Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/3CFsdbO_NdkVNQKrJjhbIF4SBso.roa
File: 3CFsdbO_NdkVNQKrJjhbIF4SBso.roa (raw, json)
Hash identifier: R9TEphKFrn4GbHRX9svL6mjGOOWCjifpYgOEm5Ktk3o=
Subject key identifier: DC:21:6C:75:B3:BF:35:D9:15:35:02:AB:26:38:5B:20:5E:12:06:CA
Certificate issuer: /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial: 01941F8C31E679134C4E38190BF903EA91A5
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/3CFsdbO_NdkVNQKrJjhbIF4SBso.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211719
IP address blocks: 185.244.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:31:e6:79:13:4c:4e:38:19:0b:f9:03:ea:91:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc216c75b3bf35d9153502ab26385b205e1206ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:6a:2b:12:d7:d2:a7:30:d9:48:e5:c0:49:
47:a3:37:35:f6:eb:3c:a1:88:45:9f:09:72:9f:c5:
ff:18:c7:ef:9d:90:f6:b6:3a:11:e8:6f:dc:48:82:
56:b2:d5:27:51:0e:44:35:b8:65:d8:25:7f:f0:66:
c7:7d:6c:c4:52:1f:c4:70:29:5e:0e:c0:f7:df:4c:
57:ec:59:cf:ff:c9:be:60:b4:de:11:57:5f:d4:1c:
67:60:ce:3d:a5:8b:6c:5b:3a:dd:8e:df:0e:a0:75:
cb:ca:06:97:85:4a:7f:dd:fc:e8:80:15:c0:77:ad:
77:a4:82:41:d9:10:b9:10:e0:cc:65:f6:e4:62:b9:
ff:0f:e6:7b:6c:d0:6f:24:97:cd:8d:b4:ae:78:1c:
98:8d:9a:55:c2:e8:92:58:ce:5d:bd:a2:10:3b:b0:
6c:46:b5:d0:b7:12:f9:28:00:da:4b:a1:21:ed:e8:
e3:c5:73:f5:ff:4b:65:8b:67:38:db:43:e7:21:d7:
24:de:51:64:f3:fc:d7:21:b9:5e:c0:e1:6a:db:c5:
87:f2:1d:ea:78:d7:04:3e:8e:9d:3d:ce:9d:ba:94:
08:c9:7f:16:09:9c:30:f1:d6:10:1a:a5:4a:8b:b8:
fd:e0:1c:f8:7f:8f:8e:08:b3:17:2d:e8:e3:a9:cd:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:21:6C:75:B3:BF:35:D9:15:35:02:AB:26:38:5B:20:5E:12:06:CA
X509v3 Authority Key Identifier:
keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/3CFsdbO_NdkVNQKrJjhbIF4SBso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c7:76:27:4e:9a:ed:0a:1a:0d:fc:6d:99:88:7f:b6:20:cc:
21:04:a0:cb:14:26:3f:75:92:c0:71:c5:3a:8c:bb:92:79:57:
c5:40:2e:e7:d8:8c:be:1d:d3:9d:e3:77:6c:43:b8:a7:aa:8c:
af:7c:7b:09:55:59:cf:13:3a:bf:e1:ac:a1:da:bd:5d:95:87:
46:51:20:00:2d:b4:ed:ee:e6:66:19:06:12:24:25:2c:5d:c7:
d4:6d:f2:82:f7:d1:b2:2d:4d:fe:3e:4d:16:ec:d5:37:49:31:
c1:2b:0a:73:e6:5b:f1:02:69:45:81:3a:a8:76:a7:ec:93:5b:
c7:d2:3d:36:1e:06:a8:52:d7:51:03:e2:c7:fe:38:b6:58:e4:
62:ec:19:7d:cd:e7:77:72:df:f6:1c:b1:2e:ed:26:39:1d:0a:
f7:d8:49:ad:eb:50:0e:33:58:28:fd:4a:d2:4f:ce:b0:72:bd:
b8:b7:55:f5:f5:aa:53:33:ec:5b:6e:4a:b3:3c:a6:7c:cd:d0:
cd:57:d9:e9:1c:a8:f0:ff:5d:1e:ed:e2:22:f0:77:1b:9a:5f:
62:dc:dc:00:5a:2c:49:22:e2:8c:10:47:c7:3b:76:a0:33:6c:
cb:ba:10:b7:15:c3:12:a5:bf:2e:a3:fb:b3:32:c1:2c:86:92:
26:cc:e6:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDHmeRNMTjgZC/kD6pGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmRkY2EwYWIyZWJlOGI4NTI5YTdjOWNlMWRkNmU4ZWE1
NTVjM2QwHhcNMjUwMTAxMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzIxNmM3NWIzYmYzNWQ5MTUzNTAyYWIyNjM4NWIyMDVlMTIwNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5xqKxLX0qcw2UjlwElHozc19us8
oYhFnwlyn8X/GMfvnZD2tjoR6G/cSIJWstUnUQ5ENbhl2CV/8GbHfWzEUh/EcCle
DsD330xX7FnP/8m+YLTeEVdf1BxnYM49pYtsWzrdjt8OoHXLygaXhUp/3fzogBXA
d613pIJB2RC5EODMZfbkYrn/D+Z7bNBvJJfNjbSueByYjZpVwuiSWM5dvaIQO7Bs
RrXQtxL5KADaS6Eh7ejjxXP1/0tli2c420PnIdck3lFk8/zXIblewOFq28WH8h3q
eNcEPo6dPc6dupQIyX8WCZww8dYQGqVKi7j94Bz4f4+OCLMXLejjqc2F/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNwhbHWzvzXZFTUCqyY4WyBeEgbKMB8GA1UdIwQY
MBaAFG293KCrLr6LhSmnyc4d1ujqVVw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIzY29Lc3V2b3VGS2FmSnpoM1c2T3BWWEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83M2U3OGUtNDVjZi00NWYwLTgyYmYt
MzlmZDNjYTc2Y2Q2LzEvM0NGc2RiT19OZGtWTlFLckpqaGJJRjRTQnNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83M2U3OGUtNDVjZi00NWYwLTgyYmYtMzlmZDNjYTc2Y2Q2
LzEvYmIzY29Lc3V2b3VGS2FmSnpoM1c2T3BWWEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufTjMA0G
CSqGSIb3DQEBCwUAA4IBAQAOx3YnTprtChoN/G2ZiH+2IMwhBKDLFCY/dZLAccU6
jLuSeVfFQC7n2Iy+HdOd43dsQ7inqoyvfHsJVVnPEzq/4ayh2r1dlYdGUSAALbTt
7uZmGQYSJCUsXcfUbfKC99GyLU3+Pk0W7NU3STHBKwpz5lvxAmlFgTqodqfsk1vH
0j02HgaoUtdRA+LH/ji2WORi7Bl9zed3ct/2HLEu7SY5HQr32Emt61AOM1go/UrS
T86wcr24t1X19apTM+xbbkqzPKZ8zdDNV9npHKjw/10e7eIi8Hcbml9i3NwAWixJ
IuKMEEfHO3agM2zLuhC3FcMSpb8uo/uzMsEshpImzOaw
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:47 2025 by rpki-client