Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/P3Zb0tp9Rsflqo-SdMYB5B2rn3I.roa
File: P3Zb0tp9Rsflqo-SdMYB5B2rn3I.roa (raw, json)
Hash identifier: dB8FKRF/EgTRjR22NsFt6dsSXJXNS8BYGPuWs26l7mU=
Subject key identifier: 3F:76:5B:D2:DA:7D:46:C7:E5:AA:8F:92:74:C6:01:E4:1D:AB:9F:72
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA3AEF00CCD020C6B50183893898F1
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/P3Zb0tp9Rsflqo-SdMYB5B2rn3I.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50667
IP address blocks: 185.99.88.0/24 maxlen: 24
185.99.89.0/24 maxlen: 24
185.99.90.0/24 maxlen: 24
188.214.156.0/24 maxlen: 24
188.240.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3a:ef:00:cc:d0:20:c6:b5:01:83:89:38:98:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f765bd2da7d46c7e5aa8f9274c601e41dab9f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:ab:3e:34:65:7e:45:b2:f0:ab:d4:81:1b:
a6:97:dc:2b:a3:50:5f:75:a9:74:cf:58:e5:93:9a:
89:68:e7:ca:69:d8:44:2e:f9:68:0f:a1:c8:e5:81:
1b:1a:21:62:80:8e:2e:df:16:cb:15:21:1f:4d:2a:
c9:80:e1:5f:7a:6e:57:16:1c:6a:85:1c:4e:ee:89:
d7:74:c5:d0:24:9f:10:4b:c2:c0:ac:ea:11:f1:90:
4a:d4:b6:c6:b2:47:42:13:67:9e:d4:d4:70:a8:03:
3d:96:ba:bb:f3:4d:45:3e:15:dd:7d:1e:52:c6:8d:
22:fb:0c:a8:bb:36:d6:05:a3:f8:42:ff:d6:65:b9:
41:85:75:fb:e8:ce:55:f1:f5:68:7e:68:a3:f2:b7:
10:60:e1:bc:f6:2c:53:5b:c8:ad:dc:90:17:35:76:
1c:b4:ad:5b:19:72:07:77:29:75:39:ae:b0:ee:a1:
c6:0d:19:3d:e3:08:a5:4c:28:bb:66:d6:8f:19:a1:
7f:f8:f3:af:04:cf:cb:8e:d1:50:dc:64:8f:42:eb:
0c:51:01:27:11:56:22:68:0f:45:ae:2b:c8:12:a4:
c9:b4:ba:b8:5f:9b:91:59:3e:b5:5f:e4:e3:7c:8e:
a5:37:60:12:d3:4d:e1:a5:2e:b0:2f:56:5b:ac:21:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:5B:D2:DA:7D:46:C7:E5:AA:8F:92:74:C6:01:E4:1D:AB:9F:72
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/P3Zb0tp9Rsflqo-SdMYB5B2rn3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.88.0-185.99.90.255
188.214.156.0/24
188.240.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:72:88:b8:91:b1:7d:aa:3c:63:07:46:92:b7:88:20:7d:5f:
19:48:51:c0:4e:c0:b6:f1:6c:25:68:78:34:bd:91:9f:0c:be:
4f:fb:ee:33:4b:0a:49:a7:9e:b4:aa:8a:ea:f3:88:e8:0e:15:
2f:27:4f:39:63:c5:ad:0e:04:e3:14:8a:01:50:e8:80:dd:66:
b7:1b:b6:b2:5d:39:a9:59:b3:24:54:46:60:a1:08:81:f7:63:
9b:b8:fe:2c:5a:97:1d:22:8a:4e:2a:75:d5:3a:62:23:52:d7:
94:be:8a:e6:02:3c:78:f9:5d:92:ab:14:ff:2c:20:7a:43:e6:
0f:1e:8c:fe:5b:93:13:c3:77:e6:57:19:52:6d:36:66:6f:cb:
f6:ba:dd:1d:13:fd:80:a8:de:24:ee:15:3d:56:82:a0:10:ae:
14:11:61:2e:7a:f8:ad:c0:4d:af:76:4a:17:a7:f8:cb:5b:43:
81:97:a1:99:d4:a4:45:16:b2:1f:e8:6c:d0:a4:1c:95:1b:df:
04:35:dc:c5:7b:b8:69:fd:91:75:3e:31:1b:d8:2d:e2:58:8c:
dd:02:04:7f:b8:55:bf:54:ce:b3:04:7a:37:74:11:36:51:51:
eb:90:90:bc:48:a8:f3:00:4d:c4:6f:93:47:46:7d:bc:e7:a0:
af:bd:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:40:52 2025 by rpki-client