Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/3i7bDwmXfkGeboYerA9gz4okFig.roa
File: 3i7bDwmXfkGeboYerA9gz4okFig.roa (raw, json)
Hash identifier: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=
Subject key identifier: DE:2E:DB:0F:09:97:7E:41:9E:6E:86:1E:AC:0F:60:CF:8A:24:16:28
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 0194258ED10F386BAEBD30DE862BA0F3EBBF
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/3i7bDwmXfkGeboYerA9gz4okFig.roa
Signing time: Thu 02 Jan 2025 05:48:24 +0000
ROA not before: Thu 02 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62092
IP address blocks: 185.226.164.0/24 maxlen: 24
2a0f:d340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d1:0f:38:6b:ae:bd:30:de:86:2b:a0:f3:eb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Jan 2 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de2edb0f09977e419e6e861eac0f60cf8a241628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:df:a4:00:1a:a9:6b:cb:ee:71:2d:d5:11:
d6:4a:61:47:9c:3b:14:4f:f5:fe:00:42:d8:81:91:
89:56:da:92:99:6b:ad:34:54:27:c4:fc:24:09:2d:
33:96:a7:08:aa:09:a4:0e:01:33:7b:7e:90:d9:47:
fe:1d:f1:75:fd:cd:83:23:11:e2:0c:63:3a:08:a8:
85:71:0c:1e:9c:6d:c9:1c:e0:83:1e:de:6a:71:86:
af:65:7c:41:71:ce:c6:bb:5f:00:41:d5:7a:ed:1a:
73:e1:f0:19:52:bb:cf:bf:7e:d0:4e:cf:6d:6a:d1:
6f:66:1b:3f:1b:cd:f8:76:02:12:34:1c:c1:60:e6:
22:ff:b3:fb:e8:37:86:10:3e:91:32:80:1e:94:f1:
fa:19:97:4f:b6:37:b3:b5:cf:16:ee:fe:fe:71:b0:
b9:ae:54:d2:6a:9b:b1:c4:52:27:28:56:e6:ce:6d:
50:d5:fb:79:c3:54:59:a4:a1:ed:3a:7a:2d:b7:52:
57:59:e1:d0:a9:5b:b2:0a:57:66:94:b2:04:19:70:
0f:7a:d9:b4:cc:e9:f4:29:28:68:bc:b8:00:c2:44:
bb:4a:26:2e:74:38:18:27:50:24:3c:9a:ab:20:2e:
37:77:00:e2:b6:25:4e:ec:6d:b5:62:de:dc:4e:df:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:DB:0F:09:97:7E:41:9E:6E:86:1E:AC:0F:60:CF:8A:24:16:28
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/3i7bDwmXfkGeboYerA9gz4okFig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.164.0/24
IPv6:
2a0f:d340::/29
Signature Algorithm: sha256WithRSAEncryption
5d:8e:b0:c4:2e:b9:3d:22:60:fd:a9:ed:02:52:63:ab:ac:72:
a1:53:80:22:23:3a:a9:96:0d:f7:60:35:e5:d9:46:85:ec:ca:
bb:24:61:a6:19:eb:4a:56:63:20:77:45:e7:8f:d2:21:bf:1d:
03:c8:e3:d6:40:35:37:62:8e:ff:95:e1:0d:c4:50:78:bc:65:
77:77:e0:1f:49:9a:54:a3:43:9b:1b:da:9a:09:da:d7:5b:20:
0d:a8:39:2f:0b:27:3d:de:10:a2:6c:bc:25:53:e5:77:87:06:
3b:83:af:be:57:a9:ff:ce:5a:a9:97:88:23:40:b7:be:96:cb:
43:5b:69:a6:04:79:8b:1e:c1:0c:84:4f:31:7f:b4:05:35:91:
ce:c0:90:b0:46:d2:0a:0b:de:98:4d:93:80:68:ff:44:e0:86:
e7:88:8c:fa:9e:85:b2:64:92:7e:06:be:f4:53:2a:46:d0:e1:
1d:bf:bc:22:03:da:00:23:bc:b2:f9:cb:08:9e:55:6a:07:98:
6f:12:ee:b5:1b:92:6d:c9:9f:53:2a:3f:d2:51:3b:8c:a4:bf:
3b:57:8c:c6:8f:ac:30:c3:6e:6c:82:75:ea:4c:3b:f5:43:8f:
b6:8e:59:aa:ab:dc:2e:6b:1f:1d:c5:98:81:e6:6b:ad:ae:6c:
ac:8d:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:04:27 2025 by rpki-client