Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa
File: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (raw, json)
Hash identifier: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=
Subject key identifier: 3D:86:70:FB:A9:CE:D0:4F:9F:0A:E4:64:ED:FE:BE:62:D0:8E:D3:11
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 019422FC2081F3840ACF3FE575B6AD5F07A2
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48175
IP address blocks: 185.254.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:20:81:f3:84:0a:cf:3f:e5:75:b6:ad:5f:07:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d8670fba9ced04f9f0ae464edfebe62d08ed311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:9c:25:70:13:be:f7:9a:58:66:f1:15:a2:
ae:c8:4c:5c:2d:45:ca:51:72:94:1a:60:fe:d8:5b:
6f:b2:6e:ff:13:7a:40:d2:ad:7d:3b:e4:31:77:b2:
dc:7d:c4:fd:3f:f1:52:0c:07:48:b8:55:0d:b1:33:
48:b4:b9:e1:fc:e0:64:08:c2:c8:10:89:0c:04:92:
9c:c5:b9:b5:dd:a3:b1:10:4b:77:85:4d:4e:0b:03:
3c:aa:62:14:18:83:96:ed:d6:06:a1:14:11:b2:25:
6b:03:d3:95:01:7d:10:d4:38:73:8e:3e:a5:cf:e2:
54:5a:7b:4d:99:24:98:bd:55:5c:c1:a0:a5:52:a4:
1c:89:20:87:8e:62:58:10:6d:7f:1c:77:e9:eb:bc:
05:82:3d:e0:fd:d8:63:8a:ee:14:fc:e4:ea:73:4f:
28:f2:45:c7:59:dc:c0:c2:f7:00:5d:bc:15:a0:2f:
49:7b:74:c3:22:bf:1c:e1:0a:91:92:e6:35:2a:b4:
1d:d9:04:11:05:2f:6d:89:a0:9c:b9:66:c8:53:80:
12:73:fa:67:ac:79:3b:da:11:37:27:af:f1:a6:4c:
fa:3b:1f:ab:13:cf:8b:10:f3:b4:d8:08:c8:83:ae:
ac:15:d0:f7:18:9e:4e:a9:5d:94:e0:02:56:71:c1:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:86:70:FB:A9:CE:D0:4F:9F:0A:E4:64:ED:FE:BE:62:D0:8E:D3:11
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:84:e1:f7:a6:17:f5:4b:69:93:19:ee:71:b9:58:b3:36:b3:
be:98:ff:5b:e4:1b:d5:06:2e:33:b3:7c:67:3f:3f:44:f0:0b:
fc:82:17:44:57:33:e4:44:e6:e8:23:e1:1f:67:d5:53:89:7f:
d5:5e:68:e8:44:cc:c8:bd:ae:c8:d5:c9:84:ee:74:80:58:f9:
6f:07:0f:98:33:0a:7d:f9:3d:8b:f3:a8:9c:85:91:18:54:46:
f0:4a:71:9c:27:c2:2a:7e:91:19:a0:cd:a2:95:30:f9:4b:32:
61:f6:9b:fd:c3:ad:dd:49:e2:c5:b5:43:95:6e:26:ca:0f:5a:
51:49:c1:87:56:67:f3:7e:25:61:d7:b5:34:b2:09:37:b4:02:
10:6b:df:18:c9:ae:52:9e:f6:2c:b3:8f:93:ab:28:69:3e:8c:
da:df:db:a3:46:0f:9b:ac:8c:3e:d1:8f:ef:6f:04:cc:85:6f:
a0:ca:50:cb:f5:8c:a5:17:33:f1:d6:03:f1:f5:4e:dc:6b:7a:
b0:7e:75:ef:d9:ee:8f:99:65:b7:74:c2:0f:8c:2d:80:73:f6:
38:e8:4e:7d:cd:0b:b8:71:70:7d:31:56:a0:7f:47:e7:d0:ce:
29:d5:6c:4d:36:6b:e3:9d:b4:f7:61:79:5b:d4:cd:78:38:4c:
63:7a:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:20 2025 by rpki-client