Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/PAFl-pG2JHaMz_7ipR6yMf63H8w.roa
File: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (raw, json)
Hash identifier: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=
Subject key identifier: 3C:01:65:FA:91:B6:24:76:8C:CF:FE:E2:A5:1E:B2:31:FE:B7:1F:CC
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 0194214402E4AAC16D9069A2B52DD718E68B
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/PAFl-pG2JHaMz_7ipR6yMf63H8w.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206574
IP address blocks: 185.105.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:02:e4:aa:c1:6d:90:69:a2:b5:2d:d7:18:e6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c0165fa91b624768ccffee2a51eb231feb71fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:19:6b:33:6a:33:dd:55:41:7e:f8:db:c4:
d8:4e:40:67:1f:ef:4e:62:cc:60:75:b5:dc:b5:80:
50:7b:5a:c4:d2:4f:b4:5b:41:07:97:58:66:42:d4:
77:4d:3e:4a:89:d6:1b:67:a8:2f:e4:42:b6:75:cd:
0f:24:05:4e:71:39:5d:0f:23:ad:2a:ec:6f:08:2b:
e3:47:e3:9d:d5:eb:e5:2d:78:4a:a2:bf:7a:88:90:
d4:c5:86:b4:2b:8b:77:01:44:41:99:3b:10:5c:fe:
6d:98:1f:0a:fd:8d:d9:62:0c:a6:86:e1:04:ea:6a:
d9:06:0a:eb:35:5e:7e:75:82:31:20:2f:50:de:7d:
e4:d0:b0:22:0d:60:23:13:61:83:bb:6a:f6:dc:0b:
07:2a:32:b4:db:ae:a9:74:54:f0:2f:72:05:0e:d8:
4a:2f:a6:8b:eb:78:84:72:2d:c9:2b:5f:86:47:d4:
53:9a:81:9a:e7:d8:28:ce:47:e6:bb:14:6a:89:6f:
da:5c:01:00:52:cd:12:af:e5:55:db:36:63:fe:d1:
db:db:63:1b:bb:0e:5d:99:26:b3:d7:16:88:24:67:
10:f5:70:7f:37:9f:37:13:f9:01:a5:49:6c:be:34:
a1:36:79:7d:de:5d:a8:38:c8:e1:9a:d1:df:55:39:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:01:65:FA:91:B6:24:76:8C:CF:FE:E2:A5:1E:B2:31:FE:B7:1F:CC
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/PAFl-pG2JHaMz_7ipR6yMf63H8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:21:4c:34:4f:b8:b7:d9:06:da:a6:dd:09:0e:f2:3b:94:c4:
9c:4e:64:c1:36:b8:a7:04:ae:dc:ab:ea:e5:e4:ea:29:34:14:
62:66:a4:01:62:79:a3:ce:c5:3b:18:33:14:ba:62:e3:4c:f0:
91:5e:0f:b3:29:24:54:6c:3a:9d:b8:d2:7d:6f:18:13:3a:7e:
cb:6e:35:00:f6:a1:47:8d:cd:22:f7:e7:8c:a1:c9:51:24:29:
f6:7b:94:ec:c5:fa:88:3c:b4:ff:4a:64:01:33:ad:9b:0b:42:
c8:1c:b2:c3:eb:63:f5:ca:b0:2e:a9:06:bc:e5:37:91:98:5d:
ca:46:85:dc:ae:3e:ec:78:23:cf:5d:62:01:00:1d:71:ac:90:
a8:b5:81:d0:03:0b:e7:16:b5:a1:25:0b:13:00:67:a6:be:4b:
0c:55:68:4b:3e:eb:99:9b:75:72:b7:b2:80:d0:ad:6e:2b:22:
22:9c:4f:17:4b:fc:45:e6:78:5b:42:0b:06:be:76:a9:57:45:
69:ff:5e:60:cf:21:a6:ca:17:f6:79:cc:c2:72:b0:88:95:9e:
5f:09:b5:28:24:9b:35:b4:e7:b0:e8:73:62:21:56:b4:d1:f3:
d7:a9:d5:82:44:3c:59:8b:d8:a1:48:c8:0c:44:68:42:e0:fd:
7d:74:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:52 2025 by rpki-client