Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/3z6lktI1lDr4VGsD9ynpgjzyaiA.roa
File: 3z6lktI1lDr4VGsD9ynpgjzyaiA.roa (raw, json)
Hash identifier: cu4Dj3hdfbNVBv8hLW6UGz1FhflqYtjIYtw5ySC1Qpk=
Subject key identifier: DF:3E:A5:92:D2:35:94:3A:F8:54:6B:03:F7:29:E9:82:3C:F2:6A:20
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 0195B856793268EE2D46C019EF6BA24BE8B8
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/3z6lktI1lDr4VGsD9ynpgjzyaiA.roa
Signing time: Fri 21 Mar 2025 10:53:49 +0000
ROA not before: Fri 21 Mar 2025 10:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.0.0/17 maxlen: 22
137.174.128.0/18 maxlen: 22
137.174.192.0/19 maxlen: 22
147.123.32.0/19 maxlen: 22
147.123.36.0/22 maxlen: 24
147.123.128.0/17 maxlen: 22
147.123.208.0/21 maxlen: 24
155.204.0.0/17 maxlen: 22
155.204.119.0/24 maxlen: 24
155.204.128.0/18 maxlen: 22
155.204.200.0/21 maxlen: 24
155.204.208.0/21 maxlen: 21
155.204.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:56:79:32:68:ee:2d:46:c0:19:ef:6b:a2:4b:e8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Mar 21 10:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df3ea592d235943af8546b03f729e9823cf26a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:95:56:76:1c:8d:96:a8:01:dc:bd:83:ad:
fd:a7:e9:ee:71:42:89:f8:3f:f9:ff:fe:6b:1f:02:
e9:b3:b5:62:21:85:6a:aa:59:49:59:66:16:48:cf:
08:7f:8e:14:bf:f8:89:94:e7:69:ac:3a:a0:b4:a3:
ca:e1:2f:5a:17:a0:fd:6b:d0:82:79:8c:e2:ac:ff:
80:b7:4d:ba:c3:be:90:65:68:7b:f2:29:36:f2:f6:
1c:93:97:99:cc:8c:ea:01:87:8f:9d:d5:a6:db:19:
32:3a:af:38:c0:cb:71:e7:63:bd:ef:c8:10:92:23:
f7:71:94:a5:e7:1d:a5:c8:dc:51:27:b7:00:04:3e:
f5:87:2c:6e:de:b6:35:a8:7b:ae:d5:0b:c5:a9:4c:
95:cd:d1:3c:6d:4b:59:e4:3c:21:6d:d7:81:e2:df:
a2:a0:25:6b:f3:ff:73:2b:b3:67:c9:94:76:7b:70:
ed:2d:8c:24:e7:30:19:2d:6e:10:11:24:b4:dd:3d:
57:bf:72:db:7c:61:4b:3c:9f:69:0d:b7:33:9b:87:
79:c8:7b:4e:82:87:0d:82:7b:6a:7a:62:ee:a6:6f:
cb:ab:ed:b2:45:96:54:b3:e9:51:82:ff:b0:67:16:
be:b6:d7:30:99:88:11:a5:17:39:64:cf:2a:f4:89:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:A5:92:D2:35:94:3A:F8:54:6B:03:F7:29:E9:82:3C:F2:6A:20
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/3z6lktI1lDr4VGsD9ynpgjzyaiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0-137.174.223.255
147.123.32.0/19
147.123.128.0/17
155.204.0.0-155.204.191.255
155.204.200.0-155.204.223.255
Signature Algorithm: sha256WithRSAEncryption
41:21:77:67:f8:11:de:5f:a7:5b:db:66:7f:fd:9b:95:89:97:
c5:b0:a4:bd:06:94:cf:7e:09:e2:95:69:84:02:38:df:a5:04:
9d:7e:be:27:24:98:26:68:f5:3c:5c:e4:7a:1a:74:7b:1c:22:
0e:e5:86:5d:4e:e8:12:10:03:0f:5e:c4:29:6b:bb:13:e1:52:
c8:ca:7b:1a:99:7a:af:df:7d:12:ef:4e:d7:83:00:83:6c:28:
1a:c8:3e:89:5b:40:ea:28:e7:4c:99:63:5a:08:73:9d:03:2a:
fc:9d:b7:d2:92:82:d7:20:ac:cf:47:af:d1:b6:77:49:01:82:
7c:36:13:9e:7f:a6:68:7b:b4:b9:0b:cb:96:22:cd:5b:4b:7c:
c3:53:55:fb:80:09:9c:48:4e:f0:d5:13:a9:9b:2c:0d:ff:25:
e2:c9:a6:9e:22:c0:ca:6f:cf:e5:18:02:2a:51:27:83:01:de:
4e:8e:75:b4:0f:2b:46:dc:ef:95:95:85:77:a6:82:c0:82:38:
c3:53:04:56:b5:39:2c:4a:47:72:f7:b4:c6:01:cb:d8:cb:6b:
11:c5:7d:e0:9e:73:bf:07:b6:df:82:52:d2:19:53:fe:d8:93:
26:fb:63:d9:2e:46:a9:78:d6:48:84:60:44:3e:bc:d0:c8:0b:
8d:77:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:28:02 2025 by rpki-client