Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3JOECS62y542NETcKSg8JEgm6Uk.roa
File: 3JOECS62y542NETcKSg8JEgm6Uk.roa (raw, json)
Hash identifier: xl41ePNGFOdODXtaJTOSoigaJLyAvSQK/WSUCaG6V78=
Subject key identifier: DC:93:84:09:2E:B6:CB:9E:36:34:44:DC:29:28:3C:24:48:26:E9:49
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C502AE4E563116C680286824E4BCB
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3JOECS62y542NETcKSg8JEgm6Uk.roa
Signing time: Thu 02 Jan 2025 09:50:20 +0000
ROA not before: Thu 02 Jan 2025 09:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6863
IP address blocks: 37.157.16.0/21 maxlen: 21
46.226.96.0/21 maxlen: 21
82.149.192.0/19 maxlen: 19
86.111.0.0/19 maxlen: 19
94.143.32.0/21 maxlen: 21
195.90.128.0/18 maxlen: 18
195.90.160.0/19 maxlen: 19
195.90.182.96/27 maxlen: 27
195.96.160.0/19 maxlen: 19
212.5.160.0/19 maxlen: 19
213.145.40.0/24 maxlen: 24
217.14.240.0/21 maxlen: 21
217.171.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:50:2a:e4:e5:63:11:6c:68:02:86:82:4e:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc9384092eb6cb9e363444dc29283c244826e949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:ee:fe:94:48:f4:6a:14:28:6a:69:cf:b2:
0d:d6:66:e5:fa:c9:c3:1b:1b:19:c5:28:ab:c5:2e:
25:b7:17:a1:00:39:7f:fd:27:64:29:5f:fa:4c:c3:
fa:3e:86:c4:83:53:70:d0:d9:bd:17:5f:07:39:a7:
40:30:0d:9a:b1:a0:12:73:27:ab:c2:3e:85:a1:88:
a4:df:e7:b9:2a:f0:14:10:5e:e0:d0:27:00:6a:70:
30:4f:ad:59:81:0b:61:1e:db:e0:20:b9:61:9e:cf:
90:62:30:f9:9f:af:c7:c9:06:12:e9:8f:a9:9e:4b:
6a:ba:4b:99:06:f2:98:cf:07:7a:ec:05:b1:0b:60:
ef:ed:39:9e:c6:83:0f:94:4a:7c:a7:0f:79:da:7b:
a3:3f:19:29:b9:1d:b8:8b:60:8a:d0:b2:fa:99:4d:
0d:f1:f8:cf:39:45:c5:ac:5c:7c:37:1e:d8:2a:d8:
54:bd:60:9b:78:03:ad:d8:90:68:be:71:06:5a:b5:
a0:54:6f:0d:eb:5d:2b:65:ae:cf:d4:71:0c:f4:5a:
ff:6d:03:fa:2d:a6:c7:dd:36:70:7b:18:48:b6:77:
80:cf:25:77:40:7d:1c:1f:b4:39:3c:a7:7d:b2:1f:
9b:da:ad:7f:89:d7:4a:e2:73:e5:5c:e5:a0:84:09:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:84:09:2E:B6:CB:9E:36:34:44:DC:29:28:3C:24:48:26:E9:49
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3JOECS62y542NETcKSg8JEgm6Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.16.0/21
46.226.96.0/21
82.149.192.0/19
86.111.0.0/19
94.143.32.0/21
195.90.128.0/18
195.96.160.0/19
212.5.160.0/19
213.145.40.0/24
217.14.240.0/21
217.171.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:11:b1:22:d2:07:40:f4:e7:90:38:42:57:dc:e6:14:5e:ca:
a9:55:b0:9e:c5:37:6c:33:92:9e:40:be:a2:dd:0c:d2:7d:6c:
83:4c:9e:7d:0d:93:71:23:03:35:1d:dc:30:d2:99:d3:cb:65:
f1:d9:5f:fc:86:fa:96:26:4c:51:56:f5:a2:be:54:13:c2:fe:
30:c9:f2:0e:2e:4c:6c:cb:71:15:12:29:f5:17:46:d3:60:13:
c6:45:87:5d:df:ce:80:16:08:01:72:5e:90:5e:e9:76:10:0b:
01:60:ce:43:37:c4:c9:b7:d9:44:e8:77:3c:6d:80:bc:84:1e:
b9:55:dd:ac:8f:27:b9:05:80:90:19:69:e5:a6:f9:bb:c3:59:
4a:ac:8f:25:9e:ca:a5:ce:f6:20:93:d6:48:04:10:10:eb:74:
04:b6:20:e8:de:13:e9:66:91:ef:2e:fa:b1:b9:a4:4d:46:8e:
74:03:db:e9:19:bb:bc:d3:22:c7:f1:23:e5:97:e9:e5:71:2a:
da:01:8b:23:65:d4:29:ca:5a:e9:dc:a3:88:4d:b8:02:16:5d:
fe:6d:67:d3:92:78:41:8d:61:46:24:ce:da:62:04:0b:78:b8:
f8:72:a2:b9:7a:80:2e:5d:f6:05:07:f4:b2:b3:10:cb:71:84:
fa:50:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:00:29 2025 by rpki-client