Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PNY0bopVkefbLxgLSsZnVYV7eHU.roa
File: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (raw, json)
Hash identifier: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=
Subject key identifier: 3C:D6:34:6E:8A:55:91:E7:DB:2F:18:0B:4A:C6:67:55:85:7B:78:75
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019424B3CDD4BD9DAD7EA735BBD5538C1E24
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PNY0bopVkefbLxgLSsZnVYV7eHU.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60022
IP address blocks: 178.212.231.0/24 maxlen: 24
2a11:e680::/32 maxlen: 48
2a11:e681::/32 maxlen: 48
2a11:e682::/32 maxlen: 48
2a11:e683::/32 maxlen: 48
2a11:e684::/32 maxlen: 48
2a11:e685::/32 maxlen: 48
2a11:e686::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cd:d4:bd:9d:ad:7e:a7:35:bb:d5:53:8c:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cd6346e8a5591e7db2f180b4ac66755857b7875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:d7:b0:f5:03:b0:f1:78:f7:4e:66:b2:aa:
cb:b7:24:18:ff:f8:a8:cd:e4:3c:62:5c:3f:c8:56:
dc:cd:10:1b:6e:f6:fa:2a:6f:42:08:03:61:72:79:
fa:ec:18:0b:eb:3b:af:f4:50:5a:e7:e4:d8:ad:ad:
4e:51:85:a2:bf:82:39:b6:3f:a3:03:52:0f:8e:65:
a7:0c:92:2f:4d:22:da:16:ef:df:74:e9:7f:da:bb:
52:c3:1a:20:6f:77:63:e8:ed:6e:6b:52:99:14:d7:
70:c9:63:66:b6:57:c6:93:40:a2:87:24:20:34:89:
16:63:a8:8a:51:60:0b:5b:dc:1e:d9:80:ea:c0:76:
aa:f8:e0:2e:9d:45:3d:56:6c:c0:30:7c:80:db:91:
7a:c9:f6:93:1f:d1:30:ea:0f:cc:a2:7b:c3:44:40:
01:19:b9:32:06:10:a5:b8:8d:c8:c0:7c:de:25:dd:
67:9b:62:6f:1f:0a:0d:67:64:c9:87:f5:3e:03:57:
9c:36:73:ef:08:aa:7c:34:7f:80:4d:b5:fc:69:90:
16:04:02:13:78:46:9a:1f:87:61:74:3c:96:ed:bb:
82:87:15:98:a3:9e:eb:12:31:7f:35:b2:68:e8:f5:
aa:2f:1e:2d:9b:33:92:45:5d:aa:dd:80:98:aa:4c:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D6:34:6E:8A:55:91:E7:DB:2F:18:0B:4A:C6:67:55:85:7B:78:75
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PNY0bopVkefbLxgLSsZnVYV7eHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.231.0/24
IPv6:
2a11:e680::-2a11:e686:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
59:73:e2:94:b8:5f:b6:e1:56:cd:ee:27:f3:59:a9:9c:bc:83:
69:87:ae:0a:f3:c9:ba:09:fc:42:de:d8:5b:0e:17:e6:53:09:
c7:61:41:89:6a:7d:af:77:b0:cb:99:d8:17:99:13:ce:c7:72:
95:af:7d:0e:56:c7:31:b6:3a:1b:d0:ee:54:50:c8:2c:ec:47:
fe:37:ef:d4:09:5a:53:5a:5b:2c:e6:f9:84:1f:99:0e:e6:c3:
f0:9c:fc:dd:df:8d:60:9e:e4:5b:23:6a:7d:4e:7e:1a:0e:74:
85:7a:59:b3:ce:43:a6:cd:3e:1a:5a:bd:03:55:41:34:2e:3f:
26:6c:bd:1b:3b:c8:b4:c3:bb:27:5a:eb:f9:1d:a8:a4:4d:68:
ce:4c:ee:63:a5:7c:42:ef:1c:2c:d6:2b:60:39:16:2a:16:5f:
4d:a9:3e:c8:69:94:b3:19:ff:92:e5:c9:08:94:f9:8e:7b:ba:
95:3a:fd:61:34:cd:f6:c6:a9:f8:09:ad:f8:09:dd:41:b6:db:
12:c1:ec:9b:91:e1:ac:88:b1:57:4f:bc:91:44:eb:0f:58:0c:
64:e7:3a:8e:d8:2a:88:2a:c7:dd:ac:35:ab:52:ea:2d:5c:7a:
34:df:c7:27:c7:13:0e:d8:8e:20:ef:b1:c3:bb:39:62:97:70:
03:a7:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:09:50 2025 by rpki-client