Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa
File: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (raw, json)
Hash identifier: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=
Subject key identifier: DC:6E:EE:85:C2:CA:59:63:AD:7E:61:4A:DC:0B:72:E8:88:EA:E0:F1
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0194236A00D44F5F8DFD2EF70B916A28B334
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43624
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:00:d4:4f:5f:8d:fd:2e:f7:0b:91:6a:28:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc6eee85c2ca5963ad7e614adc0b72e888eae0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:c7:20:f3:ea:36:ec:fc:69:eb:6b:63:4d:
13:fc:ca:c8:df:30:a0:d5:31:6d:8c:a6:02:57:a6:
e9:85:12:4b:9b:2c:c2:e0:d0:1f:24:ae:40:ea:e6:
56:4e:9e:82:ee:82:90:97:df:65:90:96:5c:82:df:
0f:c7:31:8c:94:d5:1e:92:d4:da:5b:5e:34:ce:af:
4a:bb:f0:09:b7:57:45:af:7b:a5:b8:e8:c3:d1:a3:
4e:b5:48:8e:e6:54:12:75:a6:a8:dd:8a:e2:3b:35:
44:8a:24:52:ce:d7:41:44:ae:10:76:11:df:0d:91:
dd:5d:8e:15:4e:b2:48:ea:34:24:d0:60:b0:13:3a:
0e:a2:62:dd:02:2f:71:6e:98:7b:59:5e:a2:77:98:
92:24:93:5e:f6:ec:98:a0:9a:77:81:87:99:63:f9:
58:bc:07:f7:3f:5f:21:8b:98:68:07:c0:b8:66:39:
b0:a1:26:af:0b:7b:92:e9:2c:20:34:d6:b5:04:95:
60:10:1a:7d:08:a7:c2:3d:aa:d3:a2:60:bb:d4:fe:
06:06:91:da:f9:da:e7:37:40:30:23:92:e1:12:f7:
42:b2:7c:09:25:72:41:34:f8:9a:40:71:77:28:0e:
cc:39:0b:d1:73:33:22:9e:3b:94:69:ea:6a:75:26:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:EE:85:C2:CA:59:63:AD:7E:61:4A:DC:0B:72:E8:88:EA:E0:F1
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/24
45.67.231.0/24
IPv6:
2a09:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
51:43:94:3c:1d:2a:5b:95:e6:a4:f2:d0:44:c8:ab:10:5e:99:
7a:de:a8:3a:50:64:71:95:7d:3b:76:2e:7e:4d:83:8c:9d:40:
95:44:40:64:11:61:68:d1:2c:58:5b:29:6e:bf:1b:56:bf:8b:
00:8a:01:e7:43:8c:94:01:8a:cd:5a:aa:a3:d3:80:3f:be:c8:
1d:ac:68:a5:ff:c0:ef:b8:d7:81:95:66:68:ec:9c:a8:14:43:
39:2a:60:f4:e2:3f:41:2e:41:d9:db:7e:ea:e1:6d:7e:71:2f:
97:02:d4:3f:42:1e:e0:4e:7e:e4:1d:20:04:d1:bc:12:ec:37:
5d:bf:93:14:87:e5:4b:4a:0c:da:d0:d0:d7:d0:c9:b7:60:bd:
e0:7e:6c:4c:53:c8:0d:d0:20:08:a4:d2:03:10:e2:a3:56:34:
32:5d:b2:61:af:87:63:0b:f9:bd:e3:84:3f:d2:d7:9b:7d:a4:
31:e8:48:74:6d:4d:81:fc:63:37:94:a7:d5:52:b3:ea:9f:79:
16:be:b2:ca:11:49:be:80:9b:ee:6f:e1:50:96:64:91:d5:95:
6f:65:15:88:78:54:16:dd:03:84:19:bd:bc:b8:e4:c4:ba:83:
03:55:6a:51:b3:57:4a:92:2a:0b:d0:81:09:50:ec:2b:1c:a2:
4d:c8:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:50:04 2025 by rpki-client