Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pkqijzfTQ0d6D90vHPdmSk7CEDg.roa
File: pkqijzfTQ0d6D90vHPdmSk7CEDg.roa (raw, json)
Hash identifier: hY9mHgz3Oj4RxVmY7cwzDgHjBVtSqJe6FWznWl02aYU=
Subject key identifier: A6:4A:A2:8F:37:D3:43:47:7A:0F:DD:2F:1C:F7:66:4A:4E:C2:10:38
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C0061A06F22FA113CD7D0EE7F55B
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pkqijzfTQ0d6D90vHPdmSk7CEDg.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13277
IP address blocks: 194.209.13.0/24 maxlen: 24
194.209.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c0:06:1a:06:f2:2f:a1:13:cd:7d:0e:e7:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a64aa28f37d343477a0fdd2f1cf7664a4ec21038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:f9:00:8c:c8:32:aa:3d:1a:56:fc:67:59:
98:52:22:39:ed:0a:81:43:34:82:06:3c:64:8e:12:
b6:8c:98:33:bd:88:5f:69:f7:62:64:76:a9:36:8c:
cb:7c:fb:5c:62:c5:33:c3:f1:0b:41:57:4c:63:5b:
07:21:e3:12:d8:66:21:70:40:63:a4:47:8b:ba:f3:
54:f6:9f:39:24:81:78:91:81:46:55:52:5c:59:4c:
c6:dc:5b:97:0a:55:f3:8b:74:8f:1e:a2:07:4e:77:
05:c7:75:81:df:3b:15:6c:fd:12:c6:08:bf:27:db:
57:6a:dc:5b:71:82:9c:4e:7e:f0:32:33:ed:d2:13:
42:4d:ef:89:d3:fe:eb:ca:1a:a2:b6:a8:e6:73:5f:
81:81:02:87:dd:c0:53:81:03:81:8a:d5:40:6f:6d:
6a:02:68:ef:79:d0:16:e6:51:86:75:f6:e1:4d:ae:
ee:bb:d6:4d:cc:0a:73:42:d1:15:9b:a8:f1:e9:d6:
8e:7e:29:fe:1f:76:d3:c9:4b:86:22:ff:8c:b4:0d:
cb:f6:e1:f2:e7:87:32:c5:03:be:60:43:13:60:17:
d0:a3:0b:aa:94:9c:13:30:ae:b8:bf:ca:dd:11:86:
67:87:e2:97:de:28:63:93:37:89:a7:c6:a2:87:bc:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:A2:8F:37:D3:43:47:7A:0F:DD:2F:1C:F7:66:4A:4E:C2:10:38
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pkqijzfTQ0d6D90vHPdmSk7CEDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.13.0/24
194.209.211.0/24
Signature Algorithm: sha256WithRSAEncryption
60:15:85:e8:38:50:08:76:11:52:b3:1b:11:c8:b0:80:b5:59:
c7:15:ab:fe:74:a5:78:c9:b0:59:24:e5:bd:97:be:83:7b:88:
72:06:0d:68:43:5f:db:37:a5:91:3b:8f:0e:09:04:01:eb:99:
f0:71:68:e9:b1:d5:62:18:d4:1f:db:3f:4c:4f:c7:86:08:9e:
85:8a:d8:5f:6b:84:8f:4f:40:7d:0e:4d:8f:7a:eb:ff:15:f8:
71:a4:63:49:8d:27:08:78:96:c6:90:4a:c9:f8:08:29:36:6e:
ad:f0:e2:57:3b:13:06:30:78:55:3d:31:66:a2:66:3c:bf:63:
9c:2d:62:8a:f1:e6:4d:70:df:2f:7d:9c:17:60:74:44:b2:db:
cd:4e:0e:d4:89:80:ca:04:64:08:cb:d9:95:b7:1e:f4:3c:0e:
ef:17:f7:0b:e1:b6:14:38:63:a6:dc:e4:dd:6d:c7:b1:9c:3b:
91:d2:28:3d:a8:24:08:d8:dd:76:83:14:8f:8e:7a:1c:a9:47:
dc:23:8f:ab:5d:42:8e:2d:11:f0:01:b6:1a:40:cc:9e:51:ae:
cc:c4:e0:f0:f4:4d:26:c2:e5:30:37:2e:a0:f8:6c:cd:fa:63:
01:66:45:2b:55:22:7a:68:be:47:f9:26:f6:97:55:80:35:3c:
44:13:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:21 2025 by rpki-client