Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa
File: 3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa (raw, json)
Hash identifier: Jn8Yd6x4goPshXFFHZFFSl5WpHb8SXFgvxZ7Lsgfvu4=
Subject key identifier: DE:5B:F4:31:2D:0A:32:FB:36:36:A4:E5:AA:D7:77:1E:FC:6D:1D:F0
Certificate issuer: /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial: 01941FF9FDBEF23DFA38474C6DA102897269
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa
Signing time: Wed 01 Jan 2025 03:47:44 +0000
ROA not before: Wed 01 Jan 2025 03:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202020
IP address blocks: 37.130.232.0/21 maxlen: 21
46.17.180.0/22 maxlen: 22
46.229.244.0/23 maxlen: 23
46.229.248.0/23 maxlen: 23
92.246.72.0/22 maxlen: 22
185.56.68.0/22 maxlen: 22
185.219.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:fd:be:f2:3d:fa:38:47:4c:6d:a1:02:89:72:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Validity
Not Before: Jan 1 03:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de5bf4312d0a32fb3636a4e5aad7771efc6d1df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:22:c7:fa:d2:61:55:86:1a:31:42:b6:08:
6a:41:7e:bc:2a:34:e4:08:8b:c3:a4:4e:16:04:12:
7e:eb:12:80:4b:76:13:b8:e3:93:04:4f:2e:93:a2:
46:30:a0:ab:48:1f:2c:81:08:9e:cd:88:16:b0:8f:
fb:2e:65:a2:95:e9:50:ec:97:8c:ce:3f:5c:2b:ae:
07:f9:10:72:ce:5e:02:e7:e8:a7:fc:56:00:ca:e0:
db:af:89:2d:e9:53:71:0a:14:45:86:32:c8:79:7c:
d6:aa:4c:19:0f:76:58:f0:20:5b:60:43:4e:96:fe:
7e:3c:a0:cd:6f:98:fa:e5:c1:7c:85:b4:e5:10:60:
5b:b2:1f:7f:4f:3e:5e:61:7d:35:ba:fd:7c:86:03:
41:91:ce:df:b1:33:af:fb:ce:22:c9:96:0e:b1:6f:
26:aa:81:85:27:a2:a6:66:ce:9b:f0:ef:fb:bd:04:
0c:78:db:43:d4:c1:93:25:69:71:87:6f:1f:96:24:
42:d9:a8:6a:b5:39:56:c7:56:21:83:be:49:6c:2a:
a1:a5:04:5f:30:33:3c:fe:2f:77:c2:c3:1b:95:f6:
a7:dd:72:bc:87:14:ef:5b:d5:a4:bf:c1:9a:f6:10:
18:43:c7:de:d5:86:05:ad:d3:6f:b2:d1:bd:75:ea:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:F4:31:2D:0A:32:FB:36:36:A4:E5:AA:D7:77:1E:FC:6D:1D:F0
X509v3 Authority Key Identifier:
keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.232.0/21
46.17.180.0/22
46.229.244.0/23
46.229.248.0/23
92.246.72.0/22
185.56.68.0/22
185.219.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:e2:e4:7e:a7:e2:9e:3c:52:43:9d:18:94:a0:20:f5:91:8f:
e7:1e:51:2f:d6:cc:e5:65:0c:57:26:7a:ae:2a:59:10:77:ed:
73:17:07:a0:d3:bf:b6:54:49:84:b6:b5:2e:98:1f:0b:1c:9f:
13:eb:06:2c:5c:c7:68:66:79:f4:39:ba:87:08:21:dc:12:a8:
01:c2:31:98:0f:1c:e1:86:35:3b:5c:2c:f1:81:69:ee:ff:59:
f4:c1:09:16:24:b2:38:69:88:02:69:fa:e0:58:c1:7a:85:01:
09:27:e0:3f:09:e1:1c:f4:bf:98:0a:58:ca:cf:92:46:60:a2:
57:57:78:7b:e2:7b:d5:6b:7d:08:d3:87:ea:9b:6b:c2:1f:13:
a3:77:b1:34:e5:2d:45:89:5d:1a:13:fe:50:26:55:a0:b7:53:
8b:24:59:05:ee:e3:5d:f1:2b:15:17:50:4a:d6:94:14:19:29:
08:49:12:f9:93:e5:6c:a1:60:4b:9a:1e:37:39:d2:b6:44:45:
01:20:7f:d9:b6:66:db:e0:7c:8b:86:a1:a2:10:c5:9f:8f:6a:
80:65:13:df:40:39:60:39:c4:d6:a2:ee:a7:1f:b0:35:44:4b:
fc:55:33:51:30:5d:02:5f:54:2e:6d:f6:cd:34:45:9c:63:bd:
e9:2d:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:05:00 2025 by rpki-client