Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/P2rbCazRzAecS6cq7qBlJh3ulhk.roa
File: P2rbCazRzAecS6cq7qBlJh3ulhk.roa (raw, json)
Hash identifier: eS1swdw4PwPA3JuCzPIM9DRGgb8q7vXujdInn+mWiHc=
Subject key identifier: 3F:6A:DB:09:AC:D1:CC:07:9C:4B:A7:2A:EE:A0:65:26:1D:EE:96:19
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019426D9C81990019AD1B24F6161CB419680
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/P2rbCazRzAecS6cq7qBlJh3ulhk.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 159.242.228.0/24 maxlen: 24
159.242.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c8:19:90:01:9a:d1:b2:4f:61:61:cb:41:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f6adb09acd1cc079c4ba72aeea065261dee9619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:f7:5a:42:2f:dc:f5:75:31:c7:6f:7a:96:
2d:b3:1b:88:f0:51:06:25:ba:35:f0:e4:b2:59:c6:
07:f7:75:ae:b8:2d:bc:60:a4:88:38:f8:28:0c:e4:
d3:d8:2f:3e:19:d7:fb:63:a7:24:a2:7f:24:bb:ca:
c6:4c:dd:65:99:9f:30:68:88:a1:ed:dd:99:79:87:
15:1b:2f:7c:0b:3e:df:a8:e4:a5:71:a1:55:5b:e6:
c9:43:e6:ee:b9:db:f1:c5:01:84:63:66:6f:b0:7d:
da:ef:2b:9b:74:77:a1:d4:57:95:92:92:96:9a:92:
e4:18:ef:e6:1e:80:c6:75:06:2b:27:7c:7f:f0:cd:
96:97:69:0a:81:29:06:1f:e4:86:4d:46:1c:bd:13:
75:22:26:46:a6:9a:40:84:88:6a:fc:d3:20:02:27:
54:cf:bb:1a:1d:3d:2e:22:88:86:7a:df:28:65:86:
9c:02:19:5d:3a:91:39:33:4a:4c:e6:27:34:70:32:
5a:94:54:a2:f0:9b:84:d0:e5:f0:60:52:84:e7:82:
53:db:73:72:e6:3e:dd:fd:8f:bf:3c:15:ce:82:2a:
d7:69:df:2d:c4:ff:03:19:85:7b:a0:c6:bb:72:ce:
91:b4:29:c2:74:af:08:94:8d:5c:fd:4d:2b:4a:82:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:DB:09:AC:D1:CC:07:9C:4B:A7:2A:EE:A0:65:26:1D:EE:96:19
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/P2rbCazRzAecS6cq7qBlJh3ulhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.242.228.0/24
159.242.232.0/23
Signature Algorithm: sha256WithRSAEncryption
00:fe:6b:19:41:67:09:16:d9:3c:95:03:89:f1:fd:41:d5:09:
fd:12:13:c6:3c:4c:9c:fe:c5:09:84:fc:11:a4:2a:dd:30:45:
18:91:f3:3d:7b:ee:c8:28:1f:3c:ff:8c:c6:86:9e:b7:92:33:
be:ce:e6:25:a0:e4:bf:13:f6:62:ac:c5:07:bb:90:4f:99:96:
e7:ef:f3:67:79:ad:ba:32:6f:6a:c1:06:4f:17:a3:31:e2:4a:
bf:ea:a1:4a:14:3d:12:c1:db:be:9e:4d:b6:1c:c9:dd:00:34:
b0:c0:d1:e1:45:75:4b:1b:24:57:10:03:c6:ce:1e:23:6b:ce:
3b:49:1a:57:11:e8:6c:e3:35:7c:f2:b6:78:fb:54:ee:92:23:
75:fb:b7:1b:48:eb:07:4d:36:a8:c5:17:83:ce:fc:8c:89:87:
1c:5f:9a:ef:29:66:c0:c7:56:4d:2a:ee:a5:fa:0b:2f:d3:86:
f2:15:27:42:71:21:1f:42:d6:7f:ab:1b:99:bf:aa:58:81:1a:
a4:5e:85:f7:f4:6e:61:d5:2c:d3:7a:6b:8a:8b:23:78:5d:f2:
38:87:71:e5:7e:ff:bf:ea:0d:ae:18:48:fa:7b:e4:11:c7:aa:
b1:1c:e2:21:dc:3d:a9:73:e5:61:68:a7:3e:64:9d:4f:8d:1e:
99:36:c8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:49 2025 by rpki-client