Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/3Qx0-5a1Sut6s2uIaVr9xfw4XH0.roa
File: 3Qx0-5a1Sut6s2uIaVr9xfw4XH0.roa (raw, json)
Hash identifier: 1GqCE7f/lxXaUMCcSfF7oAJQEmNwJn6ems4l4j09Bk8=
Subject key identifier: DD:0C:74:FB:96:B5:4A:EB:7A:B3:6B:88:69:5A:FD:C5:FC:38:5C:7D
Certificate issuer: /CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Certificate serial: 01966A763A2E5707CD8EA34C76656E8F6AEF
Authority key identifier: BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/3Qx0-5a1Sut6s2uIaVr9xfw4XH0.roa
Signing time: Fri 25 Apr 2025 01:00:55 +0000
ROA not before: Fri 25 Apr 2025 01:00:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61023
IP address blocks: 87.238.224.0/24 maxlen: 24
193.162.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6a:76:3a:2e:57:07:cd:8e:a3:4c:76:65:6e:8f:6a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Validity
Not Before: Apr 25 01:00:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd0c74fb96b54aeb7ab36b88695afdc5fc385c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:ea:33:f7:b0:93:6e:33:09:ab:4a:cd:00:
41:f9:be:36:b1:77:87:2e:64:44:b8:67:90:58:77:
e4:89:48:41:85:bb:38:aa:7f:a2:c7:04:38:bd:75:
17:73:16:7c:a1:b6:a7:c3:16:ed:e8:0d:6f:57:4a:
01:82:2c:6d:6b:be:dc:1d:c8:07:db:ef:26:78:fb:
b8:f9:05:11:4b:be:41:11:55:5d:3f:c3:fa:94:32:
03:d9:00:c3:eb:e2:46:17:6b:78:7f:d8:d1:81:21:
20:3c:63:85:4c:44:8a:25:f8:33:07:45:f7:22:ae:
a8:c5:e5:44:a9:89:ca:d8:62:46:41:6c:6e:94:e7:
80:56:4c:13:40:ce:fb:51:13:03:e6:cf:29:3b:fe:
0c:02:4b:fe:32:ea:39:ff:17:4a:8d:ff:d0:34:dd:
52:68:d3:e1:2d:8a:0d:91:43:25:5a:03:0c:04:bc:
5f:d5:c6:78:f1:41:95:3d:a2:64:a2:1a:fc:85:da:
a2:81:a5:ee:0a:60:99:da:67:1b:47:5d:47:9c:e9:
4e:0b:f1:d3:d4:52:ee:f0:9a:7a:fd:d0:82:8d:0e:
93:91:3f:86:c9:31:9f:6c:af:ec:99:26:68:f7:93:
d5:89:ba:f4:b5:f5:97:ec:a5:04:b4:6f:a1:97:21:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0C:74:FB:96:B5:4A:EB:7A:B3:6B:88:69:5A:FD:C5:FC:38:5C:7D
X509v3 Authority Key Identifier:
keyid:BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/3Qx0-5a1Sut6s2uIaVr9xfw4XH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.224.0/24
193.162.103.0/24
Signature Algorithm: sha256WithRSAEncryption
76:39:1f:dd:71:a6:3d:3a:6b:62:6d:01:a9:1f:95:77:aa:ff:
20:cb:b7:c5:26:53:de:dd:b7:78:00:6c:2c:b8:1d:a0:c2:c3:
59:c5:aa:2a:8e:3b:2c:64:db:01:6a:b7:e2:8f:45:f7:9f:e9:
0a:0b:d3:83:94:fd:6c:e4:6a:77:52:00:85:69:f4:ec:69:32:
b8:60:21:0c:2a:9f:64:03:b0:19:e1:10:a3:34:9a:36:34:3e:
f6:2b:05:72:8b:00:3a:47:ac:48:85:a9:dc:4e:24:c6:ab:e9:
37:94:bb:65:44:d5:a5:68:90:b0:d9:49:33:46:10:58:1d:9d:
37:a9:eb:f5:ce:e4:33:48:84:8b:f6:ef:27:5f:7a:45:57:7e:
1f:85:53:8c:32:c7:54:b1:05:9c:38:d8:0a:5a:a9:a5:c8:a1:
f7:99:19:42:4d:67:e2:41:30:94:ca:79:d8:25:53:e8:e2:32:
0d:b1:d2:0d:2c:25:b8:ea:2d:a9:05:02:9c:e0:62:c7:f9:ae:
f8:7c:63:05:fe:b4:d9:60:65:5c:e5:90:e1:41:3f:bd:26:f3:
6d:9e:41:fc:28:45:11:31:19:6b:b2:a9:c9:05:c7:3b:7f:de:
fd:61:07:0d:c3:e3:27:d2:15:ec:e2:cc:7f:40:88:29:67:bc:
60:c0:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:37:24 2025 by rpki-client