Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/pcs_PEHDTdXvP_iINnpW2AcXpTo.roa
File: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (raw, json)
Hash identifier: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=
Subject key identifier: A5:CB:3F:3C:41:C3:4D:D5:EF:3F:F8:88:36:7A:56:D8:07:17:A5:3A
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019428254C430D45B38489B16C46837CC257
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/pcs_PEHDTdXvP_iINnpW2AcXpTo.roa
Signing time: Thu 02 Jan 2025 17:52:00 +0000
ROA not before: Thu 02 Jan 2025 17:52:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60102
IP address blocks: 185.52.200.0/22 maxlen: 22
185.52.200.0/24 maxlen: 24
185.52.201.0/24 maxlen: 24
185.52.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:4c:43:0d:45:b3:84:89:b1:6c:46:83:7c:c2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jan 2 17:52:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5cb3f3c41c34dd5ef3ff888367a56d80717a53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:a9:95:f5:7a:e8:ec:d7:b3:98:0a:e9:d2:
2d:04:1c:a4:ef:1d:3e:0b:98:09:2a:de:98:e4:0a:
1c:e5:c3:6c:6f:f4:b3:51:c6:11:56:9d:24:5d:4c:
22:f2:67:b4:9d:82:cf:f0:6f:1d:e3:93:cd:a2:31:
6d:c2:82:cf:58:89:d4:b8:a5:30:d5:84:86:83:ca:
b7:e2:e8:d2:b2:a2:ff:ca:c4:26:2c:e2:97:60:05:
1f:6f:11:c4:9e:ac:9f:f5:cd:9b:2f:2d:bd:ce:c7:
82:ea:a7:8d:8c:2f:f7:9b:6a:57:13:97:ab:1e:32:
13:22:af:ef:2e:b4:cc:a0:ce:16:2e:9d:4e:2d:2f:
59:4d:95:71:fb:c8:c7:f9:2d:fb:14:4e:f0:f8:ca:
9a:86:f0:76:39:46:7a:f0:85:5f:12:4c:3e:04:39:
64:5a:ce:e4:5d:ab:c7:39:44:a3:06:33:3c:9c:2a:
51:18:22:8f:90:3f:51:6b:32:cc:8f:45:0b:44:8c:
dc:8d:c8:85:42:23:5f:e3:14:89:20:d6:cc:26:d2:
b9:49:08:71:a7:69:47:65:57:d5:3c:0e:e8:a3:44:
4c:3c:9f:6c:e3:70:76:d4:bb:66:bf:92:78:72:ec:
fe:43:01:c7:fe:09:a8:2b:bb:3b:f3:7d:f9:5f:08:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:3F:3C:41:C3:4D:D5:EF:3F:F8:88:36:7A:56:D8:07:17:A5:3A
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/pcs_PEHDTdXvP_iINnpW2AcXpTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:30:bd:df:c6:b1:45:78:01:07:af:66:db:8b:91:c9:fc:99:
e5:38:aa:94:78:97:b2:92:53:31:c8:b9:ef:2e:e1:17:62:80:
26:fc:b9:f9:34:fb:89:b4:83:59:63:b2:9c:d7:c5:3c:5c:5c:
5a:a9:ab:db:a6:1c:12:86:70:0e:a6:d2:ef:0c:23:02:e2:bd:
2f:43:66:b5:10:0e:47:b1:b5:28:ac:5d:e1:c7:3a:97:94:e7:
85:e1:f6:4b:a5:88:41:cb:a8:60:c7:e9:eb:4f:69:11:43:2c:
af:9c:eb:3c:3b:11:8f:91:0c:c1:6f:35:02:0a:4e:6e:c6:c0:
a1:94:b1:ea:3f:28:d6:43:ab:37:05:36:9b:30:82:22:77:18:
b4:ac:73:fc:50:a2:95:6e:ed:88:c9:63:2b:c1:2a:92:17:8a:
8d:13:8d:07:34:ba:c0:94:11:f9:6a:c1:6a:d2:94:48:3a:4c:
02:f6:c7:a0:1b:94:52:c5:ce:a7:38:8c:3d:8c:10:51:43:7e:
cc:b4:c8:c6:74:00:e6:93:32:92:0f:c8:51:b3:ba:ee:7f:d0:
96:48:e0:ff:63:1f:94:7b:72:9f:88:20:82:12:0a:08:a1:15:
07:9e:64:c4:41:00:d6:f6:c2:51:19:d5:b6:d5:d2:c1:42:11:
b3:e1:a6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:46 2025 by rpki-client