Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa
File: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (raw, json)
Hash identifier: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=
Subject key identifier: 3D:82:C8:80:1A:FF:07:0A:70:A8:80:6A:D2:E0:D7:8C:C5:42:70:ED
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01958A92786A129367A3890412021B6EFFEF
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa
Signing time: Wed 12 Mar 2025 13:36:49 +0000
ROA not before: Wed 12 Mar 2025 13:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 188.209.142.0/24 maxlen: 24
188.209.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:92:78:6a:12:93:67:a3:89:04:12:02:1b:6e:ff:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 12 13:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d82c8801aff070a70a8806ad2e0d78cc54270ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:a7:3e:a7:ee:87:90:10:10:c8:41:f2:87:
9f:1b:8a:42:f4:16:7c:34:44:9a:85:00:0c:2c:ab:
29:75:81:3a:c1:e9:a7:6e:16:b1:9f:c1:5a:4e:8b:
7f:7d:88:76:20:b6:15:a4:89:2b:12:5a:6a:7f:91:
3e:c1:5d:db:bf:05:6b:11:12:23:bc:c9:68:29:95:
5a:09:eb:c9:8a:3a:0c:03:82:fe:6e:04:78:db:56:
c1:12:dd:31:67:1b:06:a7:17:3e:45:d0:b4:21:86:
23:2b:fb:e3:17:c2:b6:86:8a:08:2e:f8:db:93:b3:
b8:3a:11:b8:d6:be:2c:df:b7:9f:6c:9c:7a:d2:d1:
7d:06:e7:c3:9c:b0:26:b3:9c:e7:e2:80:46:f9:a6:
c6:65:89:89:97:ea:e7:28:10:2e:94:70:0f:24:cf:
50:b4:34:b0:e2:35:1b:cc:62:b0:6f:41:86:17:93:
99:70:f2:e0:cf:01:2a:7e:9b:10:34:a8:51:c5:47:
b0:7d:8b:2d:2e:1b:8e:55:13:62:97:d7:bf:f6:e4:
ab:22:06:e9:0f:1e:09:06:c3:9a:fb:5a:33:18:bb:
95:a5:b4:26:76:9b:8c:80:9b:6a:32:62:c3:9c:1c:
65:4f:b0:7e:8c:65:bf:78:02:c3:47:74:95:1e:ca:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:82:C8:80:1A:FF:07:0A:70:A8:80:6A:D2:E0:D7:8C:C5:42:70:ED
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.142.0/23
Signature Algorithm: sha256WithRSAEncryption
19:d9:4a:7e:74:1d:69:ca:07:16:5e:b4:a1:81:80:d0:3c:8b:
c7:2e:6d:74:85:07:71:23:50:0d:8c:4b:9a:cf:7b:a9:c7:44:
f2:bd:59:ab:ed:eb:66:21:2c:fe:f6:db:fb:89:cc:a0:48:e4:
14:e8:44:92:39:07:91:b7:58:b4:b0:32:b5:7c:60:b3:80:cb:
3d:13:62:e3:20:3f:3d:90:7f:5c:e3:bd:86:88:d2:c7:45:2d:
85:29:b7:61:db:5e:19:95:df:20:5c:25:96:cc:4a:49:ee:69:
33:b6:8c:fc:50:75:83:3e:c8:a5:6a:43:25:3e:9f:bb:9b:25:
68:8b:6d:a7:2b:cf:59:12:40:6a:e8:8b:ea:4e:ed:e7:86:83:
d7:5a:1c:d7:77:b6:f5:3b:5b:e5:ee:0b:36:88:49:c8:ce:d0:
7a:d5:65:e5:2f:56:8a:b5:fb:ee:5a:a6:39:07:01:f7:ee:a3:
af:3e:7f:ba:80:b4:95:87:d8:0d:58:cf:3c:e0:35:fd:27:d2:
c4:c8:47:b2:76:e8:fc:86:d2:fc:7f:6a:ad:85:8e:43:fd:40:
60:be:f3:4c:e6:5b:00:47:40:96:4a:64:61:61:e4:19:d2:3f:
3f:89:67:08:73:3c:a2:28:b0:3b:2a:14:77:8f:95:25:3f:da:
e0:fd:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:37 2025 by rpki-client