Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa
File: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (raw, json)
Hash identifier: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=
Subject key identifier: 3E:99:F3:FE:05:86:91:38:2C:96:E7:75:9D:B4:6F:74:A2:24:43:B5
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 0194266BBB5176E2FBB0A2A96DE4397F8E9D
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58192
IP address blocks: 194.5.54.0/24 maxlen: 24
2a13:5e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bb:51:76:e2:fb:b0:a2:a9:6d:e4:39:7f:8e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e99f3fe058691382c96e7759db46f74a22443b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:14:a6:76:33:f1:f7:d8:c7:64:da:06:6c:
ca:7e:61:6d:a2:c8:5c:26:9f:de:97:c3:b4:f9:a0:
ab:bb:66:2e:ca:f8:28:28:3f:5b:f2:de:29:b2:4a:
2b:56:d1:88:49:31:70:68:60:62:b9:f0:1d:1e:d3:
12:64:ff:c0:db:a6:b9:c0:fb:6e:82:e7:8a:4b:0f:
53:2e:a8:f2:2c:36:ef:68:e9:6a:ef:55:d8:ca:12:
55:cd:e3:3b:88:a6:f7:21:54:1f:79:cc:61:2e:4b:
d7:a7:ca:cf:8e:42:e0:4b:e7:51:02:94:17:7f:eb:
4b:a0:cd:77:d6:8b:7f:45:d5:6f:4d:c5:95:8d:18:
0f:c8:a0:4d:a3:ab:44:6d:a8:4c:ac:be:2d:b9:a6:
db:23:50:05:c0:ca:98:df:28:5a:de:df:ef:59:50:
d1:7b:80:4c:b0:8f:ea:d1:26:e9:6f:80:a4:5c:a6:
7d:74:aa:50:1b:2d:ef:85:45:79:14:ec:75:df:d1:
f7:0b:16:8d:dd:79:de:81:78:f7:8a:18:64:d0:0c:
30:06:1a:b2:2b:46:23:16:da:de:58:b9:03:f4:6d:
f4:f7:d3:27:6b:94:be:21:f5:3c:df:9f:c2:e5:e3:
df:31:cc:fc:45:e2:b2:88:fa:d4:16:52:6d:33:48:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:F3:FE:05:86:91:38:2C:96:E7:75:9D:B4:6F:74:A2:24:43:B5
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.54.0/24
IPv6:
2a13:5e40::/29
Signature Algorithm: sha256WithRSAEncryption
07:25:54:32:45:0a:c7:c3:ed:63:d4:89:bf:c1:da:98:68:22:
da:1a:76:df:9f:16:04:bd:48:a7:1c:09:e5:6d:6b:3a:f8:d1:
b4:ff:ce:a6:c1:84:7b:e5:00:3d:b4:67:5c:06:55:18:ec:bd:
95:a1:f7:ef:6d:64:f2:15:19:64:fc:66:c6:6a:4b:84:b8:63:
f7:aa:73:15:5d:11:4f:91:f9:36:9b:03:9a:56:0e:1e:67:c8:
cf:75:40:fb:18:71:be:26:95:dc:b5:8b:2b:49:4c:79:3d:a6:
3c:8e:d1:4e:07:fc:92:e8:97:1c:db:35:3e:46:04:b5:93:a7:
db:26:64:a0:05:22:2b:70:e7:6b:59:9b:37:86:ee:7f:4b:16:
4e:ba:95:22:bb:98:38:d7:3f:ff:e2:a5:e5:28:19:88:1d:66:
b6:9f:7d:f5:00:c8:32:08:a1:40:1b:3f:33:76:53:19:d8:7d:
dd:00:de:e5:f0:a2:b6:eb:09:3f:97:8c:ce:1a:4c:83:3b:81:
26:87:04:bb:1d:da:fc:31:3f:0d:fc:c5:74:e0:70:41:35:d3:
4e:9b:73:4a:34:b0:f9:35:d7:be:cc:f1:5f:32:97:3e:bb:24:
89:b4:01:e9:5c:56:83:a5:a3:57:28:30:54:7d:df:c0:94:4d:
91:c3:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:37:52 2025 by rpki-client