Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa
File: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (raw, json)
Hash identifier: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=
Subject key identifier: 3C:2A:15:03:1C:AA:CF:D4:C0:37:F3:87:73:DF:AB:18:EA:12:A0:37
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0196F77A61A77B0D7FBB8F47CCDD9B7F3E32
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa
Signing time: Thu 22 May 2025 10:11:54 +0000
ROA not before: Thu 22 May 2025 10:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202425
IP address blocks: 45.148.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:7a:61:a7:7b:0d:7f:bb:8f:47:cc:dd:9b:7f:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: May 22 10:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c2a15031caacfd4c037f38773dfab18ea12a037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:96:d8:03:c7:91:31:03:7c:90:48:22:ec:
e1:b7:32:c3:53:7c:33:a7:fc:07:11:7f:5c:b3:8c:
5f:03:9c:20:b5:1c:dd:fa:60:6a:8f:b2:6d:d3:6e:
fb:7a:46:c8:47:35:79:01:08:74:2c:19:b7:35:e3:
57:df:a3:8a:59:c2:ff:52:7f:a9:a7:06:d3:7c:57:
7b:30:94:27:f9:f1:08:9a:ab:04:35:44:66:30:cf:
76:63:c7:e4:e3:10:bb:13:46:ba:87:cb:f7:42:a4:
2f:89:12:65:cc:df:5b:33:07:54:8f:10:94:b3:ce:
7c:06:1b:9a:8b:e3:0c:b0:81:c8:21:a5:25:d9:80:
32:c8:9d:09:89:6e:f5:6f:c8:87:e4:78:aa:f6:1b:
b7:af:eb:62:b8:f5:cb:5c:24:63:6f:6a:3b:1d:be:
a0:04:08:9e:fb:24:04:19:4b:be:b7:10:b0:2a:f6:
8e:e5:e6:c2:0b:35:60:65:22:54:e1:4b:bf:63:f6:
a8:5c:42:81:7c:71:74:f9:49:35:76:fe:c6:74:1f:
e9:24:dc:70:76:3d:bd:4e:47:1f:8d:f8:42:d6:51:
df:fc:be:5b:82:12:ab:68:f5:57:24:e2:a0:65:01:
77:17:80:50:cd:67:aa:4f:77:b6:e8:d7:1f:ef:a3:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:15:03:1C:AA:CF:D4:C0:37:F3:87:73:DF:AB:18:EA:12:A0:37
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.144.0/24
Signature Algorithm: sha256WithRSAEncryption
89:08:8d:6d:64:91:dc:0c:a2:bf:f4:13:72:d8:0c:fc:2d:5d:
19:a4:28:84:54:bf:09:45:76:71:7d:c0:c1:08:88:f2:e2:16:
a4:82:97:b8:6a:20:12:b2:f2:75:fe:05:96:1f:97:d8:37:59:
06:14:44:56:4d:55:20:df:fb:ee:8f:cf:d6:14:28:d6:e2:66:
8c:23:77:d0:28:91:97:73:03:cf:ac:bb:ec:cf:3c:d1:70:ed:
51:b4:52:59:41:9a:02:d7:f8:12:60:5b:dd:d7:5e:d3:10:7f:
73:98:fa:c6:fa:eb:a3:44:61:19:bf:83:f3:a1:04:38:f2:1a:
17:47:40:59:ac:1c:40:a9:46:9d:dd:a5:3d:dc:83:8e:c4:fe:
bb:8d:22:56:b2:69:db:e0:d7:7f:ef:b0:7a:5e:2f:f3:cd:28:
f5:0f:b2:fc:8f:ac:a2:db:e5:db:d6:8e:25:39:a8:72:4a:78:
55:54:a4:58:f9:2f:be:49:e4:a7:5d:9b:30:91:d9:90:15:fb:
d7:9f:4b:c9:18:49:c7:a3:fa:12:d7:23:94:cb:c5:44:77:dc:
c3:2b:29:18:71:0f:cf:bb:2d:e2:aa:da:83:c8:49:a0:ff:ae:
37:85:0e:89:ed:74:d3:19:2b:98:3e:2a:69:5d:26:08:86:69:
d1:ee:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:43:58 2025 by rpki-client