:ad:df:93:36:68:4a:3d:b1:bf:0e:0c:
4b:6a:1e:a0:bf:66:26:09:2c:14:45:c4:69:79:46:81:68:70:
46:e9:76:83:2d:2a:0e:90:b1:de:17:4e:33:fe:15:5d:56:0c:
53:c7:b8:34:3b:48:a3:6a:25:da:51:59:40:0f:0b:b1:44:77:
88:79:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:35:50 2025 by rpki-client