Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/3RRZLekRQbw8ePfcCHQUdorCK_o.roa
File: 3RRZLekRQbw8ePfcCHQUdorCK_o.roa (raw, json)
Hash identifier: 5/0bQvV92iQ/i82OVdjFAC5n1z935apHFSthQju1ARc=
Subject key identifier: DD:14:59:2D:E9:11:41:BC:3C:78:F7:DC:08:74:14:76:8A:C2:2B:FA
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019233230FF9D62B6AF1C351CAEA2CB032E6
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/3RRZLekRQbw8ePfcCHQUdorCK_o.roa
Signing time: Fri 27 Sep 2024 10:59:48 +0000
ROA not before: Fri 27 Sep 2024 10:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21245
IP address blocks: 31.3.0.0/24 maxlen: 24
31.3.1.0/24 maxlen: 24
31.3.2.0/24 maxlen: 24
31.3.3.0/24 maxlen: 24
31.3.4.0/24 maxlen: 24
31.3.5.0/24 maxlen: 24
31.3.6.0/24 maxlen: 24
31.3.7.0/24 maxlen: 24
146.19.176.0/24 maxlen: 24
185.21.180.0/24 maxlen: 24
185.21.181.0/24 maxlen: 24
185.21.182.0/24 maxlen: 24
185.21.183.0/24 maxlen: 24
185.22.160.0/24 maxlen: 24
185.22.161.0/24 maxlen: 24
185.22.162.0/24 maxlen: 24
185.22.163.0/24 maxlen: 24
185.87.172.0/24 maxlen: 24
185.87.173.0/24 maxlen: 24
185.87.174.0/24 maxlen: 24
185.87.175.0/24 maxlen: 24
185.155.102.0/24 maxlen: 24
185.230.16.0/24 maxlen: 24
185.230.17.0/24 maxlen: 24
185.230.19.0/24 maxlen: 24
185.235.10.0/24 maxlen: 24
185.241.63.0/24 maxlen: 24
2a03:3f00::/48 maxlen: 48
2a03:3f00:1::/48 maxlen: 48
2a03:3f00:2::/48 maxlen: 48
2a03:3f00:3::/48 maxlen: 48
2a03:3f00:4::/48 maxlen: 48
2a03:3f00:5::/48 maxlen: 48
2a03:3f00:6::/48 maxlen: 48
2a03:3f00:7::/48 maxlen: 48
2a03:3f00:10::/48 maxlen: 48
2a03:3f00:17::/48 maxlen: 48
2a03:3f00:19::/48 maxlen: 48
2a03:3f00:31::/48 maxlen: 48
2a03:3f00:160::/48 maxlen: 48
2a03:3f00:161::/48 maxlen: 48
2a03:3f00:162::/48 maxlen: 48
2a03:3f00:163::/48 maxlen: 48
2a03:3f00:172::/48 maxlen: 48
2a03:3f00:174::/48 maxlen: 48
2a03:3f00:175::/48 maxlen: 48
2a03:3f00:180::/48 maxlen: 48
2a03:3f00:181::/48 maxlen: 48
2a03:3f00:182::/48 maxlen: 48
2a03:3f00:183::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:23:0f:f9:d6:2b:6a:f1:c3:51:ca:ea:2c:b0:32:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Sep 27 10:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd14592de91141bc3c78f7dc087414768ac22bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:6d:6b:21:0d:92:5b:d4:c0:16:b3:bb:94:
70:fd:1b:20:4f:ce:13:a9:8f:90:b3:fd:83:e2:f2:
b5:f5:0e:41:a8:bb:79:d9:45:85:85:6a:6c:65:ce:
2f:2c:8e:dc:e4:62:d9:2f:21:8d:cb:6b:e0:0e:35:
a1:5e:88:aa:e3:70:34:de:b6:d7:4a:39:8a:05:89:
bb:7d:63:d2:65:b0:30:91:d0:73:a5:fe:9c:00:be:
c2:7b:dc:3a:eb:f3:c9:77:b8:16:a4:7f:83:8d:ac:
84:8e:eb:7e:0f:19:df:99:45:69:b2:4d:79:80:bd:
b3:b5:69:b0:33:d7:f7:b7:fc:f6:58:65:05:8d:70:
77:b9:03:f1:24:7a:85:2e:be:d3:df:0b:ac:0a:dd:
ed:7a:b1:69:69:2b:e4:d6:7e:b8:ea:d1:08:28:1b:
54:54:1e:f0:39:c0:9d:56:45:4b:15:ba:9c:a8:5a:
da:49:44:1a:7a:b3:3f:26:15:1d:66:a7:67:85:1c:
80:ca:89:4a:5d:54:60:33:ce:eb:00:dc:bc:1a:6d:
37:0b:b0:04:7b:8e:91:56:47:a9:bb:c8:37:8a:a5:
4a:ad:45:5e:cd:bf:1c:e1:c0:7a:12:00:8f:32:d3:
09:cb:5c:ef:e8:ba:dd:89:fd:3c:1d:2f:a4:2f:c8:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:14:59:2D:E9:11:41:BC:3C:78:F7:DC:08:74:14:76:8A:C2:2B:FA
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/3RRZLekRQbw8ePfcCHQUdorCK_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.0.0/21
146.19.176.0/24
185.21.180.0/22
185.22.160.0/22
185.87.172.0/22
185.155.102.0/24
185.230.16.0/23
185.230.19.0/24
185.235.10.0/24
185.241.63.0/24
IPv6:
2a03:3f00::/45
2a03:3f00:10::/48
2a03:3f00:17::/48
2a03:3f00:19::/48
2a03:3f00:31::/48
2a03:3f00:160::/46
2a03:3f00:172::/48
2a03:3f00:174::/47
2a03:3f00:180::/46
Signature Algorithm: sha256WithRSAEncryption
9a:c7:16:34:72:ac:7a:b7:72:91:c9:76:f0:4a:33:b4:5a:b3:
3d:27:be:f8:aa:bd:cd:46:a3:c0:8d:dc:43:b8:f5:57:63:5e:
91:8a:e2:96:0e:7c:e5:37:8c:5f:18:cb:85:ed:9f:f5:34:ba:
30:82:76:34:be:fb:9b:9d:9b:4d:e8:f2:16:8c:0f:c2:f6:1f:
82:a3:94:45:03:6f:97:f0:5c:e6:e8:cb:30:82:21:13:13:1e:
b1:43:2f:07:14:fc:b1:09:52:83:8d:ef:4d:07:da:25:80:e5:
ec:56:0e:ff:2e:b6:fc:d8:8d:18:d9:9c:2c:14:70:7c:a1:55:
10:8b:ed:1a:ef:8d:3f:ec:96:41:56:f7:33:79:a7:48:57:b1:
59:22:38:19:c4:7c:ac:c9:f6:bd:95:f6:ea:67:0b:6f:e7:0f:
88:bf:0b:b8:f4:c7:bf:36:5d:5b:79:24:a0:a1:de:68:df:0c:
ef:3a:32:af:42:47:40:4a:91:bf:21:34:ec:39:4b:59:ce:58:
13:95:d5:ac:f5:fc:41:e8:29:c6:30:2c:08:52:6a:63:e4:12:
0a:46:33:d4:04:bd:c8:04:5c:f6:0b:9f:15:17:ae:2f:08:84:
cb:d0:e7:89:37:d1:89:f3:82:f8:bb:08:29:74:b9:a2:9c:a7:
4b:5e:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:16:52 2024 by rpki-client on console-ams.rpki-client.org