Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/3_upC6eL_Exhj1VxezvJQ40V2IM.roa
File: 3_upC6eL_Exhj1VxezvJQ40V2IM.roa (raw, json)
Hash identifier: Dxr09pfEwFq4ycWS6h4E4n2qYVIrqwYkDHsZE2JN5d0=
Subject key identifier: DF:FB:A9:0B:A7:8B:FC:4C:61:8F:55:71:7B:3B:C9:43:8D:15:D8:83
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019680F6F5CA73C689F2B0C10C575333B681
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/3_upC6eL_Exhj1VxezvJQ40V2IM.roa
Signing time: Tue 29 Apr 2025 09:53:10 +0000
ROA not before: Tue 29 Apr 2025 09:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.7.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.84.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
152.53.160.0/22 maxlen: 22
152.53.172.0/22 maxlen: 22
152.53.224.0/22 maxlen: 22
152.53.228.0/22 maxlen: 22
152.53.236.0/22 maxlen: 22
152.53.244.0/22 maxlen: 22
152.53.248.0/22 maxlen: 22
152.53.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:f6:f5:ca:73:c6:89:f2:b0:c1:0c:57:53:33:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Apr 29 09:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dffba90ba78bfc4c618f55717b3bc9438d15d883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:6e:72:09:99:07:ef:67:20:f4:7f:60:fd:
6b:33:cd:1b:0c:ac:a6:dc:d1:1f:b5:b5:c5:96:d3:
c8:4c:d1:b7:d5:fe:3a:29:98:45:95:c4:b8:14:b4:
9d:5e:2c:e1:7b:83:cd:91:05:4d:6a:b5:39:1f:39:
8c:fc:37:b4:35:a4:34:0c:23:49:87:eb:a4:e3:46:
83:b8:9a:d0:bf:ab:8e:52:8b:9a:19:0d:b4:14:00:
5f:63:9a:60:6a:0a:76:e5:01:02:fd:4c:7f:7e:7d:
41:5b:2a:2d:4c:03:a4:d3:d1:b6:6d:92:6a:9c:a4:
53:28:76:ca:b4:c4:18:47:7c:18:dd:21:cb:fe:e6:
3b:2f:af:fb:5c:99:cd:22:de:5c:04:99:56:b5:de:
20:d5:ca:70:ee:57:9d:92:b4:a4:64:79:3b:e3:b3:
ee:69:8b:e1:49:89:ce:88:8a:37:92:ed:c5:af:db:
e8:34:4b:ca:31:12:7d:77:10:de:b7:ae:b0:d7:10:
75:c6:25:22:17:06:7e:b4:9e:58:72:40:39:70:36:
77:5a:1d:9e:f2:6c:9d:6a:a2:de:bb:53:56:26:63:
e6:76:67:e2:28:ac:0d:6a:93:74:4f:30:61:8f:85:
95:c2:a2:46:fa:db:f0:73:82:88:79:fe:3a:39:3b:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:A9:0B:A7:8B:FC:4C:61:8F:55:71:7B:3B:C9:43:8D:15:D8:83
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/3_upC6eL_Exhj1VxezvJQ40V2IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:12:bd:c6:89:e5:62:a2:2b:3a:f2:ad:4a:cf:4a:c4:11:07:
66:a3:02:37:bd:8b:cb:0d:f7:dc:26:79:66:8a:ce:ef:e0:e7:
12:cf:71:9a:60:5e:65:56:96:44:66:67:b3:ee:c3:57:b7:fa:
46:66:0f:50:e1:9e:e7:14:6b:84:1b:5d:ec:74:88:7c:38:88:
91:e8:c1:18:5c:03:87:f2:ef:69:3b:55:fa:9e:1b:a3:47:2d:
74:a4:13:63:d8:96:7a:ae:45:0c:5e:d8:cb:38:56:32:c2:3c:
d9:36:51:ec:fe:63:7e:c4:db:7b:31:25:02:55:49:8f:a8:03:
c6:38:ee:36:59:46:0f:e3:f4:2d:00:68:de:01:fb:b5:9f:de:
87:d2:2c:f8:f6:2f:65:2b:06:55:5e:c2:15:01:d9:93:99:a6:
b4:ef:63:6b:ab:cf:35:ec:5a:aa:fd:1e:9d:94:14:ca:c8:8f:
60:bf:d4:c0:70:81:d7:cd:09:04:72:01:ee:ca:ba:7b:6d:6c:
7e:01:85:19:fc:7f:60:9d:b1:27:c8:01:b4:1a:c3:8d:1b:f4:
f6:33:1d:1c:03:c7:99:85:fe:f6:ff:82:a3:76:bf:75:45:1c:
49:c4:60:db:f4:13:bd:4c:e2:76:43:75:91:88:13:a4:bd:a3:
85:4f:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:08:15 2025 by rpki-client