Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/3yPa4BQmuQtptzt1inGpjbsFSZE.roa
File: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (raw, json)
Hash identifier: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=
Subject key identifier: DF:23:DA:E0:14:26:B9:0B:69:B7:3B:75:8A:71:A9:8D:BB:05:49:91
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 019425FDCB130D84A876AEDD0EBA6A887CBE
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/3yPa4BQmuQtptzt1inGpjbsFSZE.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 193.203.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cb:13:0d:84:a8:76:ae:dd:0e:ba:6a:88:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df23dae01426b90b69b73b758a71a98dbb054991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:97:8f:77:07:94:96:76:a3:8c:aa:c3:92:
54:b5:d6:9e:df:1f:bd:32:1d:95:5d:0f:ad:39:05:
58:bd:68:05:84:0c:93:66:5c:3a:d8:e2:29:be:e1:
73:c7:c6:bb:8b:cd:d7:cd:1a:ca:9e:12:1a:22:2b:
8f:11:be:5f:e2:5d:7e:09:0c:65:19:7a:74:60:ac:
dd:5d:79:32:1d:d9:3f:b1:44:44:29:c7:2e:45:1d:
88:df:fc:fd:d0:36:13:9f:9e:d7:af:79:08:d0:31:
69:7b:0f:1e:2d:cf:83:9f:b5:93:9e:22:66:7c:9d:
d4:16:30:32:84:67:92:30:2d:d7:5d:da:09:7e:0a:
51:84:32:c1:e3:5c:ab:5b:40:43:3e:ee:6f:04:65:
ce:43:e6:14:d2:8d:af:e4:2c:18:55:2a:f1:7a:26:
9e:ef:28:d0:0b:fc:d4:be:74:4f:98:4a:54:69:60:
c6:b0:52:27:4a:11:ab:e9:38:a4:8d:62:32:be:2e:
e6:98:5e:1c:b1:a5:12:68:09:16:4a:dc:77:68:64:
a9:fe:72:5e:c5:1d:6a:10:cc:eb:89:13:a2:d0:77:
c1:27:42:f2:c4:ed:74:e5:e2:dc:bd:ce:ff:21:ca:
5a:62:69:7e:6b:c9:37:be:d6:a1:95:09:bf:b1:ef:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:DA:E0:14:26:B9:0B:69:B7:3B:75:8A:71:A9:8D:BB:05:49:91
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/3yPa4BQmuQtptzt1inGpjbsFSZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.196.0/23
Signature Algorithm: sha256WithRSAEncryption
41:94:36:6e:1a:b6:19:9f:f7:36:90:0c:cc:d6:3e:38:51:f6:
71:dc:62:2e:7a:82:10:c7:0d:f6:79:88:12:e7:eb:e6:79:aa:
91:92:ea:63:c7:c3:54:6b:db:02:74:d7:ff:3b:d3:e5:27:f0:
be:5e:12:97:e9:c4:91:fb:82:3c:9e:8d:50:9f:a4:1e:0d:af:
1a:34:ea:ab:ec:ad:68:b4:88:d0:d8:7c:f0:87:22:4d:a9:b8:
0d:7e:60:70:d5:3c:7c:1d:6e:a0:c5:9a:71:5f:8a:06:97:b3:
14:d0:37:30:9b:a4:9c:d2:4a:37:65:a5:4b:2a:1b:de:65:3e:
95:04:4b:d3:44:c9:2d:05:39:6d:ed:0c:87:32:70:e7:6b:46:
0f:58:16:ea:c3:75:da:84:4d:f2:31:67:cc:7c:2d:3e:d7:29:
f7:f4:19:19:0b:6c:45:e7:16:da:b9:9d:c9:91:f2:2a:95:94:
7f:c2:73:9e:08:f2:da:70:f4:87:ed:2a:b2:51:d4:a0:30:20:
06:f7:1c:2f:f2:e8:54:14:59:9e:7e:3e:c3:4c:2c:4c:59:1f:
41:f4:42:a8:b0:50:8f:19:d7:ee:6c:9b:45:74:f7:7c:51:56:
bd:65:66:8a:d9:17:f4:18:00:79:de:39:62:dc:79:b4:ae:b4:
11:8f:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:05:41 2025 by rpki-client