Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7N3mywjtuLKVrtsOCo_ySsQK4VM.roa
File: 7N3mywjtuLKVrtsOCo_ySsQK4VM.roa (raw, json)
Hash identifier: deYiKfmeAOiaXijgx7wABQxUMvMqxP0OSh47vbvSMKc=
Subject key identifier: EC:DD:E6:CB:08:ED:B8:B2:95:AE:DB:0E:0A:8F:F2:4A:C4:0A:E1:53
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196691252F4E73056D8BB3C2F7B62D145D2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7N3mywjtuLKVrtsOCo_ySsQK4VM.roa
Signing time: Thu 24 Apr 2025 18:32:10 +0000
ROA not before: Thu 24 Apr 2025 18:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:69:12:52:f4:e7:30:56:d8:bb:3c:2f:7b:62:d1:45:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 18:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecdde6cb08edb8b295aedb0e0a8ff24ac40ae153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:46:57:95:4c:ae:ba:62:f3:6c:cc:45:f4:
fb:8a:10:e6:4e:84:47:e3:21:39:75:22:8b:10:d5:
66:fa:b0:90:67:2a:66:3d:2b:24:38:40:57:2a:f0:
12:9e:3a:4b:e4:0e:dd:46:74:a5:2f:3f:00:29:5e:
e2:ed:59:32:b5:09:32:39:c1:05:9e:56:0e:9f:06:
c8:67:95:63:62:48:05:73:65:28:cd:44:eb:f8:ca:
85:87:cf:f4:fa:5a:4b:bf:13:4d:04:91:0a:f0:f2:
6d:f7:4e:20:d2:c6:1b:39:93:9f:3f:c5:a3:fc:6a:
a2:0f:05:45:de:23:45:5f:50:7c:18:5d:14:e3:26:
68:35:40:24:c4:c9:0b:36:9e:9e:3e:ba:37:e7:c1:
ee:5b:f4:52:a5:a5:7a:43:6f:51:28:72:7a:84:bb:
e5:40:5b:a6:21:30:64:4d:f0:e4:df:8f:cd:f9:2b:
67:a1:e8:25:7d:73:80:dc:03:47:8d:99:e8:7c:de:
b9:7a:36:73:fe:4e:d7:0a:9f:19:ea:25:f0:74:9f:
a2:be:40:38:97:21:22:92:9a:c9:fb:3b:bf:30:89:
b5:65:d3:fd:90:fe:fe:2f:05:f8:e8:e9:74:12:7f:
95:00:73:64:d8:11:04:e3:8b:39:2f:e5:cf:53:e1:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:E6:CB:08:ED:B8:B2:95:AE:DB:0E:0A:8F:F2:4A:C4:0A:E1:53
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7N3mywjtuLKVrtsOCo_ySsQK4VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
85.118.162.0/24
94.103.163.0/24
94.249.213.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3c:c8:bb:27:36:c8:db:44:4e:95:92:f2:f5:4a:8e:27:f2:
7a:98:a9:13:9a:16:b8:51:08:ef:15:4a:56:cb:a4:90:b5:fd:
a9:ae:6b:41:99:20:13:0c:8f:71:5e:81:6b:a9:5c:c4:65:c7:
83:40:5c:94:c4:41:35:33:35:09:79:f4:66:cb:81:c8:46:c7:
4f:c2:a0:cd:5a:12:86:be:c0:89:b4:03:36:14:4d:bc:84:c6:
99:48:4d:d9:4d:a2:80:72:32:ed:c3:d5:1e:53:b1:63:b7:5b:
f6:64:1c:7c:59:3a:24:72:9c:08:fc:0b:a9:5c:44:26:f6:8c:
c8:0e:8b:5e:6d:59:c9:33:0b:6c:63:51:fd:b9:92:ee:52:76:
e4:01:9b:bc:92:6e:a7:79:6b:c8:1f:8e:ff:d9:f0:1f:42:00:
c2:ff:76:2d:a9:f0:fe:ec:c7:6c:7a:07:5b:8b:e0:69:88:9c:
11:f6:16:3d:ed:88:47:eb:e3:42:b7:6a:50:2c:1f:55:5f:8b:
f9:c2:28:c7:d5:9f:a0:0b:96:66:08:b5:53:9d:3f:aa:d6:34:
a0:f6:1c:05:65:66:2f:da:51:89:8f:4a:66:56:65:be:12:f9:
f0:35:93:05:b9:6e:54:fa:27:60:dd:7a:38:17:f8:ab:44:f4:
18:99:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:33:00 2025 by rpki-client