Route Origin Authorization
$ rpki-client -vvf rpki.pudu.be/repo/pudu/1/323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa
File: 323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa (raw, json)
Hash identifier: x/hxHcA/aQlAo1iPgsy4Jh2r1BTX/Wthrb2Uj5QOozw=
Subject key identifier: 13:15:97:B0:22:8F:EB:21:42:92:25:38:B9:6E:0B:A1:B8:C0:46:89
Certificate issuer: /CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
Certificate serial: 6D68F27E30E9C9B8088D263FDB987775297191B7
Authority key identifier: CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
Subject info access: rsync://rpki.pudu.be/repo/pudu/1/323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa
Signing time: Sun 12 Jan 2025 07:12:28 +0000
ROA not before: Sun 12 Jan 2025 07:07:28 +0000
ROA not after: Sun 11 Jan 2026 07:12:28 +0000
asID: 47689
IP address blocks: 2001:67c:81c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl
rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 19:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:68:f2:7e:30:e9:c9:b8:08:8d:26:3f:db:98:77:75:29:71:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
Validity
Not Before: Jan 12 07:07:28 2025 GMT
Not After : Jan 11 07:12:28 2026 GMT
Subject: CN=131597B0228FEB2142922538B96E0BA1B8C04689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:4a:e1:e7:0a:ef:4d:66:c4:93:f6:e3:cf:
ab:8c:c0:11:ce:df:94:46:75:c8:9d:c8:c9:0b:d9:
09:43:4c:73:fe:b4:d0:9f:16:14:b7:45:6a:15:e7:
f8:08:8a:54:14:a6:f1:1f:4d:2c:8f:64:19:8d:f5:
f3:cb:6c:2b:04:dc:f6:50:4b:5d:44:66:c9:17:ba:
c3:5f:c6:33:4e:16:13:16:eb:67:04:97:27:4b:0c:
9d:6e:01:25:83:0b:7e:31:83:9e:c1:36:10:6b:10:
cd:15:18:58:67:f3:b8:de:25:56:7a:0c:9d:d2:05:
cb:8d:fd:1a:33:e7:bb:94:d8:04:58:fc:c9:4b:19:
49:a2:de:e8:5d:ac:be:80:86:1d:81:39:88:62:d0:
0f:70:01:39:a7:51:c8:73:76:5b:0d:8d:18:95:03:
b9:48:5f:ee:79:e1:d4:da:10:b4:40:56:f1:a1:36:
61:d7:ce:83:00:b3:38:5f:ce:9f:11:9a:17:57:b1:
e9:76:4c:bb:1b:ce:27:0e:87:ec:da:45:3a:11:91:
34:eb:0f:9c:0d:2f:7a:82:04:95:54:25:aa:5b:a5:
b7:49:ea:a0:f8:9d:40:c1:41:9e:2b:11:f5:c4:24:
00:6b:36:8a:28:a6:ca:5c:9e:1e:63:87:28:57:2d:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:97:B0:22:8F:EB:21:42:92:25:38:B9:6E:0B:A1:B8:C0:46:89
X509v3 Authority Key Identifier:
keyid:CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/1/323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:81c::/48
Signature Algorithm: sha256WithRSAEncryption
1e:d8:be:96:78:f8:cf:98:d8:90:e1:b0:4e:98:66:18:85:9b:
c5:4d:ae:f3:80:ca:c1:a6:2e:f0:1f:e8:25:b2:82:98:98:f0:
d2:5f:98:27:2b:ca:9f:0b:91:30:1d:0e:95:90:6a:9c:28:d7:
86:42:43:53:7d:0d:83:2b:35:54:93:f7:37:a3:d1:f3:0e:a0:
bb:08:91:75:07:5e:ca:e0:08:45:00:1a:48:72:6c:b0:6d:5f:
3c:e5:e8:94:42:09:90:fd:b1:25:c0:e3:be:eb:1d:0a:2d:91:
c8:da:db:8f:ce:88:d8:c7:46:e8:80:16:45:a1:51:98:c2:95:
05:05:bc:c3:e4:84:41:07:7d:bf:79:a4:e1:7e:10:12:85:f4:
53:20:ad:f9:27:3c:2c:7f:9e:d7:19:0f:69:97:66:c2:40:36:
d6:79:45:0a:bf:63:14:d6:f6:e7:aa:a3:85:bf:84:f6:31:56:
af:e0:29:e5:ca:46:00:ad:8a:7b:fa:8a:cc:b7:c7:7f:27:3b:
df:e2:24:3f:0f:82:8a:50:9e:44:dd:c1:78:89:12:d1:39:c0:
32:8f:03:d1:c1:db:26:52:a2:b0:00:1d:84:44:39:ab:30:e8:
66:c3:51:5c:52:53:5f:6b:60:7d:7c:83:da:a8:dc:db:8f:ba:
b6:e9:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:09 2025 by rpki-client