Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa
File: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (raw, json)
Hash identifier: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=
Subject key identifier: 3C:15:B3:E4:56:84:32:AA:FD:56:71:DA:2A:25:61:9B:E3:55:56:5F
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228DFC026A836D97C3E6CB8241712373
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 213.21.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fc:02:6a:83:6d:97:c3:e6:cb:82:41:71:23:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c15b3e4568432aafd5671da2a25619be355565f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:b9:ed:a9:47:e7:d6:5d:f3:ee:96:dc:6a:
22:0f:fa:f7:76:78:b6:4f:24:c5:de:e1:58:2f:f6:
32:f1:6a:f2:80:10:18:0a:11:42:82:4f:84:da:f3:
89:f1:30:a0:58:18:4a:b0:87:83:0e:d3:ab:41:8e:
1c:47:92:df:f1:0e:a2:31:c0:10:75:85:62:1b:bf:
f5:2e:8f:4e:fd:14:23:4c:70:74:92:94:21:88:d7:
90:8f:16:27:00:7f:0c:57:00:be:b6:44:29:b5:14:
9d:f6:b4:b2:01:7b:9c:07:21:e0:93:0c:d7:5f:75:
a0:44:70:e2:9c:06:37:83:f0:ff:4b:c4:39:94:89:
3b:ca:8d:75:8a:99:13:52:b8:de:54:8d:4a:17:50:
55:51:b7:6d:88:c0:8b:48:01:74:fa:57:50:67:c6:
77:db:76:f9:2d:82:ea:41:24:1a:df:9d:91:d5:c8:
14:ea:87:c8:1d:2c:e2:6b:fd:e5:80:4f:c2:b0:e9:
e1:b7:16:b6:c5:ae:bd:5c:c3:75:0f:11:1c:b7:5c:
6e:a9:07:b6:40:2d:fe:84:e8:27:44:79:29:5b:f2:
ef:48:26:60:13:50:90:eb:f4:b8:0c:ce:cd:83:b3:
bd:53:b1:97:77:47:10:12:c7:2b:b7:32:ea:d7:d9:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:15:B3:E4:56:84:32:AA:FD:56:71:DA:2A:25:61:9B:E3:55:56:5F
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:fa:55:96:71:51:1e:fa:24:4c:1f:e7:7f:a9:95:d1:09:85:
21:62:4c:d3:a2:e0:15:98:91:75:bf:39:5e:a4:78:f3:bd:a4:
97:8c:c8:d5:35:7f:3b:46:1e:85:dc:98:74:1f:0c:79:30:ce:
c6:5a:a7:d6:53:41:63:e3:cf:fa:c9:ec:27:2f:9d:ef:c7:00:
d0:5b:10:c3:3b:8a:e0:63:23:f3:7e:2a:72:99:e0:af:c6:ce:
23:cf:fe:47:8b:72:74:b9:a8:e8:c3:f9:0d:af:2f:0f:3d:af:
2c:e8:ba:fc:8d:2f:5e:f4:f0:48:83:4d:60:83:51:c6:27:b8:
1b:1d:8e:b6:60:9a:17:a2:3f:f5:5b:e5:f3:7b:82:63:2e:04:
49:e4:06:2c:3c:24:24:dc:8c:ab:1b:ef:d3:f6:bf:eb:71:20:
53:4f:60:d5:5a:43:e3:60:0a:00:38:82:c1:ab:1e:9a:55:d4:
a8:44:94:5c:c1:ad:7c:06:83:a8:2d:eb:bc:76:fb:d8:47:9c:
e9:98:ca:7c:e1:a1:3b:42:30:5c:a3:f8:68:b4:e8:e2:8a:1f:
d6:c5:b9:f4:67:e5:da:13:b4:2f:2a:ce:7f:9a:60:e3:68:ec:
df:20:3b:98:19:fb:4a:59:13:00:60:7b:cd:72:9d:67:3b:99:
81:41:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:00 2025 by rpki-client