Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/PMMRtrP5Zia_L993q-DTeiA0eMU.roa
File: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (raw, json)
Hash identifier: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=
Subject key identifier: 3C:C3:11:B6:B3:F9:66:26:BF:2F:DF:77:AB:E0:D3:7A:20:34:78:C5
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0194244593E90B1E5617081428A17142C850
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/PMMRtrP5Zia_L993q-DTeiA0eMU.roa
Signing time: Wed 01 Jan 2025 23:48:47 +0000
ROA not before: Wed 01 Jan 2025 23:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211138
IP address blocks: 2a05:4140:500::/40 maxlen: 48
2a11:e104::/32 maxlen: 48
2a11:e104:5::/48 maxlen: 48
2a11:e104:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:93:e9:0b:1e:56:17:08:14:28:a1:71:42:c8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cc311b6b3f96626bf2fdf77abe0d37a203478c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:e5:55:b0:01:c9:f5:b1:ab:14:49:de:f9:
c8:ef:62:c4:8a:c1:a0:09:4d:a1:38:91:3e:86:15:
6c:51:67:f3:76:b9:5d:83:82:83:3d:8a:fb:02:01:
64:a4:80:f2:05:3b:70:d0:6a:b2:17:bc:f3:80:60:
8d:53:7c:06:37:ff:d9:4c:d8:a8:2f:36:8f:a4:0e:
0d:05:96:43:4d:96:08:4c:02:b5:f2:7a:9e:6a:f0:
f8:39:54:ed:b8:b5:de:21:be:2c:af:41:88:18:7e:
7b:72:d5:5f:1b:ef:16:95:2c:95:c8:2e:c1:26:14:
6a:17:c0:c5:ef:50:6d:43:01:76:e2:93:c9:0f:02:
5c:b4:0c:de:36:95:93:d8:73:d8:0b:51:22:e2:b2:
e9:57:c6:9b:3a:71:29:e9:a0:26:a0:14:30:ef:6b:
03:5b:3b:48:b4:37:64:5a:e2:1d:f8:37:9c:43:34:
41:f4:16:d2:a4:17:e3:5f:e2:7d:7a:c7:63:ce:f5:
ed:5e:7b:45:ec:48:16:c3:73:02:96:f6:c6:98:57:
e6:43:bd:8f:36:ba:4e:8f:b8:f3:e4:a3:9d:b2:0c:
b1:e7:69:c2:30:fe:c7:c0:0b:68:cc:f7:cf:64:4f:
e3:2f:43:0b:46:b7:90:84:c5:fc:be:97:fa:3c:56:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C3:11:B6:B3:F9:66:26:BF:2F:DF:77:AB:E0:D3:7A:20:34:78:C5
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/PMMRtrP5Zia_L993q-DTeiA0eMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:500::/40
2a11:e104::/32
Signature Algorithm: sha256WithRSAEncryption
61:16:30:59:0a:77:02:b3:cc:a6:71:9e:06:25:b6:b4:15:6b:
a8:78:fd:84:23:0c:be:39:9a:df:56:83:a7:c8:50:ab:74:db:
4f:17:b2:db:a9:c7:45:73:cd:4f:b6:d8:cc:17:08:39:44:a2:
dd:6e:52:37:a1:e3:b2:db:47:0e:36:94:c0:3c:f1:24:85:5d:
67:ec:34:fe:60:cb:ae:f6:90:4c:bd:23:cf:cf:09:36:a2:1b:
d0:b5:9c:89:3b:2f:2d:a3:f1:a0:6b:1c:96:30:c3:6d:a6:15:
aa:a4:e2:66:e8:03:ca:82:91:96:28:61:66:5d:81:b1:0e:d9:
e6:2a:cd:8c:0d:a9:be:31:9f:09:c7:59:58:6b:f4:69:6a:6d:
aa:1c:3b:8c:a4:3f:f1:c4:53:84:92:eb:dc:9f:17:bf:ca:04:
34:65:58:bb:ef:f2:1e:35:b0:6f:d8:60:e0:72:7b:d9:e0:01:
c6:0e:d3:86:bb:50:f5:cb:f1:f5:35:25:ff:bb:f4:24:b2:fd:
da:7c:cb:7f:45:b3:28:0f:8d:89:e2:33:7b:b4:b2:3a:3e:ae:
a6:fa:86:d2:31:0d:6e:a6:7a:59:c1:f4:68:9a:5d:b2:d8:b1:
34:7f:f5:6d:a6:43:ad:b2:19:0d:2f:c5:a4:a3:08:b6:03:60:
f3:fb:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:36 2025 by rpki-client