Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa
File: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (raw, json)
Hash identifier: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=
Subject key identifier: 3C:8D:D7:BA:DC:74:94:19:59:05:EB:99:42:55:74:5E:E0:89:B0:6A
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 0194258F70699A841508D5D6C3C403477181
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16007
IP address blocks: 185.120.132.0/22 maxlen: 22
217.25.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:70:69:9a:84:15:08:d5:d6:c3:c4:03:47:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c8dd7badc7494195905eb994255745ee089b06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:02:3e:6a:8e:6f:5b:6c:14:8b:90:a4:6f:
51:b9:d7:ce:44:1c:6a:fc:6d:0b:13:bd:3f:d2:d7:
7b:72:d3:60:92:5b:6c:76:07:a6:33:2c:c7:f2:c8:
65:3f:c7:47:a7:e0:2a:28:eb:f4:19:0f:a9:78:7e:
17:2b:01:94:08:e2:75:44:f6:88:da:54:02:7c:b9:
e1:b4:45:dd:39:23:d2:ce:b0:58:96:7a:8d:5d:b9:
bf:45:04:07:d6:91:59:b0:22:9b:6f:9f:25:69:fd:
00:4d:ad:d2:6b:9c:e8:41:e0:16:3b:a2:e1:d5:1c:
26:98:0b:45:d4:b7:73:96:27:81:b0:3e:ce:25:b3:
ce:0d:7c:8e:22:18:b3:23:e3:8d:ff:6a:99:9c:84:
dd:07:fc:6e:2c:f8:c7:2e:78:32:bb:01:42:f5:96:
18:1d:a3:62:f0:71:35:1c:fe:d9:01:68:b0:d8:a0:
fd:f5:c2:fa:1c:b7:51:20:b6:f2:9e:5d:a5:f8:79:
56:35:95:3c:2d:76:c5:46:40:a8:21:b1:f9:48:4b:
7a:ba:3e:f5:bf:1b:9c:f6:17:6d:7f:bd:ad:56:b3:
e4:49:01:ab:d3:d7:35:81:e0:be:3b:f5:dd:21:52:
ca:8d:9c:41:64:71:81:2a:72:ed:00:1b:e8:b9:c2:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:D7:BA:DC:74:94:19:59:05:EB:99:42:55:74:5E:E0:89:B0:6A
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.132.0/22
217.25.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:4a:5e:aa:9c:d9:59:72:c2:32:80:f3:03:b5:87:85:92:15:
4e:8a:8e:75:bb:bf:1d:bf:4a:b8:1b:87:25:82:1f:cf:17:95:
c9:33:7b:de:43:c2:37:a4:8d:b8:75:c7:07:87:14:8a:7e:e6:
1c:8e:7b:87:7b:04:d6:a9:8e:c9:6c:39:c8:85:b6:8f:73:58:
e6:a8:66:0b:c8:c1:48:0a:82:7b:0c:15:a3:28:53:c7:53:ac:
03:42:be:3f:28:b4:85:f4:ab:44:d3:18:f1:0c:06:3f:b6:f0:
ce:e6:81:ac:0b:95:55:e4:19:b1:2f:75:67:91:65:a5:1c:be:
94:80:8f:01:3b:6b:9b:09:13:59:b8:bb:5b:fd:f3:45:f9:cd:
16:7a:a5:e7:6c:e9:ed:67:36:67:7a:59:5d:6e:f2:89:5e:a5:
a5:1d:c0:07:db:b2:30:ed:0a:dd:46:85:78:d3:78:28:01:fc:
35:e8:d7:6a:34:0f:05:8c:b6:ec:46:50:57:c6:7e:bf:4f:8f:
04:eb:8b:01:cf:d4:ac:dd:11:de:b8:10:32:32:a5:f4:0a:24:
f7:69:16:8e:44:7e:f7:fb:4c:90:f2:e8:f0:f3:ca:31:5c:06:
24:85:3c:8f:63:5b:22:b6:c3:e1:76:7f:d6:44:0a:01:10:bf:
ea:fb:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:10 2025 by rpki-client