Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b3iGjSLJRDlsuqzafXP65Eu7NLE.roa
File: b3iGjSLJRDlsuqzafXP65Eu7NLE.roa (raw, json)
Hash identifier: VwbgPkJgK0a1dW1bYvGPHbVZwmAmk6vEtE2YSSSpQW4=
Subject key identifier: 6F:78:86:8D:22:C9:44:39:6C:BA:AC:DA:7D:73:FA:E4:4B:BB:34:B1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01971CDB79B185678A8C201D486F5717ED2A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b3iGjSLJRDlsuqzafXP65Eu7NLE.roa
Signing time: Thu 29 May 2025 16:23:54 +0000
ROA not before: Thu 29 May 2025 16:23:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212862
IP address blocks: 185.196.40.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
194.38.56.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:db:79:b1:85:67:8a:8c:20:1d:48:6f:57:17:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 29 16:23:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f78868d22c944396cbaacda7d73fae44bbb34b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:40:31:9b:6e:b2:35:d0:53:a6:ef:e5:00:
01:47:60:cc:d1:1d:a8:52:1d:1a:a5:f2:b9:25:82:
3d:6b:b8:46:b8:4d:64:4f:7a:2b:78:12:73:f8:9b:
79:fa:4c:e5:61:3c:48:0e:22:79:e0:8c:25:9e:0b:
24:72:47:c2:00:a2:b5:7a:71:0d:b5:3c:58:2a:5b:
65:7c:f4:ed:f2:97:39:58:0c:62:ea:0d:b7:7e:9d:
4f:2b:5d:a0:01:61:79:62:da:09:2e:13:87:f9:43:
67:29:61:e6:82:76:45:63:82:97:8e:2e:87:9c:72:
75:77:d6:31:81:e3:74:64:33:b5:d0:0c:6c:c9:50:
2c:55:43:00:59:10:b1:c7:ac:42:bc:bd:a7:f8:48:
1e:cf:3b:53:81:70:4f:da:d8:e5:30:df:b3:eb:9f:
8e:c0:5d:dc:c4:bd:4c:80:b6:0e:9c:d7:8c:e3:60:
5c:65:21:f6:bd:1d:c4:72:39:3b:e3:96:2f:e0:37:
e2:48:5c:88:d4:67:73:c1:51:2c:97:57:a4:e6:5c:
8a:6c:9e:c3:9c:e0:6f:58:47:17:f3:0a:b3:9f:5f:
a0:83:20:d9:9f:72:bf:37:23:80:1b:4a:a3:60:a6:
f5:d6:80:0a:f6:16:a1:ad:0e:59:c8:ca:a0:49:40:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:78:86:8D:22:C9:44:39:6C:BA:AC:DA:7D:73:FA:E4:4B:BB:34:B1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b3iGjSLJRDlsuqzafXP65Eu7NLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.40.0/23
194.38.56.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:a0:7c:49:a5:df:44:72:6e:ed:64:48:96:28:cf:80:b0:3f:
2a:c2:b0:96:ea:95:61:e4:2d:cf:a8:3d:9d:99:cf:c4:9c:a5:
c2:09:91:cf:73:db:b6:1d:9b:dd:ce:5f:a8:95:56:b4:5d:55:
d7:82:41:5a:26:bc:b3:0b:31:d1:32:c2:96:f6:ad:c7:07:60:
01:31:28:a3:0e:ad:47:2d:d1:dd:29:c5:75:f0:b2:26:e5:17:
4b:a0:28:76:2c:5e:09:45:b5:a0:d9:3c:c9:fb:25:32:19:2b:
16:98:60:37:6c:9b:75:d7:b9:b1:bd:c2:f0:94:94:fc:96:58:
0c:e2:8e:5e:e6:f0:f9:3e:d1:24:0c:14:03:10:0d:d7:c2:20:
7c:8f:61:a4:49:84:c0:d2:ee:48:c5:e4:2c:8a:5a:fa:34:a5:
5c:74:1e:f1:3e:79:88:93:ef:4a:09:96:aa:60:21:22:d9:87:
99:67:25:6c:22:08:a7:34:93:27:fa:7c:71:bd:7a:5a:8d:de:
cf:b1:ef:74:38:3b:e9:3a:5a:21:07:39:cf:ad:c5:ed:92:18:
08:6e:40:e4:bb:9e:39:17:b6:cb:8a:92:5f:72:95:25:ef:8f:
ab:1a:a5:62:45:ef:bd:6f:0c:8e:55:d2:44:76:4b:1d:5a:a5:
2e:6e:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:20:16 2025 by rpki-client