Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/3YOlf0iPPEKZOejM5ERFeNy2UUI.roa
File: 3YOlf0iPPEKZOejM5ERFeNy2UUI.roa (raw, json)
Hash identifier: 7dF2XTmUFq3q1B6JF9m1PhiG/XLJRsnEpYYup465d6M=
Subject key identifier: DD:83:A5:7F:48:8F:3C:42:99:39:E8:CC:E4:44:45:78:DC:B6:51:42
Certificate issuer: /CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Certificate serial: 0196471B8E827EC5DD5B5F73F774AB64AB03
Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/3YOlf0iPPEKZOejM5ERFeNy2UUI.roa
Signing time: Fri 18 Apr 2025 04:15:10 +0000
ROA not before: Fri 18 Apr 2025 04:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203785
IP address blocks: 213.134.1.0/24 maxlen: 24
2a13:4b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:1b:8e:82:7e:c5:dd:5b:5f:73:f7:74:ab:64:ab:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Validity
Not Before: Apr 18 04:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd83a57f488f3c429939e8cce4444578dcb65142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:f8:7d:19:6a:51:41:b1:fe:d0:f4:32:5c:
70:50:cc:db:d1:d4:c7:46:3b:7f:d7:11:e9:a7:97:
f2:c3:b2:1d:62:2b:3b:66:9a:50:98:da:4c:26:44:
2f:95:58:51:8f:06:8e:0a:5c:65:f1:a1:01:3e:3c:
cf:23:d3:e3:b7:ad:c3:c1:5b:75:f5:8c:3c:3c:95:
6d:cf:12:c5:0a:ca:d4:4b:7f:d1:41:de:6c:ee:b6:
60:05:7a:77:50:f2:a3:06:2c:c1:e9:2a:b5:b9:70:
0d:32:78:6a:e4:50:f1:16:4b:1d:9a:3d:a5:6c:39:
ef:c0:70:95:7f:61:c0:f9:24:dc:c2:cd:88:8e:1b:
48:45:a5:b8:d1:48:2b:d3:be:8e:48:a0:1b:fe:72:
f3:94:9d:bc:44:f3:7f:5e:87:42:c2:bb:8e:10:e7:
f8:18:18:1c:82:74:ca:b8:bc:5a:b6:77:20:0b:52:
96:fb:fb:e3:d2:ac:10:f3:0c:05:fa:9b:b3:86:11:
6f:db:a9:a1:39:2b:92:11:e5:62:97:7c:ec:69:e1:
d0:0c:09:cb:9b:93:36:09:2e:55:a8:1b:66:00:ad:
2d:88:2e:c7:c7:c7:00:d1:0c:a3:94:a1:19:cd:8d:
ba:6f:f9:ad:5a:2f:20:44:66:5b:26:a8:d3:7d:47:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:A5:7F:48:8F:3C:42:99:39:E8:CC:E4:44:45:78:DC:B6:51:42
X509v3 Authority Key Identifier:
keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/3YOlf0iPPEKZOejM5ERFeNy2UUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.1.0/24
IPv6:
2a13:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
51:03:13:38:e5:5b:1c:2f:39:4b:b2:63:3c:ad:27:bb:fd:03:
9a:10:11:32:eb:d7:7e:fc:5b:12:6c:93:c5:44:93:e3:a2:48:
e9:e0:ba:fa:e1:ed:51:76:88:ca:05:34:6d:3a:df:07:93:c1:
87:09:76:6e:91:63:7a:c2:0b:e0:2f:80:98:a5:f2:72:67:87:
4b:2c:c6:1d:6e:99:82:c8:86:59:84:2a:be:92:33:cb:d1:ef:
68:9b:9a:e3:a1:2f:30:61:78:06:cf:62:06:f4:72:2a:53:25:
fb:da:33:87:bb:08:64:fb:6c:db:46:ad:55:2a:8d:06:a2:32:
83:93:15:7e:44:86:70:52:92:56:20:3f:1a:07:55:11:2e:fe:
28:fe:6e:2b:64:d6:ec:9c:61:02:ec:9a:63:e0:dd:1c:c7:56:
4d:d4:db:1b:b4:0a:26:f9:6a:79:ce:11:02:13:c9:2a:ac:d7:
de:bc:3d:db:1e:4c:41:ed:ae:4d:ce:a5:00:d5:b4:54:c4:ae:
95:ae:a9:f2:61:22:67:68:de:de:a3:71:33:24:53:43:6c:cd:
dc:9d:46:29:11:e9:4b:6a:08:fe:d3:78:12:ea:95:96:80:a7:
44:ee:a7:e4:9d:b7:d5:76:5e:fa:fc:c2:1d:59:94:bb:3f:81:
5c:61:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:45:15 2025 by rpki-client