Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/PQV-lmNPs22kjH81gqLzZC2Hxyk.roa
File: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (raw, json)
Hash identifier: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=
Subject key identifier: 3D:05:7E:96:63:4F:B3:6D:A4:8C:7F:35:82:A2:F3:64:2D:87:C7:29
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDAC43C30FD081FBCE4A1691545D46
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/PQV-lmNPs22kjH81gqLzZC2Hxyk.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204941
IP address blocks: 91.108.34.0/24 maxlen: 24
91.108.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ac:43:c3:0f:d0:81:fb:ce:4a:16:91:54:5d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d057e96634fb36da48c7f3582a2f3642d87c729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:71:cb:0a:b1:00:c1:5e:7d:37:d2:8a:e2:
b0:5f:c5:13:6c:4f:6c:ad:27:5b:36:43:e6:bc:70:
20:b9:c9:11:96:f5:b9:91:37:85:be:b7:67:03:09:
a7:85:ae:b3:17:12:d9:b0:bd:52:93:07:4d:60:e0:
24:69:c1:4a:23:90:8d:1a:56:e5:b5:f4:ca:fb:3f:
69:e1:65:0b:0f:2c:9d:d2:ca:46:68:03:65:0f:75:
d2:15:58:9f:13:90:54:3a:1e:17:2c:d4:bc:f6:f9:
49:f1:f2:83:c7:bf:49:df:1f:8e:00:86:6c:b3:12:
81:3d:99:88:dd:f0:3b:16:1d:2f:8a:93:d2:d8:b9:
73:fa:61:69:e6:c6:ee:19:8b:03:0c:1e:f0:3f:0e:
c2:6e:b8:60:c9:7e:5b:3d:ed:6f:b9:bc:71:63:f2:
7c:bc:9c:17:92:75:fa:59:66:73:74:b7:da:e4:01:
7a:0c:0f:5e:ce:c8:4f:d0:04:24:ac:5a:3f:e0:1e:
12:3b:3e:d2:fb:ec:2d:0a:87:bb:96:8c:d7:1b:82:
dd:ed:39:fe:54:e7:bd:7e:cd:34:b4:c7:4f:6a:fa:
46:97:82:c7:d8:18:8b:f3:a5:cd:37:4a:de:48:cd:
cd:84:db:f6:c7:32:da:16:07:55:c3:20:26:02:db:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:05:7E:96:63:4F:B3:6D:A4:8C:7F:35:82:A2:F3:64:2D:87:C7:29
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/PQV-lmNPs22kjH81gqLzZC2Hxyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.34.0/24
91.108.53.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f1:a6:64:e2:52:86:36:f9:44:00:ea:ec:05:15:2f:45:4f:
ef:3c:b5:c3:21:4f:e1:d9:f2:90:2e:5c:8a:29:a6:99:8d:6a:
dd:cb:9f:2d:65:6b:13:ad:5a:db:6c:cb:cc:64:e6:6b:2e:49:
84:0a:73:30:80:ea:9a:42:db:29:2e:3f:82:61:d3:8b:49:e5:
73:0b:05:58:5f:04:06:b7:1e:38:65:e5:b5:6d:f3:67:f7:aa:
0d:fb:0f:1b:84:a8:69:2e:f5:88:a2:96:6f:09:80:44:c4:34:
93:50:64:50:a5:f4:ad:cc:a3:c9:73:ee:f7:d6:91:1f:5b:6e:
7e:da:e4:7c:78:c1:99:04:51:06:35:3b:0f:cd:5a:c0:2a:fb:
13:cb:ac:46:5b:b7:a5:91:44:05:dc:d4:14:37:a2:dd:a2:f2:
68:0b:b6:43:ea:5d:02:18:f5:c0:18:c3:13:80:dc:7e:9b:5d:
66:39:10:57:47:9e:db:9b:12:ed:db:09:d9:b3:a2:06:09:ce:
2a:39:c5:a5:f2:7e:4f:55:52:df:9e:df:ea:74:c5:7e:8f:28:
e7:f9:ff:a1:cc:50:f2:89:b8:13:53:a7:4d:13:14:85:e9:df:
05:ac:45:b4:c4:41:3b:16:37:ac:b5:54:b6:af:3d:38:6a:17:
35:e0:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:06:14 2025 by rpki-client