Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/PF3fO-eTWo6-cPGvdPVhKKttSws.roa
File: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (raw, json)
Hash identifier: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=
Subject key identifier: 3C:5D:DF:3B:E7:93:5A:8E:BE:70:F1:AF:74:F5:61:28:AB:6D:4B:0B
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 0197E9ACD98F8230AF71BE6515F095003422
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/PF3fO-eTWo6-cPGvdPVhKKttSws.roa
Signing time: Tue 08 Jul 2025 10:55:08 +0000
ROA not before: Tue 08 Jul 2025 10:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 45.143.28.0/24 maxlen: 24
45.143.29.0/24 maxlen: 24
45.143.30.0/24 maxlen: 24
45.143.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:ac:d9:8f:82:30:af:71:be:65:15:f0:95:00:34:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jul 8 10:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c5ddf3be7935a8ebe70f1af74f56128ab6d4b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:d7:8c:5e:f9:51:51:dc:5f:f7:ca:9a:b8:
ed:18:5a:ac:88:7d:e0:ed:4a:39:86:a7:ea:ae:f2:
b8:f7:c7:55:7d:5a:87:e0:20:2e:9e:3e:a1:3f:1b:
dd:95:6e:c5:ec:16:59:a5:f4:fe:7c:5c:1b:58:42:
90:a2:af:ec:f2:95:2b:74:5a:5b:1e:19:49:c7:05:
2f:31:1b:59:fe:74:63:aa:9b:2e:fc:a7:1d:74:96:
b2:c0:33:84:86:d1:45:7a:ab:c6:c6:58:16:2a:ee:
8c:6a:7b:13:49:f7:86:ce:ad:73:e0:90:ce:49:cd:
89:89:0c:2c:e5:eb:ed:2e:b2:6a:4f:63:39:1e:cf:
dc:b6:b3:e1:57:47:ac:26:31:e5:56:75:dd:ed:ad:
f6:82:4d:62:51:a9:86:58:d4:4d:2a:ac:14:77:04:
0b:ab:52:f0:86:d5:d6:e1:e0:06:8e:80:39:6b:b5:
f6:39:29:7f:46:ae:3f:c0:e9:57:db:99:26:71:34:
69:87:35:b8:a9:2a:c8:2b:a7:9d:21:d6:c9:94:c7:
a4:b5:ed:da:65:ba:bb:16:8b:86:03:67:0c:d6:88:
f2:08:7a:5c:45:e5:cc:74:f2:6b:6b:17:f9:99:11:
7d:1e:c0:fc:2d:28:e4:d1:6f:87:6e:73:7a:95:c4:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:DF:3B:E7:93:5A:8E:BE:70:F1:AF:74:F5:61:28:AB:6D:4B:0B
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/PF3fO-eTWo6-cPGvdPVhKKttSws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:23:bb:97:50:a2:79:b2:f8:79:cd:12:71:ea:27:9c:54:fc:
3d:19:ce:13:eb:12:78:25:59:d6:6a:d8:06:99:cd:75:cc:93:
d0:55:57:5d:f4:2a:4e:64:dc:04:46:1a:93:3e:22:08:85:33:
55:46:d0:64:57:18:d4:b4:b9:f5:4e:ab:7b:08:5d:e9:d6:36:
22:57:7e:0d:a0:f6:d9:ff:c5:5f:b8:4a:e6:97:17:15:ea:4d:
c4:87:18:9e:0c:f6:8b:f1:6b:91:50:30:cc:99:a2:83:ac:32:
0f:77:9c:c5:fc:a1:cb:e4:81:38:12:cf:54:21:ad:87:2c:d8:
0b:87:29:b4:b3:ef:d0:c2:00:02:e6:fb:a2:86:fb:ee:ee:5a:
92:f4:74:b5:30:ce:88:9b:e8:25:1e:a8:a8:66:c0:59:b8:6f:
30:2f:f5:a2:0d:af:e0:df:e4:37:4e:26:02:a0:15:d4:e1:e7:
b9:09:4a:f8:90:d9:c2:97:55:1e:67:21:6b:b6:8a:94:f3:53:
d3:36:50:1b:ac:f1:9b:0b:b5:f3:17:ed:71:27:bd:05:ab:c9:
45:48:5b:f7:50:0e:fe:5f:70:a6:2c:03:4c:3c:7d:38:61:5e:
94:f1:2a:b5:1f:91:2a:96:7e:f9:00:d8:5f:37:70:26:93:c7:
79:e0:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:36:37 2025 by rpki-client