Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3sMH_Ju6VmXqrO6WUiSPh5PYirQ.roa
File: 3sMH_Ju6VmXqrO6WUiSPh5PYirQ.roa (raw, json)
Hash identifier: 34BYG0vLfN4zcPaDwh6cfQzu63zbiQ2bsSTvcezO6EQ=
Subject key identifier: DE:C3:07:FC:9B:BA:56:65:EA:AC:EE:96:52:24:8F:87:93:D8:8A:B4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D7269BE35930424A59BD6ED172F77E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3sMH_Ju6VmXqrO6WUiSPh5PYirQ.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209224
IP address blocks: 185.217.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:26:9b:e3:59:30:42:4a:59:bd:6e:d1:72:f7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dec307fc9bba5665eaacee9652248f8793d88ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:c8:97:08:7e:5d:6a:58:35:df:ef:34:da:
9a:77:6d:ca:03:97:07:a8:46:58:b2:4f:0e:01:28:
8a:b3:31:b7:56:8c:b9:a1:be:53:c7:ff:a3:ef:2b:
06:9e:94:60:f7:9a:1f:c0:1d:e8:57:fb:5c:78:8d:
bf:65:f7:4d:de:e2:e8:fd:9b:ac:7e:38:3e:48:88:
6a:2c:ba:51:b8:01:21:2e:14:08:66:3d:8e:a3:f7:
5d:ff:5c:07:f7:29:e4:c0:2d:5b:f2:0c:45:c9:3b:
10:08:de:5a:76:17:26:c1:60:d4:3e:14:93:da:2c:
a1:fa:7b:53:8f:51:b1:bf:01:c6:1b:ea:30:53:75:
bb:54:b0:01:45:b0:e8:f9:06:5a:2f:1c:b7:f3:41:
7c:de:c9:d7:4a:18:e4:e6:f5:ed:c4:3c:ee:77:c0:
52:b2:09:f4:d8:68:c8:12:e5:7a:29:0c:38:c4:c0:
ec:c1:ee:a4:a3:ef:01:2b:dd:ec:96:f2:32:5a:99:
5e:77:13:a0:e6:11:88:ad:ea:a7:d7:15:a9:c4:03:
94:63:fa:57:0c:87:4c:c1:50:0b:3b:e4:c9:9e:70:
82:45:ae:c9:08:b7:ef:7f:e9:72:31:20:f8:a3:54:
6c:fa:24:46:10:d0:7e:c1:f1:6e:57:54:13:e4:bb:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:07:FC:9B:BA:56:65:EA:AC:EE:96:52:24:8F:87:93:D8:8A:B4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3sMH_Ju6VmXqrO6WUiSPh5PYirQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.197.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f7:18:a9:5f:70:ef:bb:55:b2:ae:8b:8a:47:38:9d:47:5f:
35:5e:d6:df:5e:f1:4e:b5:7d:7d:a6:ec:7d:ad:19:98:6f:47:
f9:21:a1:5a:0e:b9:85:71:5e:5c:d7:56:65:69:5d:6d:84:fd:
00:87:76:e0:a0:53:da:79:ef:c5:f2:ce:e3:49:ac:7e:fb:52:
c2:e0:f7:1b:3e:ba:02:5a:1f:b6:82:b2:4a:df:d6:92:21:2f:
ce:1e:25:61:ba:9c:fe:ca:fb:3f:96:dd:14:7e:61:94:e6:2b:
26:f4:5c:69:95:bb:22:ab:20:6d:1b:f1:a8:c3:ce:44:76:c8:
24:76:20:24:f2:99:9a:7c:48:d6:67:19:7b:fd:5e:d3:e6:1c:
df:40:cb:25:89:ad:d7:c6:53:27:0a:47:66:49:e4:02:e8:e1:
86:09:ae:4d:dc:50:8f:82:70:f9:c4:d5:7c:49:8c:2d:d1:27:
ac:67:4e:fa:3b:ff:99:80:33:9d:7e:d2:8a:40:9a:65:69:9d:
bf:53:e4:4b:62:eb:4c:93:83:3d:a2:74:f9:58:df:0a:26:e8:
f3:5f:9e:5e:9a:36:ea:5a:8f:51:33:cc:6f:5d:ae:e5:cc:74:
31:a3:d7:5b:0f:2a:68:2c:be:85:af:3d:76:fd:0b:84:a0:2d:
6e:10:8d:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1yab41kwQkpZvW7Rcvd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWMzMDdmYzliYmE1NjY1ZWFhY2VlOTY1MjI0OGY4NzkzZDg4YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuDIlwh+XWpYNd/vNNqad23KA5cH
qEZYsk8OASiKszG3Voy5ob5Tx/+j7ysGnpRg95ofwB3oV/tceI2/ZfdN3uLo/Zus
fjg+SIhqLLpRuAEhLhQIZj2Oo/dd/1wH9ynkwC1b8gxFyTsQCN5adhcmwWDUPhST
2iyh+ntTj1GxvwHGG+owU3W7VLABRbDo+QZaLxy380F83snXShjk5vXtxDzud8BS
sgn02GjIEuV6KQw4xMDswe6ko+8BK93slvIyWpledxOg5hGIreqn1xWpxAOUY/pX
DIdMwVALO+TJnnCCRa7JCLfvf+lyMSD4o1Rs+iRGENB+wfFuV1QT5LthMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN7DB/ybulZl6qzullIkj4eT2Iq0MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvM3NNSF9KdTZWbVhxck82V1VpU1BoNVBZaXJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudnFMA0G
CSqGSIb3DQEBCwUAA4IBAQBw9xipX3Dvu1WyrouKRzidR181XtbfXvFOtX19pux9
rRmYb0f5IaFaDrmFcV5c11ZlaV1thP0Ah3bgoFPaee/F8s7jSax++1LC4PcbProC
Wh+2grJK39aSIS/OHiVhupz+yvs/lt0UfmGU5ism9FxplbsiqyBtG/Gow85Edsgk
diAk8pmafEjWZxl7/V7T5hzfQMslia3XxlMnCkdmSeQC6OGGCa5N3FCPgnD5xNV8
SYwt0SesZ076O/+ZgDOdftKKQJplaZ2/U+RLYutMk4M9onT5WN8KJujzX55emjbq
Wo9RM8xvXa7lzHQxo9dbDypoLL6Frz12/QuEoC1uEI2O
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:30 2025 by rpki-client