Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/03PqHmjkj4TD2ylDKAOumX_8ZTA.roa
File: 03PqHmjkj4TD2ylDKAOumX_8ZTA.roa (raw, json)
Hash identifier: x+gVojJiPW6JgGHksggk6Pxvk6Hei1FVA2Qg8c4io0A=
Subject key identifier: D3:73:EA:1E:68:E4:8F:84:C3:DB:29:43:28:03:AE:99:7F:FC:65:30
Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial: 019425FD948E3A0F5430FB219A6883027BB3
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/03PqHmjkj4TD2ylDKAOumX_8ZTA.roa
Signing time: Thu 02 Jan 2025 07:49:23 +0000
ROA not before: Thu 02 Jan 2025 07:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12735
IP address blocks: 195.49.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:94:8e:3a:0f:54:30:fb:21:9a:68:83:02:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d373ea1e68e48f84c3db29432803ae997ffc6530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:04:c2:a6:1b:19:aa:62:66:36:d7:b3:45:
f3:a7:ec:b1:ed:ff:3e:5e:8b:a3:89:9e:59:64:3a:
8d:0e:59:68:a1:35:8f:a0:71:a8:02:49:61:d8:d7:
97:9c:a0:b5:db:71:1c:1c:92:2b:18:d1:67:70:3d:
04:2e:84:60:5d:ef:94:86:67:85:ad:8a:24:5f:ae:
19:e0:ea:f1:db:67:e7:f6:16:bf:1e:ba:a9:6c:03:
2d:96:86:14:81:68:bb:83:7a:4e:c3:c7:e3:0e:ab:
6b:c6:ab:f4:d9:87:73:c3:6e:fc:f0:c7:38:0d:82:
0c:de:73:92:f8:8d:c1:be:b3:d6:09:30:8a:ae:b1:
62:a0:32:00:a2:b8:25:0a:45:a5:21:56:ea:86:39:
e9:2b:7f:ad:d8:36:d0:b1:b1:9d:ab:d4:a2:b2:f9:
24:bb:19:ca:9f:4c:e1:2b:55:a8:02:dd:61:4f:17:
7d:d8:8c:60:1a:2b:c5:1a:5d:a1:7a:56:71:16:2e:
38:1f:c2:fb:c1:2a:08:24:b1:16:b6:10:26:29:5f:
e5:4a:ef:78:34:f1:95:96:0c:f3:9b:9f:a8:cd:85:
01:ce:b3:f3:02:44:16:dc:02:21:fe:78:6a:9f:42:
f4:e2:72:9d:96:e0:21:6b:87:90:b9:64:b3:e7:a8:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:EA:1E:68:E4:8F:84:C3:DB:29:43:28:03:AE:99:7F:FC:65:30
X509v3 Authority Key Identifier:
keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/03PqHmjkj4TD2ylDKAOumX_8ZTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7c:51:09:1b:c1:12:d9:da:c0:bf:e5:19:83:39:f9:cd:a6:
44:c6:bc:af:1b:2b:79:3d:86:0c:31:be:8c:61:9e:4b:8c:c6:
78:4d:41:8c:e3:65:94:da:7d:a5:19:2b:74:18:14:92:35:4f:
3e:ae:21:24:e3:9f:c5:00:82:bb:d8:be:a7:d6:6b:56:b8:dd:
1e:05:a8:2a:dd:04:b1:96:73:66:a3:cd:8d:80:75:22:5b:cc:
d1:0f:46:d8:ee:50:34:bc:96:f5:c2:d5:0d:9c:f7:26:a4:ca:
3f:b8:50:ee:b7:09:92:12:05:c7:f5:11:0a:92:ba:5c:de:a2:
96:70:86:7b:17:7b:bd:fa:74:73:0c:dd:16:b2:1b:98:77:1f:
78:25:9d:b7:ee:18:d6:1b:31:17:c2:af:b9:7c:51:be:87:d0:
84:5e:8d:55:09:7a:0f:50:71:2e:6f:44:c1:01:fd:ef:03:9b:
64:0d:a5:d4:4a:90:d3:ef:d9:3a:4c:14:42:48:79:2f:be:62:
00:ed:0d:62:de:2e:56:c9:a8:09:04:30:d2:82:72:16:4d:fa:
6d:97:42:52:1e:43:22:17:be:64:73:be:06:81:2d:d9:34:be:
44:e8:b5:65:d9:59:bb:5f:8d:cd:01:c8:b2:7f:cb:38:c8:c2:
e8:ff:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:39 2025 by rpki-client