Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M3Y2uwcVtPQYY6E09dAWPnf_rLk.roa
File: M3Y2uwcVtPQYY6E09dAWPnf_rLk.roa (raw, json)
Hash identifier: zG++Kyr+t40FQzN8MWnKIM3j24z7Okl2B9swVwKI1sU=
Subject key identifier: 33:76:36:BB:07:15:B4:F4:18:63:A1:34:F5:D0:16:3E:77:FF:AC:B9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01967B90842DD02011CC96FB90AD4886429D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M3Y2uwcVtPQYY6E09dAWPnf_rLk.roa
Signing time: Mon 28 Apr 2025 08:43:10 +0000
ROA not before: Mon 28 Apr 2025 08:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 77.93.138.0/23 maxlen: 24
82.152.52.0/23 maxlen: 24
109.176.25.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:90:84:2d:d0:20:11:cc:96:fb:90:ad:48:86:42:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 28 08:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=337636bb0715b4f41863a134f5d0163e77ffacb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:5f:30:d1:dc:a8:2d:24:98:9f:43:76:1e:
19:a4:db:eb:df:b1:49:42:be:9b:71:ad:d7:f2:58:
12:18:58:11:e1:5f:f6:bd:79:8f:42:de:5d:04:79:
94:0d:6f:99:55:cb:66:df:6b:bc:c4:ae:70:aa:b3:
ee:3c:cf:d5:28:6a:dd:41:49:11:ab:cb:75:e7:11:
a6:90:b0:f5:cb:98:6b:48:8b:bf:a7:5b:79:2f:8e:
b5:a0:9a:aa:fe:b6:46:09:5f:31:74:5a:5f:86:07:
8f:69:35:6f:f4:75:86:25:a8:5e:c9:f6:41:17:69:
46:6d:c6:22:2a:db:24:6e:9d:d1:e4:ce:28:20:1d:
ff:e6:26:04:a9:4c:e6:23:1b:6f:97:9f:ed:8d:94:
9e:78:96:4c:0c:ab:13:4c:98:fe:2b:c2:d0:b6:65:
27:4e:c1:55:ba:af:f0:4d:7a:e3:06:eb:e6:b9:f2:
90:1e:38:d8:e9:fa:b2:0f:6b:5f:cd:81:d8:0f:02:
63:c4:c9:1f:58:03:7a:78:20:28:df:27:4e:a6:1e:
26:88:bd:46:aa:a2:db:44:d8:a9:99:8f:22:15:a3:
44:b9:79:17:33:89:f3:93:a0:45:b6:5c:c2:ac:26:
4a:96:40:ab:d1:41:85:ff:f8:94:b3:19:41:ca:98:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:36:BB:07:15:B4:F4:18:63:A1:34:F5:D0:16:3E:77:FF:AC:B9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M3Y2uwcVtPQYY6E09dAWPnf_rLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
82.152.52.0/23
109.176.25.0/24
213.130.150.0/24
213.210.48.0/23
213.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8d:57:5f:d2:c2:12:11:41:55:6f:b5:02:86:e5:fe:63:af:
f2:70:8a:c4:af:f0:27:95:ef:cf:7f:26:07:91:6c:a7:39:6d:
03:84:b3:8a:27:0d:a5:5d:50:44:98:71:12:bb:24:6d:c5:8e:
6e:23:4c:8f:2e:88:27:1c:f1:a4:60:34:39:bc:ae:2c:cb:55:
02:66:fa:94:7d:9f:77:40:30:0b:df:c9:43:a0:ea:3e:20:87:
3d:27:a2:c9:d2:0f:7b:7b:b5:0e:60:63:a7:ad:dc:e4:c2:7f:
13:83:9b:70:fd:d5:1c:d1:5e:23:dd:9d:30:1d:5e:c8:94:a6:
45:e2:ac:b3:2d:0a:c8:db:7a:dc:b6:a4:6d:09:36:bf:fb:d1:
99:33:49:33:c0:3f:be:c7:86:a3:2d:ee:be:e6:c3:ff:67:16:
53:40:8e:b0:af:3c:dc:c2:ab:1d:87:91:82:93:9c:7d:7c:0e:
a0:5a:ab:83:a6:ea:1f:b0:f4:11:50:a9:3d:2e:bf:1d:ce:29:
f7:42:d5:06:a0:ee:5b:51:51:9f:3a:ab:f0:4f:7d:a9:9f:21:
27:f8:c5:75:52:e7:d0:40:8e:4c:75:05:1a:d8:1e:80:86:c9:
48:36:8a:eb:54:69:db:e2:e9:7f:71:cb:4b:aa:13:6f:c6:b9:
79:1f:ec:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:03:37 2025 by rpki-client