Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa
File: 3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa (raw, json)
Hash identifier: nQJrfkgs7cckEJG4TEbt+aYboyegrJmZ5zK0surmR+g=
Subject key identifier: DD:8E:AA:E1:24:8E:7C:AB:CC:5A:AB:7B:9E:42:BA:88:91:D9:70:58
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 0194282733521C732D8986C620095D6A485F
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa
Signing time: Thu 02 Jan 2025 17:54:05 +0000
ROA not before: Thu 02 Jan 2025 17:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198022
IP address blocks: 37.120.180.0/23 maxlen: 24
46.38.248.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:33:52:1c:73:2d:89:86:c6:20:09:5d:6a:48:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jan 2 17:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd8eaae1248e7cabcc5aab7b9e42ba8891d97058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:c5:c5:64:57:fd:51:d0:e2:84:2d:c3:de:
b5:d7:18:e9:fa:db:cd:41:0a:fc:97:40:1e:33:10:
3d:26:86:ed:6e:9b:36:70:66:c0:b9:48:db:f5:ad:
5c:30:66:66:2c:f8:eb:04:04:dd:97:02:cf:2c:f6:
9d:db:94:3d:a8:c5:33:18:17:c2:74:31:28:0e:ff:
37:0d:39:46:2c:10:0b:e0:b6:90:f6:e1:51:f7:54:
3d:7e:a0:a1:0d:2f:49:f8:5d:5f:07:c3:20:40:b1:
01:99:38:e7:5a:e0:f3:e7:cb:8a:fe:90:36:58:28:
bc:64:a9:19:ec:6e:8e:a3:cb:b8:6b:af:02:43:ef:
31:1d:28:72:fd:cc:3c:fa:3c:49:36:39:3e:ed:0e:
93:ce:c0:1b:6b:a8:ca:a8:c5:35:25:a8:c5:bd:fc:
66:7a:1f:67:ef:cc:dd:17:f5:87:7c:01:7c:f3:b3:
c8:aa:c1:c1:b1:58:fd:2b:63:55:e0:17:c1:c6:0b:
95:71:4b:ae:20:ed:3c:ed:89:9d:66:30:80:6f:0b:
0f:3f:1e:51:88:bd:ca:ff:05:0c:de:4d:51:bb:81:
26:f7:53:23:86:74:f0:ee:a5:1d:41:73:d6:79:81:
cd:66:f0:88:53:e4:e8:aa:f0:8f:1f:a0:f4:46:c9:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:AA:E1:24:8E:7C:AB:CC:5A:AB:7B:9E:42:BA:88:91:D9:70:58
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.120.180.0/23
46.38.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d5:9a:d8:36:00:ff:37:eb:b8:64:ca:92:57:07:98:13:90:
90:54:c9:0d:a7:80:b0:73:d1:df:11:2e:c9:ad:bc:65:8e:9f:
82:7c:00:0c:55:46:44:03:a8:e7:8b:f8:46:22:bb:10:74:17:
01:f5:b5:30:c7:48:83:60:29:2d:b6:a1:f7:24:e2:d9:f3:9c:
66:33:93:3b:05:3d:7c:dd:15:da:d6:40:de:60:6c:ab:3f:f1:
94:8c:ed:73:fc:c4:75:34:c3:f1:cd:00:32:8d:9f:72:40:11:
ce:04:3a:dd:2c:0d:35:bb:4f:5b:92:1e:d9:69:ad:67:c5:24:
35:28:fc:fa:fb:b4:03:c7:e1:2f:75:67:81:1d:d2:aa:e3:ee:
44:fa:2a:11:04:5e:29:e7:6d:fd:e1:98:f3:11:b0:02:e9:90:
89:09:2d:2c:71:2e:d9:96:ff:3a:b2:5f:48:be:1d:c4:c5:5a:
9e:9e:72:95:55:e3:ba:ae:49:cd:9a:1e:e1:a8:71:a9:71:9c:
af:d5:44:43:d9:07:a6:81:9d:a4:7c:19:b8:d7:05:60:65:b7:
63:3c:23:07:e4:36:1b:ba:06:fd:1d:11:8c:33:5c:57:cc:5c:
1b:c7:98:9e:98:11:80:38:c5:a3:d0:6a:0d:c7:4d:8a:c8:1d:
2a:ac:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:18:55 2025 by rpki-client