Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1E3lr5p-ZCH-tk1sC1x4hqxISzo.roa
File: 1E3lr5p-ZCH-tk1sC1x4hqxISzo.roa (raw, json)
Hash identifier: lL5mrR4PVnIjDwM2fTTcgkoBajEx8r3ENqdiNgpBqww=
Subject key identifier: D4:4D:E5:AF:9A:7E:64:21:FE:B6:4D:6C:0B:5C:78:86:AC:48:4B:3A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01976A0F51097C416A4F696968EA03786EDF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1E3lr5p-ZCH-tk1sC1x4hqxISzo.roa
Signing time: Fri 13 Jun 2025 16:11:18 +0000
ROA not before: Fri 13 Jun 2025 16:11:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 82.153.207.0/24 maxlen: 24
194.105.80.0/24 maxlen: 24
212.38.89.0/24 maxlen: 24
213.218.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:0f:51:09:7c:41:6a:4f:69:69:68:ea:03:78:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 13 16:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d44de5af9a7e6421feb64d6c0b5c7886ac484b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:a4:f6:41:99:c4:cb:e5:f4:2b:3d:0f:5a:
06:01:fd:95:b0:d7:2c:15:eb:6d:9a:2a:ca:80:52:
57:ee:2a:55:c4:e1:63:cd:96:45:07:1d:dc:c0:4a:
f4:3a:22:55:87:df:dd:69:05:97:c5:95:0e:3c:0d:
31:69:d5:20:dc:d4:6a:39:a3:8d:13:1f:98:37:96:
6e:7f:f6:78:8c:05:95:ba:3b:27:0b:e3:04:9b:f5:
2d:56:47:90:36:c3:57:b9:9d:1a:b8:4d:74:01:8c:
f2:82:7d:de:5e:6c:51:e7:63:16:ec:60:9f:8d:c6:
7e:76:af:ce:35:5f:51:5b:2c:af:d2:1e:4e:4b:be:
47:6b:ce:63:d4:16:58:94:ab:94:8c:f4:2a:57:e3:
d9:68:60:31:33:f2:aa:5a:c9:5e:3c:d1:b5:83:57:
96:2e:7a:c4:29:15:13:70:17:b2:87:ec:ce:52:3d:
88:2d:89:d9:bd:88:5d:79:b2:3e:ed:53:4b:ae:69:
06:d6:5c:c5:32:1f:c6:44:be:f7:71:62:55:fc:29:
a1:8a:9a:dc:3b:61:15:3e:19:5a:00:62:3d:d3:3d:
d8:d9:c8:8a:a1:fb:b3:81:9a:a1:d2:42:a8:0f:05:
24:48:77:0a:f0:97:cf:cf:33:af:f5:2a:ae:04:4c:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:E5:AF:9A:7E:64:21:FE:B6:4D:6C:0B:5C:78:86:AC:48:4B:3A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1E3lr5p-ZCH-tk1sC1x4hqxISzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.207.0/24
194.105.80.0/24
212.38.89.0/24
213.218.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:86:df:3b:01:d9:b5:c8:f6:e8:7b:93:fc:63:15:1b:fd:7d:
06:b9:2a:26:5c:85:85:22:31:a5:f5:7d:82:a4:9c:dc:b3:56:
70:10:19:89:25:6e:14:dc:c7:41:dc:06:9b:f3:ca:0c:b6:29:
c7:5c:8e:01:c1:f5:cd:e5:c1:74:84:95:7b:bf:c2:ae:bd:f7:
0e:bf:4d:5f:e0:98:ad:2c:b4:e0:8a:e9:6d:3e:3d:72:72:0f:
d9:1a:a0:3b:cd:16:88:68:02:aa:6f:96:8b:e8:55:33:81:31:
2e:02:5e:a5:36:68:ef:88:48:4e:14:0d:2d:8f:dc:2d:30:63:
8a:be:83:3f:d8:9d:c8:34:4c:fd:c4:d7:ea:4e:14:f7:c6:28:
22:5c:42:ec:f5:5f:0e:2b:2f:7f:39:a1:d3:98:2c:ce:10:b2:
27:6b:66:11:cd:ee:03:09:07:f6:4f:eb:5c:be:99:ff:6a:63:
f8:0a:13:45:cd:69:35:3e:c8:56:1a:95:c3:1c:54:b9:34:ed:
c9:49:f2:78:63:46:84:68:cb:3b:d2:50:c6:e1:94:d0:e6:07:
4b:3d:1f:2b:45:91:11:a6:e2:8c:34:ab:cc:d4:d8:38:6e:6f:
9f:6a:0b:64:8c:d0:e8:c5:33:0a:e3:76:9c:3f:8d:4c:ea:4d:
04:1c:1f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:48:32 2025 by rpki-client