Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/3uMeDtxgqX-k3ZAHOS4EeEV9Yc8.roa
File: 3uMeDtxgqX-k3ZAHOS4EeEV9Yc8.roa (raw, json)
Hash identifier: jzm5EtMLsz1mcZpTD9DsVPBX2qqL5NIfQpuD7GNpvnQ=
Subject key identifier: DE:E3:1E:0E:DC:60:A9:7F:A4:DD:90:07:39:2E:04:78:45:7D:61:CF
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 019420D6379475B9727377D11C19BBE0EF8F
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/3uMeDtxgqX-k3ZAHOS4EeEV9Yc8.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202276
IP address blocks: 185.251.8.0/23 maxlen: 23
185.251.10.0/23 maxlen: 23
2a03:b8c0::/48 maxlen: 48
2a03:b8c0:1::/48 maxlen: 48
2a03:b8c0:2::/48 maxlen: 48
2a03:b8c0:3::/48 maxlen: 48
2a03:b8c0:5::/48 maxlen: 48
2a03:b8c0:7::/48 maxlen: 48
2a03:b8c0:8::/48 maxlen: 48
2a03:b8c0:9::/48 maxlen: 48
2a03:b8c0:10::/48 maxlen: 48
2a03:b8c0:12::/48 maxlen: 48
2a03:b8c0:13::/48 maxlen: 48
2a03:b8c0:14::/48 maxlen: 48
2a03:b8c0:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:37:94:75:b9:72:73:77:d1:1c:19:bb:e0:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dee31e0edc60a97fa4dd9007392e0478457d61cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:57:06:06:5a:c4:13:f4:23:32:69:6d:9b:
3b:49:3f:fe:6c:c3:66:37:f0:77:72:09:59:ec:78:
32:3d:2f:b6:de:43:7e:10:af:4f:7b:f6:a3:71:02:
7b:4e:45:59:0e:b7:c1:3d:33:2c:8f:ca:21:c4:85:
d2:0b:2a:f6:7e:3a:23:ee:7b:c3:37:c4:7e:02:09:
59:26:41:25:83:63:d5:6c:9b:cf:f3:90:84:4e:6b:
15:27:36:53:c7:48:b5:35:4c:9b:42:95:03:19:fa:
eb:5d:c3:bf:7d:94:26:88:a4:52:75:28:5d:5d:f2:
1d:82:ab:58:0c:ac:7e:2b:4a:3b:94:8f:b7:01:b2:
bc:04:54:3a:05:1d:42:7c:94:c7:b9:40:a0:68:a2:
b9:b6:8f:84:7c:f2:29:75:9a:c6:17:3f:87:52:6d:
00:3c:63:fc:7b:20:a9:14:fb:a4:6b:cd:11:5a:1a:
58:47:5a:16:d1:8c:5b:c5:c1:70:65:b3:81:41:65:
a5:9c:d0:eb:24:e0:ba:a3:1f:29:95:46:6c:18:12:
af:31:c6:13:23:51:52:47:70:3d:5b:ab:c1:8e:ae:
e8:22:6a:0b:e4:1b:17:c3:27:9f:3c:1e:70:a5:f9:
83:88:0d:3b:bc:75:d7:2c:e5:a2:f5:e1:93:92:b0:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:1E:0E:DC:60:A9:7F:A4:DD:90:07:39:2E:04:78:45:7D:61:CF
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/3uMeDtxgqX-k3ZAHOS4EeEV9Yc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.8.0/22
IPv6:
2a03:b8c0::/46
2a03:b8c0:5::/48
2a03:b8c0:7::-2a03:b8c0:9:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:10::/48
2a03:b8c0:12::-2a03:b8c0:14:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:2f::/48
Signature Algorithm: sha256WithRSAEncryption
57:93:f0:d2:97:26:12:71:8f:e1:d8:79:68:9b:81:42:50:6e:
38:08:f8:f9:15:e6:b5:df:c0:fd:15:7b:35:2f:4f:0c:92:22:
6a:f2:5b:65:4d:c9:7d:9b:a2:43:2d:62:9a:be:74:fd:47:d4:
aa:24:d2:de:0f:34:6f:75:bb:d4:c9:6c:f0:5e:31:88:fc:69:
44:21:b5:45:4f:7d:ed:28:16:f3:fa:dc:52:84:b9:07:40:01:
9f:30:c4:30:99:a9:bc:66:77:ab:c1:2f:b1:b5:ec:59:60:22:
9e:86:da:92:ab:45:86:69:d9:42:a6:67:22:eb:c9:ab:67:de:
54:c7:be:99:80:bf:7b:93:7c:52:d4:18:48:9f:aa:f5:b6:15:
b0:1b:46:84:a7:90:be:22:36:59:42:32:40:3e:6a:40:6f:c4:
a0:85:87:00:9d:0d:16:2f:97:b8:b7:80:37:71:c0:b6:45:6a:
3a:65:dc:20:6e:6f:5c:49:f5:cb:ce:6e:52:d8:f3:3b:a9:9a:
d6:f8:45:7d:87:90:7b:3b:2a:05:08:d3:29:3b:91:1a:a4:be:
42:c6:f1:48:5d:b6:12:27:46:47:48:3d:ba:73:e0:81:f6:a2:
67:e1:9f:16:ff:0a:7a:b0:65:4f:e7:3a:bb:d6:e3:a4:e6:4d:
83:3f:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:47 2025 by rpki-client