Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/3-lCwXyhs7gijBnZJRUSuPJM_Pw.roa
File: 3-lCwXyhs7gijBnZJRUSuPJM_Pw.roa (raw, json)
Hash identifier: YQ/z+1V67b2+kazhrsP+LNf7uo8cgh4S0hNLSnP+da8=
Subject key identifier: DF:E9:42:C1:7C:A1:B3:B8:22:8C:19:D9:25:15:12:B8:F2:4C:FC:FC
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F2059697051CA8726309DD22D10F5
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/3-lCwXyhs7gijBnZJRUSuPJM_Pw.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211249
IP address blocks: 95.183.138.0/23 maxlen: 23
95.183.192.0/22 maxlen: 22
193.140.1.0/24 maxlen: 24
193.140.2.0/23 maxlen: 23
193.140.4.0/22 maxlen: 22
193.255.112.0/21 maxlen: 21
194.27.92.0/22 maxlen: 22
194.27.96.0/22 maxlen: 22
194.27.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:20:59:69:70:51:ca:87:26:30:9d:d2:2d:10:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfe942c17ca1b3b8228c19d9251512b8f24cfcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:c9:fa:58:85:49:d6:1d:da:2a:6e:13:57:
ab:7e:cb:b2:8f:9b:a1:3c:0c:71:e4:1a:57:5c:93:
16:4f:29:54:f8:2b:c4:4d:20:a2:fc:89:34:1e:91:
65:b8:02:49:d3:4d:1c:66:a1:05:60:ae:ff:ba:94:
22:48:e7:98:6c:7c:c6:f7:83:c1:6e:13:bb:d9:3f:
7f:ca:7a:aa:2f:19:e8:6a:d3:6d:e6:37:03:eb:e7:
95:68:35:83:fc:08:56:14:b7:05:dd:1c:97:b9:00:
ca:ea:b6:f8:39:bb:b1:90:f6:17:10:ce:2c:8e:f2:
bb:e6:80:55:bf:1b:24:14:6b:03:c1:fb:c6:2a:b9:
60:f1:2f:a4:96:4f:95:bc:99:51:36:a4:0b:19:3d:
d3:ca:b5:0f:bd:7b:32:5c:2b:98:f1:36:77:eb:0b:
63:e4:5c:8e:63:eb:e7:50:9a:47:f4:7d:20:40:40:
e4:a0:12:2d:2a:85:41:81:9c:65:ee:03:e5:48:55:
b4:f3:bb:71:8c:40:99:26:7d:5a:ab:56:dd:53:d1:
5b:a8:c1:18:b0:2d:70:12:26:35:b7:a7:c4:17:f4:
7d:f3:43:0d:74:78:1d:a0:40:9a:11:84:c0:f5:a6:
95:c9:fd:4f:5e:af:d6:25:b1:43:eb:ef:28:6f:b9:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:42:C1:7C:A1:B3:B8:22:8C:19:D9:25:15:12:B8:F2:4C:FC:FC
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/3-lCwXyhs7gijBnZJRUSuPJM_Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.138.0/23
95.183.192.0/22
193.140.1.0-193.140.7.255
193.255.112.0/21
194.27.92.0-194.27.101.255
Signature Algorithm: sha256WithRSAEncryption
8f:75:aa:b8:32:1d:47:51:4b:47:e3:59:8e:e8:fa:f0:8f:b0:
ba:48:0d:c7:61:bf:0e:5f:9b:85:5d:95:9e:b3:34:c3:69:5e:
b3:0b:1e:c6:95:a7:89:94:76:33:aa:d9:25:62:e6:b1:02:d0:
fb:fd:bd:a8:48:ff:e7:9a:60:88:bf:8e:57:28:3e:47:1d:d0:
3a:bd:b9:39:de:97:4b:a2:7b:d7:ff:7f:f9:47:cb:62:cb:83:
9f:87:f7:ed:06:26:79:1e:cb:03:2c:bc:5a:ea:6f:d1:f8:bc:
8e:e3:14:87:da:da:cb:c2:e9:65:fe:9a:7e:99:dd:f2:88:2d:
5d:14:66:f4:9c:35:8e:0c:6b:9e:d2:6c:50:f3:bd:55:9b:03:
0f:fb:6a:a2:0a:a4:4b:02:68:50:7f:23:ca:b7:fe:6b:41:3b:
6f:e3:43:5c:93:c0:49:71:11:ec:7d:c1:9c:ea:39:00:20:60:
dd:cf:72:ab:e1:f3:dd:2f:d4:3f:54:a5:8d:3a:c6:fd:ac:61:
93:5d:87:56:d8:76:ca:62:ff:29:6f:e8:72:de:8c:18:78:2d:
8d:3e:46:76:52:ad:4b:ea:39:bd:f8:ac:22:5d:ee:6a:70:9b:
a8:12:cb:f2:56:e0:78:5f:b1:ab:18:8d:a1:ab:3d:37:86:19:
f9:36:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:08:43 2025 by rpki-client