Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PPNG59oZq_NHNwSAmAZubR5S9X4.roa
File: PPNG59oZq_NHNwSAmAZubR5S9X4.roa (raw, json)
Hash identifier: lCo5WHItiaCQhkIhnAfrizUs/MVrX5rHHYjdfMJDPuY=
Subject key identifier: 3C:F3:46:E7:DA:19:AB:F3:47:37:04:80:98:06:6E:6D:1E:52:F5:7E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC303DD53149217AC6C82298D35CD
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PPNG59oZq_NHNwSAmAZubR5S9X4.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38230
IP address blocks: 2a0e:7d46::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c3:03:dd:53:14:92:17:ac:6c:82:29:8d:35:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cf346e7da19abf34737048098066e6d1e52f57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:56:8e:32:d7:73:08:3a:4d:b4:74:5f:0c:
90:e0:4f:5b:b8:a5:e5:d0:ed:b8:ce:ee:bd:53:6b:
8d:63:15:1d:d8:42:e0:7a:7f:ca:ac:8e:f2:7e:66:
dd:04:1f:ab:a8:ea:6d:10:79:66:78:84:0f:fc:ba:
82:35:38:7f:cb:5d:76:41:83:28:d5:87:7b:aa:61:
b6:a7:98:6e:5b:e7:36:47:7c:b1:90:06:9b:d6:be:
e1:32:e6:95:51:8a:d2:7a:8b:74:ef:9a:49:05:54:
5d:58:6c:1d:65:dd:e2:52:28:53:a7:df:85:ad:c6:
ce:9b:31:12:7f:5b:cd:4f:07:86:02:28:09:c2:40:
f8:7b:05:00:07:0a:9f:e6:8b:8b:58:4d:a9:e6:4c:
fc:e8:b6:38:24:6e:77:4c:c1:4d:c7:f1:ba:58:16:
45:1e:f6:f9:b6:68:1a:6f:7c:9d:46:88:f3:e2:b0:
4f:98:45:ac:fc:18:76:c7:da:39:ae:7c:e1:f6:47:
3c:ad:15:63:85:0d:b3:e9:81:02:15:af:b9:5e:81:
19:d6:00:da:02:de:83:fd:12:87:53:61:9e:b4:c3:
78:4e:07:6c:84:d9:1f:fd:cd:87:4b:2a:4d:61:6c:
e3:d4:50:15:f0:ea:0c:6c:74:16:29:4e:23:4e:ba:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:46:E7:DA:19:AB:F3:47:37:04:80:98:06:6E:6D:1E:52:F5:7E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PPNG59oZq_NHNwSAmAZubR5S9X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d46::/32
Signature Algorithm: sha256WithRSAEncryption
5f:64:54:31:e1:2b:52:45:5e:43:28:f1:0b:ee:99:49:60:85:
aa:19:af:53:f0:90:2f:b5:c8:e4:31:ed:a9:a6:bf:01:d5:5e:
1b:46:9a:a4:23:d7:c0:bb:0b:09:79:cf:69:b2:9f:41:b8:fb:
1b:d8:25:85:e1:9d:a9:31:67:b3:49:fb:20:98:e1:b0:62:ca:
4e:0a:c4:95:ad:b9:73:f3:f2:9a:b3:b6:11:fc:be:dd:d2:46:
8b:44:6f:61:43:5e:62:fc:39:4d:be:9a:07:84:1b:0e:ee:d3:
22:66:89:04:01:83:44:1b:77:1f:bf:02:1e:02:8b:73:5d:61:
47:3d:e7:60:91:25:5f:73:e2:e0:bf:38:fe:93:e3:b9:c9:7b:
2d:23:97:62:72:29:b1:a0:c6:9c:62:81:31:a3:b8:8c:a1:98:
c0:70:85:15:fb:4c:08:30:0a:28:95:e9:54:c8:2b:13:38:7f:
86:d9:f1:61:68:5d:a4:b6:3a:b3:7c:c4:f6:04:9e:05:8d:be:
81:5f:b7:e0:ae:b3:67:f7:77:b5:5a:9a:97:dc:d2:e8:e8:e4:
22:8c:39:ea:5c:2e:ac:32:e3:5c:f0:ff:8f:f4:bd:ab:89:c0:
d9:72:3b:75:fe:c6:70:7c:67:49:cf:00:7e:e9:fc:75:9d:9b:
46:a7:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:17:43 2025 by rpki-client