Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/PSTA7aBO3VYB2zMpMImeOQX4TxE.roa
File: PSTA7aBO3VYB2zMpMImeOQX4TxE.roa (raw, json)
Hash identifier: KhNu39d0hMZQeHsSSDypoBQ2uQz6//kc0yiRwmUN5AM=
Subject key identifier: 3D:24:C0:ED:A0:4E:DD:56:01:DB:33:29:30:89:9E:39:05:F8:4F:11
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 019426D9C18CCD0D652E61A57D53E30B1451
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/PSTA7aBO3VYB2zMpMImeOQX4TxE.roa
Signing time: Thu 02 Jan 2025 11:49:52 +0000
ROA not before: Thu 02 Jan 2025 11:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 94.137.75.0/24 maxlen: 24
94.137.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c1:8c:cd:0d:65:2e:61:a5:7d:53:e3:0b:14:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d24c0eda04edd5601db332930899e3905f84f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:68:6a:12:38:15:dc:d9:e9:82:6a:7c:d0:
28:75:0e:b6:f0:fc:a4:32:a5:c5:de:16:ac:46:14:
e5:be:68:9c:1a:fe:d7:99:d6:8e:fa:1e:d8:3d:fa:
c6:36:f5:c2:24:0f:30:00:5c:c7:16:f1:38:a4:e4:
fc:21:d9:04:1d:c5:ef:f1:f7:de:6c:a2:df:cf:eb:
ac:3a:be:1e:29:a1:c7:4b:a5:97:d9:49:92:51:42:
13:ba:d3:27:d1:32:b3:21:8a:f7:1a:7d:cc:02:88:
a8:17:4c:1d:00:ff:cb:e9:4b:e0:84:f5:0e:02:de:
51:d4:0a:c0:1c:1e:ae:0e:78:13:a3:64:af:11:de:
21:0d:86:5f:21:ba:e4:e7:e7:e4:e0:b3:c9:21:6b:
f4:7b:93:53:4d:23:65:db:53:de:15:19:a5:60:8e:
aa:ed:3f:b0:9a:04:f8:42:2f:93:14:a8:5c:98:be:
dc:e8:9a:4d:d3:d4:82:5f:ac:31:3c:29:f8:f7:19:
85:2d:35:8a:41:73:72:f4:e8:a9:6d:3c:50:f4:a3:
97:6f:41:98:54:9f:65:19:56:49:04:9b:fd:97:67:
a1:48:eb:23:1a:e8:b5:d1:a2:d7:be:0e:ed:8c:e0:
ed:ee:90:41:72:c0:7a:40:0e:bd:14:85:a9:6e:08:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:C0:ED:A0:4E:DD:56:01:DB:33:29:30:89:9E:39:05:F8:4F:11
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/PSTA7aBO3VYB2zMpMImeOQX4TxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.75.0/24
94.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d6:d3:64:94:e6:b8:2b:a1:84:4c:63:d8:f0:f1:da:39:cc:
05:64:67:08:71:de:ff:a5:8a:cb:7a:16:ff:d9:56:8e:62:cf:
77:f9:56:48:6e:84:3d:49:69:d1:d4:6f:11:63:bb:73:c6:ed:
30:98:21:44:a3:ea:34:92:8d:e3:5a:2d:6c:3b:8d:a9:3f:fa:
86:ca:aa:f5:54:a3:70:a3:b1:b5:3f:d8:63:23:85:4a:51:30:
19:2a:57:87:5a:c9:a7:33:91:a2:90:0f:f3:b4:2b:fe:3e:bb:
6c:b3:78:95:38:36:0d:1c:12:b5:d7:3e:70:92:53:1d:8e:c2:
d2:57:29:c3:ab:bc:99:98:5a:3b:ac:f5:a2:fb:12:ed:dc:08:
32:41:67:a5:f3:2e:75:6b:a5:1e:5b:f5:46:15:1e:f7:24:57:
45:63:f6:72:f1:85:8b:c5:b6:33:da:a7:a8:53:b8:90:a8:6c:
fa:2c:ae:ad:44:e1:2b:d8:a7:b3:95:51:ee:58:ad:54:ba:42:
72:9d:3c:c9:6b:ab:7f:bb:9d:9c:02:cd:18:03:68:f3:dd:00:
4c:7f:12:88:21:98:5d:0e:c7:5d:1e:20:b0:2c:4a:31:fb:2e:
bf:a9:b5:24:87:94:3b:e7:4e:85:94:c4:a0:de:df:7b:2b:d2:
54:e7:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:52 2025 by rpki-client