Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3HTozQB4pcsucL9eexzvUMqz-88.roa
File: 3HTozQB4pcsucL9eexzvUMqz-88.roa (raw, json)
Hash identifier: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=
Subject key identifier: DC:74:E8:CD:00:78:A5:CB:2E:70:BF:5E:7B:1C:EF:50:CA:B3:FB:CF
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 0195854CF0A8EAF80BB97147F981D3682944
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3HTozQB4pcsucL9eexzvUMqz-88.roa
Signing time: Tue 11 Mar 2025 13:02:46 +0000
ROA not before: Tue 11 Mar 2025 13:02:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13307
IP address blocks: 91.90.16.0/21 maxlen: 24
91.203.88.0/22 maxlen: 24
194.88.206.0/23 maxlen: 24
194.143.144.0/23 maxlen: 24
195.20.96.0/23 maxlen: 24
195.95.202.0/23 maxlen: 24
195.140.168.0/22 maxlen: 24
195.234.68.0/22 maxlen: 24
2a01:6d80::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:4c:f0:a8:ea:f8:0b:b9:71:47:f9:81:d3:68:29:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Mar 11 13:02:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc74e8cd0078a5cb2e70bf5e7b1cef50cab3fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:5f:6f:2e:36:e6:22:25:7c:10:2b:83:88:
81:e3:ea:5f:60:4d:bd:d2:8b:8a:83:f7:3a:08:da:
df:d0:a0:8a:8d:37:19:2a:bd:f9:6b:24:45:02:88:
35:4b:31:9f:b2:1d:16:55:20:ec:ee:80:9e:27:98:
42:8f:11:fd:62:cf:81:d0:ef:21:d2:86:6e:36:46:
c0:20:b3:c7:f3:47:e4:86:7f:8a:3c:a4:68:a4:8b:
97:9d:98:10:63:e7:9d:a6:fb:24:29:94:58:7e:66:
f2:33:ea:ad:64:c5:0b:f8:d9:5e:2f:5b:2b:30:0d:
a0:77:42:d4:77:86:3a:66:00:e4:29:56:9d:c2:63:
bb:35:b5:74:10:c6:04:2a:48:f4:73:82:39:2b:d9:
c2:04:2e:be:9b:43:04:59:02:08:9d:44:93:a1:f2:
6b:23:e1:da:40:5a:e3:39:23:11:d7:2b:6a:80:37:
ff:98:d8:c7:c6:e3:65:44:e4:2b:ba:4a:04:fc:9c:
d7:54:11:bc:91:e9:42:ff:46:6e:b1:f9:88:0f:99:
7a:d9:a4:e4:6f:89:84:9f:bd:9d:f2:29:08:12:c2:
3d:22:a1:1f:4a:76:c1:51:da:35:63:52:c9:d0:76:
c7:a6:ce:90:bb:6d:54:35:eb:07:2d:ff:e8:92:fa:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:E8:CD:00:78:A5:CB:2E:70:BF:5E:7B:1C:EF:50:CA:B3:FB:CF
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3HTozQB4pcsucL9eexzvUMqz-88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.16.0/21
91.203.88.0/22
194.88.206.0/23
194.143.144.0/23
195.20.96.0/23
195.95.202.0/23
195.140.168.0/22
195.234.68.0/22
IPv6:
2a01:6d80::/36
Signature Algorithm: sha256WithRSAEncryption
80:57:c2:74:73:c4:04:78:5f:af:93:81:c2:04:da:f2:4f:90:
fa:7f:68:ae:e6:7c:73:de:6c:f9:22:5d:5e:6d:6c:6e:df:f0:
5e:ae:8b:58:0a:40:77:6e:dc:ad:53:0a:1e:0c:36:58:db:bd:
bf:8c:74:9c:d5:af:55:21:f0:0d:2d:2f:8f:75:46:91:8a:d3:
31:9c:37:1e:d7:ac:a8:7b:4c:0c:0b:f0:ff:6b:11:84:b7:a1:
17:4c:35:75:8f:e7:a3:00:88:5e:13:7e:d8:11:df:69:26:1f:
48:d6:28:0d:ac:27:07:8b:be:ae:a8:80:74:ed:05:9e:90:4e:
19:9e:ca:79:4c:8a:24:0b:d0:52:02:1b:61:15:b5:94:e7:68:
7b:51:cd:ae:f7:1b:25:d3:95:ce:e1:b8:35:54:ed:23:2e:ab:
4e:29:bb:d2:79:27:82:51:fd:e8:98:89:66:01:a7:bf:0f:70:
10:5b:a0:72:b7:0c:cd:f5:72:80:36:55:6b:7a:80:ad:ab:3d:
44:c7:5a:66:a3:bc:c1:32:85:65:f1:ab:73:d8:16:4c:90:9c:
82:48:8c:09:e8:3e:f6:97:66:dc:2b:d8:51:b8:61:61:1a:71:
46:76:81:2f:2c:9b:ec:e1:6d:81:58:96:7d:f9:49:85:d0:0c:
0f:3d:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:13:59 2025 by rpki-client