Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/pucl_qoNJsFNHYReBDscEGdx2N0.roa
File: pucl_qoNJsFNHYReBDscEGdx2N0.roa (raw, json)
Hash identifier: SiJfUuqs3fjKSI6Mo6WtKDUOtA0gOnKfbqvupwDeWPw=
Subject key identifier: A6:E7:25:FE:AA:0D:26:C1:4D:1D:84:5E:04:3B:1C:10:67:71:D8:DD
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 01942143EDE9754D4AEDE2836809F190B6A5
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/pucl_qoNJsFNHYReBDscEGdx2N0.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 141.19.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ed:e9:75:4d:4a:ed:e2:83:68:09:f1:90:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6e725feaa0d26c14d1d845e043b1c106771d8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:1c:8b:a9:7c:35:c1:30:5b:4d:35:1f:28:
59:97:bf:2f:aa:4f:08:5b:57:fc:2a:df:24:02:b5:
37:8e:f8:8a:70:16:b1:9f:d5:d3:af:de:74:9e:a7:
48:c3:fe:06:e3:ae:dd:2f:68:13:12:d5:cc:2f:e5:
e0:7c:0f:df:4e:f4:fd:6d:de:69:28:c2:3a:e4:4b:
ed:6e:64:04:0e:e8:c2:e1:d0:ed:94:18:96:22:de:
ef:e0:e8:7c:f9:1b:75:ac:0a:0e:7d:b1:0a:75:d0:
bd:79:c6:34:a9:da:56:3f:8d:eb:c6:34:10:fe:81:
06:d3:80:e3:e0:7c:90:af:fd:39:cd:f8:4e:6a:2c:
58:40:4c:a0:d4:e9:19:67:2c:a4:28:39:84:97:a8:
dc:a0:2e:33:87:ea:31:69:76:b8:16:c9:9e:a0:e3:
4a:ab:1a:3f:d4:bc:67:a9:53:fc:41:49:19:0a:6d:
f5:df:d9:11:71:d4:58:1e:26:8c:7e:a1:eb:ee:d7:
a5:bb:ac:69:8c:76:31:79:fd:e3:95:c5:a6:19:c0:
9a:00:2f:a1:22:3c:bc:d5:8f:ab:6c:fb:de:61:f3:
fc:0f:69:8a:cd:75:a0:10:a0:40:42:89:70:50:0d:
5c:f6:38:9c:e2:81:52:b1:5b:e4:b7:7d:6d:56:ea:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:25:FE:AA:0D:26:C1:4D:1D:84:5E:04:3B:1C:10:67:71:D8:DD
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/pucl_qoNJsFNHYReBDscEGdx2N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:11:73:88:82:c7:4a:b7:7f:a4:cd:06:ac:02:e5:06:61:bb:
6f:3d:7b:2c:a9:78:91:31:dc:73:a0:04:62:03:95:2c:90:d4:
0f:7a:28:e4:09:d1:87:3d:55:ee:64:68:79:e6:2e:ff:02:7a:
ea:2d:e7:0b:78:3c:e9:5f:81:83:71:73:7a:8a:36:c3:79:64:
85:3c:d7:16:bc:62:06:e9:c3:f2:64:ec:1a:60:28:b9:26:ba:
bc:69:6a:40:27:0b:95:5c:70:5a:e6:58:95:66:eb:5a:8b:d2:
33:c8:dc:85:fe:9f:f8:7b:ed:5e:03:9e:8a:d9:87:e8:b9:de:
d4:f7:5b:80:e1:8b:a5:e0:cf:1a:29:15:a5:c0:ce:b5:de:d6:
3c:31:fe:ca:92:e9:b9:9b:62:7a:6a:80:68:d9:fc:21:7d:48:
df:88:c3:b5:6a:2f:68:6d:e1:99:d7:6d:f0:7e:56:4e:29:21:
d6:6f:c1:ba:1a:50:20:7d:a7:b4:08:9c:33:66:4c:b4:70:51:
d5:0f:90:9b:86:7d:d9:a5:97:41:ad:13:a1:d2:cf:11:8a:98:
4c:d1:73:bf:20:2a:79:11:06:4e:7c:01:84:fd:df:bd:03:1a:
63:df:6d:b8:76:8a:75:24:3f:3d:a8:06:22:5c:0c:f9:ab:93:
df:dd:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:58 2025 by rpki-client