Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/PKUF3H4nGREVMJD2dPtsZCb0xVA.roa
File: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (raw, json)
Hash identifier: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=
Subject key identifier: 3C:A5:05:DC:7E:27:19:11:15:30:90:F6:74:FB:6C:64:26:F4:C5:50
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 0194236A1FC0A9E79A263C0C89CA53BEF1CC
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/PKUF3H4nGREVMJD2dPtsZCb0xVA.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39384
IP address blocks: 45.154.64.0/22 maxlen: 24
185.118.112.0/22 maxlen: 24
185.240.248.0/22 maxlen: 24
2a03:6420::/32 maxlen: 32
2a0d:3b80::/29 maxlen: 32
2a0f:c700::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1f:c0:a9:e7:9a:26:3c:0c:89:ca:53:be:f1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ca505dc7e271911153090f674fb6c6426f4c550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:3e:d6:46:97:54:88:f2:c3:a8:13:90:35:
e9:75:57:3c:0f:6f:f9:69:70:11:bf:65:e1:f3:40:
17:ff:f2:a2:da:66:61:81:8e:fd:ed:1f:b5:5c:bb:
52:c8:0f:ed:8f:3f:03:e8:49:75:52:06:cd:ab:d6:
1a:f0:10:86:08:5a:85:a3:29:02:2b:6a:8d:46:23:
47:c2:25:3b:a7:a3:98:73:93:2f:cf:f1:b2:cf:78:
55:c9:c5:be:a3:60:e1:ff:a9:3b:bd:3b:f6:79:d6:
e2:bf:2e:c0:8a:12:98:37:1f:fe:ff:6e:06:5f:ac:
1f:ca:01:3e:66:45:4d:df:72:a6:68:0f:fc:e9:1f:
ed:a7:fc:0c:91:b5:24:2e:da:f0:5f:92:af:bd:90:
f6:6f:9a:14:46:e6:81:14:81:4b:c9:a5:e1:0a:73:
1a:a7:4c:46:a1:86:66:94:b0:20:45:42:b1:c5:19:
5b:47:af:d0:8c:89:52:a8:e9:5f:01:a4:94:75:73:
5a:2c:ca:6c:f6:cc:bd:bf:0d:77:5b:03:8c:7e:cf:
11:52:d7:da:a5:83:51:d4:85:91:cf:7f:30:ec:1c:
69:24:2c:f6:74:fb:80:d9:b5:f8:f2:97:55:11:f6:
57:c8:c5:d6:04:34:34:f0:aa:0e:ed:c0:f5:f0:75:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:05:DC:7E:27:19:11:15:30:90:F6:74:FB:6C:64:26:F4:C5:50
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/PKUF3H4nGREVMJD2dPtsZCb0xVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.64.0/22
185.118.112.0/22
185.240.248.0/22
IPv6:
2a03:6420::/32
2a0d:3b80::/29
2a0f:c700::/29
Signature Algorithm: sha256WithRSAEncryption
29:97:f7:bb:b8:72:eb:05:8a:27:bf:0c:d5:f8:9f:38:74:03:
2a:58:86:78:ce:ce:43:25:dd:43:5c:4e:5e:2e:db:69:23:28:
59:ef:da:4b:a7:c6:af:9f:f7:a6:1b:29:0f:63:29:06:72:63:
8d:f9:c0:ef:3a:18:f0:18:95:a9:92:6d:d4:0b:dd:c1:10:17:
1a:20:24:b1:16:26:6b:91:55:eb:ef:dc:e0:4e:f0:20:5c:16:
f6:26:45:13:35:96:62:d7:e3:7c:a4:37:af:3b:63:68:23:6b:
7d:ae:51:1b:2c:47:1f:16:78:4c:e2:3e:ea:63:13:18:5d:d4:
fc:61:50:48:86:e7:dd:e2:30:3f:74:29:8e:f0:9a:85:a4:27:
db:73:2d:d6:24:58:f5:6b:c1:e1:7e:32:2e:ef:21:b5:14:f8:
0b:f0:63:89:23:5f:ff:28:5c:8e:64:0a:39:a4:7b:88:5c:25:
5d:8e:86:0b:21:50:43:af:5f:80:27:94:44:28:d5:5e:8a:ec:
fb:2d:17:7a:eb:b6:b3:80:5d:3f:d4:07:52:9d:17:02:ff:b1:
7d:69:a1:61:62:14:e0:e5:c1:c8:c4:64:79:b5:3b:64:94:29:
53:41:b8:fd:e6:87:ae:ed:cf:5c:86:81:68:ff:51:9b:f4:fd:
be:4c:78:7e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQjah/AqeeaJjwMicpTvvHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OGU4MjNjZjI3NGQzODEwY2UwNWMxZDFiZjVlZWY5NWNi
MjExZGMwHhcNMjUwMTAxMTk0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2E1MDVkYzdlMjcxOTExMTUzMDkwZjY3NGZiNmM2NDI2ZjRjNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytY+1kaXVIjyw6gTkDXpdVc8D2/5
aXARv2Xh80AX//Ki2mZhgY797R+1XLtSyA/tjz8D6El1UgbNq9Ya8BCGCFqFoykC
K2qNRiNHwiU7p6OYc5Mvz/Gyz3hVycW+o2Dh/6k7vTv2edbivy7AihKYNx/+/24G
X6wfygE+ZkVN33KmaA/86R/tp/wMkbUkLtrwX5KvvZD2b5oURuaBFIFLyaXhCnMa
p0xGoYZmlLAgRUKxxRlbR6/QjIlSqOlfAaSUdXNaLMps9sy9vw13WwOMfs8RUtfa
pYNR1IWRz38w7BxpJCz2dPuA2bX48pdVEfZXyMXWBDQ08KoO7cD18HXUAQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFDylBdx+JxkRFTCQ9nT7bGQm9MVQMB8GA1UdIwQY
MBaAFHWOgjzydNOBDOBcHRv17vlcshHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80M2Q2OWUtYjY4ZC00MTQ5LThiMjkt
MDNkYjhiMzZkMzE5LzEvUEtVRjNING5HUkVWTUpEMmRQdHNaQ2IweFZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80M2Q2OWUtYjY4ZC00MTQ5LThiMjktMDNkYjhiMzZkMzE5
LzEvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQCLZpAAwQC
uXZwAwQCufD4MBsEAgACMBUDBQAqA2QgAwUDKg07gAMFAyoPxwAwDQYJKoZIhvcN
AQELBQADggEBACmX97u4cusFiie/DNX4nzh0AypYhnjOzkMl3UNcTl4u22kjKFnv
2kunxq+f96YbKQ9jKQZyY435wO86GPAYlamSbdQL3cEQFxogJLEWJmuRVevv3OBO
8CBcFvYmRRM1lmLX43ykN687Y2gja32uURssRx8WeEziPupjExhd1PxhUEiG593i
MD90KY7wmoWkJ9tzLdYkWPVrweF+Mi7vIbUU+AvwY4kjX/8oXI5kCjmke4hcJV2O
hgshUEOvX4AnlEQo1V6K7PstF3rrtrOAXT/UB1KdFwL/sX1poWFiFODlwcjEZHm1
O2SUKVNBuP3mh67tz1yGgWj/UZv0/b5MeH4=
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:16:16 2025 by rpki-client