Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PthqEj22M7At2kBHUijks0QzL2Y.roa
File: PthqEj22M7At2kBHUijks0QzL2Y.roa (raw, json)
Hash identifier: mLNqUo+b6WtFCG82EqWZEk2WU+0M7VwjwYAWyGVtt1I=
Subject key identifier: 3E:D8:6A:12:3D:B6:33:B0:2D:DA:40:47:52:28:E4:B3:44:33:2F:66
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 0194252140F2EEC2FCD82FD2F00A84EE2A5C
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PthqEj22M7At2kBHUijks0QzL2Y.roa
Signing time: Thu 02 Jan 2025 03:48:43 +0000
ROA not before: Thu 02 Jan 2025 03:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44947
IP address blocks: 185.83.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:40:f2:ee:c2:fc:d8:2f:d2:f0:0a:84:ee:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: Jan 2 03:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed86a123db633b02dda40475228e4b344332f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:6a:16:f2:cc:7b:a2:98:b6:3a:71:8f:07:
a3:e0:0d:13:9c:eb:f9:dd:2e:d7:8e:e2:4f:ed:59:
ea:8f:3b:b4:0e:ab:ed:51:18:e1:e0:a2:b0:33:05:
20:f3:e6:79:11:23:3c:81:86:64:68:31:56:5e:e5:
cf:f2:32:9a:a9:3e:dc:a4:8d:14:aa:77:2c:b1:ae:
00:6c:ec:fe:dc:f4:73:0f:ef:19:ad:e4:3d:df:fd:
bc:e5:08:52:bc:68:e5:8e:9a:85:4c:5b:44:dc:82:
98:c1:bb:b3:e2:8b:09:48:aa:7e:87:dd:15:39:68:
b0:20:b5:48:cf:58:e0:5d:f7:90:c9:72:89:22:ec:
92:24:57:62:33:9f:b4:81:f7:a7:94:7d:07:7e:fe:
c2:0e:5e:b4:a0:07:44:cb:67:b9:78:6f:1f:2a:17:
97:7a:ed:34:49:c3:9c:c4:02:2e:80:1b:a6:1f:04:
7b:bb:e3:70:d2:0c:04:d2:5e:6a:12:d4:ab:53:23:
b4:94:c1:59:d2:c3:e5:cb:f8:f9:5e:00:fe:34:86:
a1:23:80:70:7a:e7:35:e6:ed:ef:2e:51:23:0a:96:
54:44:2d:b9:8b:82:85:1c:8d:de:bd:cc:d1:50:62:
10:b7:13:b6:31:0d:13:16:74:e1:e2:6c:b5:eb:d9:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D8:6A:12:3D:B6:33:B0:2D:DA:40:47:52:28:E4:B3:44:33:2F:66
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PthqEj22M7At2kBHUijks0QzL2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e2:86:c3:15:a2:cd:fc:91:43:c3:a4:7e:93:45:b7:32:24:
cd:30:a2:0c:16:bb:42:ae:b4:20:67:b6:fb:6f:87:ce:f3:b3:
c3:e7:7d:ae:e5:e8:b8:68:e7:5e:ac:7c:d4:22:22:6b:b8:3e:
02:44:58:ce:9d:78:7d:12:bf:5d:e6:42:23:d4:c6:54:6c:f2:
a5:d5:a9:51:47:e1:b9:96:52:12:c5:f9:56:fa:cc:1a:e7:40:
6b:a3:87:72:36:4d:61:ef:81:9a:b5:8f:92:08:64:4a:20:22:
c1:17:05:79:93:c6:b0:9b:23:c1:9c:bb:2e:8e:af:c1:34:cf:
69:b1:7a:47:39:d7:48:b2:25:e8:d5:f8:f2:7c:a6:4f:80:14:
11:31:b4:e5:b2:8b:8d:47:3d:97:0f:2b:33:03:68:89:2b:c6:
c4:5f:75:75:43:fa:95:65:1c:98:9c:c9:e5:f6:e6:cc:e0:0d:
1d:07:aa:7c:dc:be:f8:4b:ea:fb:95:fb:b3:94:f0:de:42:be:
51:1c:2e:f5:d5:b5:de:4d:10:43:c6:ae:7c:64:7b:ff:f0:7b:
58:c5:ba:21:39:14:95:12:7d:d9:7c:2a:f6:0f:5f:58:94:71:
98:c1:6e:ff:64:28:25:a4:9b:e9:96:0d:67:52:08:b2:6a:6a:
f4:01:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:50:07 2025 by rpki-client