Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/3RlASXJFq8-CFsitxm3031VufpM.roa
File: 3RlASXJFq8-CFsitxm3031VufpM.roa (raw, json)
Hash identifier: SEsjbRHRxzK/k9UKyWx2Xdj+vQNsC9NbcKuSGMVnHCA=
Subject key identifier: DD:19:40:49:72:45:AB:CF:82:16:C8:AD:C6:6D:F4:DF:55:6E:7E:93
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0196779F99EC85F280D14093CD3C56EAA151
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/3RlASXJFq8-CFsitxm3031VufpM.roa
Signing time: Sun 27 Apr 2025 14:21:10 +0000
ROA not before: Sun 27 Apr 2025 14:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205090
IP address blocks: 91.200.13.0/24 maxlen: 24
109.69.62.0/24 maxlen: 24
185.37.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:9f:99:ec:85:f2:80:d1:40:93:cd:3c:56:ea:a1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Apr 27 14:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd1940497245abcf8216c8adc66df4df556e7e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:cc:f0:1c:19:b1:e9:27:14:43:12:30:81:
2d:fd:de:4f:ac:b9:9b:09:d9:d8:81:4a:36:2f:40:
76:04:ef:fa:75:37:22:6a:50:a4:3e:78:b6:67:8c:
a2:b3:f5:eb:b1:45:42:37:ce:a0:b8:b9:5b:95:60:
0b:5a:96:a1:38:58:37:5b:74:9e:c3:a1:8b:f3:f2:
2a:35:0f:31:4b:30:3e:ac:96:56:a1:84:dc:12:56:
d3:36:4c:63:d7:d1:ea:ab:66:a2:48:8c:a2:fe:db:
58:8c:fc:16:1b:d5:c6:34:50:c3:25:22:a5:b8:c2:
04:fb:41:c0:81:7d:9f:1e:5f:90:ef:15:dd:64:0f:
8b:86:f4:6c:8b:68:b4:2e:1f:ab:c2:02:64:30:0a:
71:76:1e:9e:af:da:b7:be:ce:b7:15:f3:96:5c:49:
74:7d:d5:26:ce:39:eb:80:00:e5:a2:7f:a7:15:4c:
72:86:69:c6:05:a2:59:97:6c:cb:d2:fb:4d:4d:01:
3a:ff:6d:07:1f:e2:d3:7c:2c:77:bb:8b:cc:20:24:
2c:d7:e7:40:4b:c1:53:53:f2:cf:77:d5:19:31:27:
7d:24:ab:6a:cc:95:bf:42:ee:77:8b:66:19:8a:04:
a7:cf:05:48:80:d2:0d:2f:bb:e0:d8:83:c9:46:f9:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:40:49:72:45:AB:CF:82:16:C8:AD:C6:6D:F4:DF:55:6E:7E:93
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/3RlASXJFq8-CFsitxm3031VufpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.13.0/24
109.69.62.0/24
185.37.192.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f5:11:16:39:31:a5:c5:c1:32:b8:12:7b:cd:35:3f:4b:9f:
bf:ed:88:64:1b:b3:2b:e5:1b:1e:77:cd:de:e9:2c:29:c0:26:
eb:0f:03:2c:01:b2:52:6b:44:65:d1:e6:08:d3:0f:a8:e1:5c:
76:98:cc:cb:3d:cf:53:87:f5:3f:78:52:9e:fc:9a:4c:96:17:
5a:06:44:6c:b8:9f:af:9c:3d:65:76:04:15:0e:5b:d0:67:e8:
eb:77:0d:c4:c8:26:5c:a0:2d:c2:1d:df:28:aa:7e:02:95:e9:
c5:9c:94:b1:60:2c:69:1d:17:e5:03:ce:06:ef:e4:1d:cf:46:
f9:13:0a:2e:3e:6c:50:1a:ce:7f:6b:7a:91:2f:74:e7:91:b1:
3d:9b:6e:a6:52:73:40:d1:9e:90:52:45:7c:39:9b:5f:21:54:
81:ad:30:34:92:0c:84:14:96:26:e7:af:3b:65:69:f7:4f:13:
c4:cc:5a:c8:05:47:27:e4:9f:0f:de:f2:c9:13:4d:2d:77:b8:
99:5f:19:7d:f9:24:25:dc:5a:1d:62:0d:23:96:65:17:67:6c:
54:29:42:34:7a:3d:93:2a:48:8f:0b:7b:63:eb:b5:fd:6d:13:
3d:ce:6d:7b:6e:c9:98:4d:95:dc:f8:59:40:19:b0:44:65:a8:
26:7e:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:16:21 2025 by rpki-client