Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa
File: PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa (raw, json)
Hash identifier: 8cgALraVTSl/WpvIBY9Xw/fiXrmhiHG/rLuS82zfXFo=
Subject key identifier: 3D:1A:14:17:F9:C8:DD:04:79:60:21:77:A0:FF:7E:4D:E5:BC:FB:B3
Certificate issuer: /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial: 019426D9F0DD2BE9129526C578D9EE08E524
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34177
IP address blocks: 145.242.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f0:dd:2b:e9:12:95:26:c5:78:d9:ee:08:e5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d1a1417f9c8dd0479602177a0ff7e4de5bcfbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:55:95:dc:42:6a:dd:d7:aa:39:5b:25:9d:
d5:74:a5:83:02:5c:eb:3a:4b:d0:25:3b:7d:f3:b5:
b7:99:88:ed:21:3e:60:a0:d7:b2:f3:8a:f8:65:6e:
66:25:57:6e:1e:46:f7:79:fb:f8:d4:7b:84:38:b4:
f7:60:85:df:fc:07:85:c1:36:26:f5:85:07:0b:78:
19:14:50:8b:3b:ca:5d:56:48:d0:92:5a:6b:4c:7c:
dd:d8:19:dd:7d:e6:35:85:59:8b:fe:fd:ea:2b:11:
2b:7f:b7:da:2c:c8:2d:ca:2f:2d:b4:6d:e4:9e:3a:
fd:46:9c:7f:d5:91:a0:2e:3d:e4:66:5e:d5:d1:ff:
62:7a:c9:03:48:e6:07:21:fe:68:55:2c:6b:09:db:
59:6f:57:a4:da:93:5c:ef:3d:43:0f:f2:5f:40:21:
4d:75:15:9b:12:60:06:3e:62:43:b9:ad:02:33:0a:
6c:36:02:62:dc:6b:2c:b0:9b:6e:1f:07:e6:62:e3:
2a:4c:3b:33:81:62:99:db:e1:bd:1b:35:16:f3:b0:
3f:1a:1c:19:2b:21:46:75:af:1d:1f:03:cf:86:d0:
d7:58:ff:d8:1c:bd:d7:76:97:90:cc:03:79:4a:83:
32:3d:98:a0:b4:0c:2e:f9:08:c6:04:70:7d:2d:a3:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:14:17:F9:C8:DD:04:79:60:21:77:A0:FF:7E:4D:E5:BC:FB:B3
X509v3 Authority Key Identifier:
keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.242.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0e:bd:59:af:84:4b:1d:c9:b4:f4:94:20:62:96:a3:61:6c:
4f:a1:e7:68:af:d7:ae:ef:24:6d:cd:8c:65:c1:6c:58:1e:32:
ed:f3:da:0c:47:02:2c:35:31:23:d0:b4:45:73:f9:d3:38:bb:
20:e6:04:98:a5:7f:90:ef:ff:f9:a2:cf:04:28:f4:8f:95:a7:
dd:73:59:87:78:06:a1:4e:f8:03:f4:51:0b:e2:5a:a2:96:ac:
86:bd:2a:29:46:ad:cb:1a:4a:84:5a:f0:fa:4c:0a:7c:1e:1c:
64:33:a0:e5:61:07:33:7e:bb:25:fd:b2:27:94:3e:76:b1:29:
27:1d:b2:b3:dd:98:90:a3:2a:a6:10:11:47:e9:c7:b7:ac:d4:
76:9d:d7:bc:a3:c8:f0:c5:6a:f7:f2:38:e9:d3:b7:d4:1e:c8:
b6:fe:57:6e:f2:55:4c:5d:d1:d2:0a:52:35:b0:1a:a4:c3:4f:
21:41:ac:43:63:4d:48:db:af:b2:1f:7f:c5:75:6b:31:70:a3:
7e:a3:a9:79:34:50:be:02:0d:c4:c2:9b:b5:01:b2:12:bb:06:
d0:7e:ff:50:31:44:5d:c4:a3:36:f6:4b:75:9d:3a:e1:1f:b0:
2a:d2:52:91:b1:4f:3b:bf:b0:1c:66:d3:95:4a:1b:fe:16:68:
c2:2a:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:26:05 2025 by rpki-client