Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3B3RYSneUpCRzPPXWjI2icgjd8M.roa
File: 3B3RYSneUpCRzPPXWjI2icgjd8M.roa (raw, json)
Hash identifier: PXkt+zMvpm3YF5HDAIxCIM38Ml/JLPvY7xyGo2uJ21U=
Subject key identifier: DC:1D:D1:61:29:DE:52:90:91:CC:F3:D7:5A:32:36:89:C8:23:77:C3
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282420B07CF82918F9DD9F51EC3E80A8
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3B3RYSneUpCRzPPXWjI2icgjd8M.roa
Signing time: Thu 02 Jan 2025 17:50:43 +0000
ROA not before: Thu 02 Jan 2025 17:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 94.72.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:20:b0:7c:f8:29:18:f9:dd:9f:51:ec:3e:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc1dd16129de529091ccf3d75a323689c82377c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:6b:35:50:cd:33:3f:e5:4c:3c:95:7e:44:
66:c8:d8:b4:4c:6c:1f:68:23:05:6a:eb:bb:b9:01:
11:0e:60:e7:4b:06:09:48:a5:7b:54:e8:88:78:ff:
67:f4:f3:20:4d:12:46:c6:51:d0:4a:a2:d1:f7:5b:
57:21:20:7d:fc:34:28:5a:d0:8c:65:fb:5d:86:4d:
e7:79:7d:7c:00:2f:ff:a6:34:a3:5e:72:88:70:b2:
1b:d1:47:d3:19:0e:80:ab:2a:a9:2d:55:39:a9:ce:
ae:79:90:8e:a6:a3:25:07:e7:f8:eb:5d:47:39:14:
03:8c:36:42:f2:31:4e:84:fe:ee:ab:42:2f:7e:98:
fc:b8:75:fe:dd:2c:71:ca:46:6c:98:9d:79:8e:8c:
71:ce:3a:fc:b1:8e:b7:08:46:a4:b2:67:cf:80:22:
04:ad:3b:49:cb:ea:aa:de:49:0b:c1:04:78:a2:2b:
57:53:55:e0:17:af:5f:e0:ca:7b:25:e8:4b:53:22:
ce:49:71:1f:3b:00:06:ea:3f:02:d2:70:00:5d:e1:
33:cb:5b:cb:48:c8:3f:15:63:c7:c4:a2:62:b9:27:
cd:bd:4c:9b:f4:2f:4d:6b:46:e9:f1:53:bb:f6:30:
2c:f7:e3:93:fc:52:b7:41:32:09:d4:d1:fd:ec:eb:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:D1:61:29:DE:52:90:91:CC:F3:D7:5A:32:36:89:C8:23:77:C3
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3B3RYSneUpCRzPPXWjI2icgjd8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.141.0/24
Signature Algorithm: sha256WithRSAEncryption
01:51:47:80:17:b1:bf:02:8d:1a:2c:40:a5:f5:65:70:76:28:
9f:3a:31:26:b4:15:d0:15:58:16:7f:65:d8:3d:3d:69:85:04:
a6:7c:35:7d:b2:f4:69:07:41:af:7e:d4:b2:e4:91:3f:14:ec:
ff:f3:33:04:a8:07:1a:fc:24:fe:b9:e8:89:7e:9d:91:bd:6b:
71:25:24:85:85:0a:e9:d5:88:6c:a0:c2:24:ec:5a:30:d1:45:
6d:13:25:15:18:3c:fd:e9:e3:0f:9b:0a:9b:ce:80:2e:f1:19:
47:38:5a:81:c2:aa:fd:cc:e0:b8:20:d9:1e:e5:c7:e2:65:f7:
4d:bb:2f:95:23:2f:ce:f6:1f:b8:df:2a:e9:b7:7d:61:3e:ae:
8d:db:0d:d8:a7:ba:94:20:a9:20:5c:5e:bd:da:d8:e3:68:e4:
29:af:6f:52:1d:b1:88:68:63:1e:c5:4a:e4:e2:7f:97:a1:f3:
9c:93:3a:56:ed:e9:28:95:11:3f:5c:d3:8a:d4:0c:a7:47:cf:
8e:69:6e:b2:c0:b6:dc:69:cf:91:22:a0:32:1e:ab:af:f1:b1:
41:68:57:ca:b0:50:87:a7:2a:7e:95:45:be:9d:a0:52:38:ae:
04:bb:56:01:dc:f2:c2:4c:ef:75:28:75:73:23:86:9b:e3:a1:
f5:09:53:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJCCwfPgpGPndn1HsPoCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTAyMTc1MDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzFkZDE2MTI5ZGU1MjkwOTFjY2YzZDc1YTMyMzY4OWM4MjM3N2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmFrNVDNMz/lTDyVfkRmyNi0TGwf
aCMFauu7uQERDmDnSwYJSKV7VOiIeP9n9PMgTRJGxlHQSqLR91tXISB9/DQoWtCM
Zftdhk3neX18AC//pjSjXnKIcLIb0UfTGQ6AqyqpLVU5qc6ueZCOpqMlB+f4611H
ORQDjDZC8jFOhP7uq0Ivfpj8uHX+3SxxykZsmJ15joxxzjr8sY63CEaksmfPgCIE
rTtJy+qq3kkLwQR4oitXU1XgF69f4Mp7JehLUyLOSXEfOwAG6j8C0nAAXeEzy1vL
SMg/FWPHxKJiuSfNvUyb9C9Na0bp8VO79jAs9+OT/FK3QTIJ1NH97OvKYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNwd0WEp3lKQkczz11oyNonII3fDMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvM0IzUllTbmVVcENSelBQWFdqSTJpY2dqZDhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXkiNMA0G
CSqGSIb3DQEBCwUAA4IBAQABUUeAF7G/Ao0aLECl9WVwdiifOjEmtBXQFVgWf2XY
PT1phQSmfDV9svRpB0GvftSy5JE/FOz/8zMEqAca/CT+ueiJfp2RvWtxJSSFhQrp
1YhsoMIk7Fow0UVtEyUVGDz96eMPmwqbzoAu8RlHOFqBwqr9zOC4INke5cfiZfdN
uy+VIy/O9h+43yrpt31hPq6N2w3Yp7qUIKkgXF692tjjaOQpr29SHbGIaGMexUrk
4n+XofOckzpW7ekolRE/XNOK1AynR8+OaW6ywLbcac+RIqAyHquv8bFBaFfKsFCH
pyp+lUW+naBSOK4Eu1YB3PLCTO91KHVzI4ab46H1CVOb
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:53 2025 by rpki-client