Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/pkwPVsxSdYAUrwekUiCsSfEtBsc.roa
File: pkwPVsxSdYAUrwekUiCsSfEtBsc.roa (raw, json)
Hash identifier: VAoyCYorOSAEGcSFlO8mKuQLxbXXAWAO6ekhAMd8Fps=
Subject key identifier: A6:4C:0F:56:CC:52:75:80:14:AF:07:A4:52:20:AC:49:F1:2D:06:C7
Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial: 019424B3A8894E29CBB8593C77C7E559E01E
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/pkwPVsxSdYAUrwekUiCsSfEtBsc.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204105
IP address blocks: 95.215.59.0/24 maxlen: 24
2a13:c640::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a8:89:4e:29:cb:b8:59:3c:77:c7:e5:59:e0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a64c0f56cc52758014af07a45220ac49f12d06c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:66:56:32:31:66:17:9c:58:d2:e1:79:1b:
93:d0:af:bd:51:5c:84:41:54:f8:38:2c:97:a7:d2:
01:8b:f8:b5:72:6f:f0:ce:17:9f:f9:9d:35:3d:a0:
8f:52:ad:fe:b9:6a:a4:2a:45:4c:ef:22:c6:fc:9e:
8f:d4:71:29:ed:63:0c:2e:9a:f1:ba:2c:80:17:de:
a3:70:d6:26:8b:1a:5b:d7:06:0f:16:4a:e6:cc:10:
6e:87:19:04:a4:71:f1:39:fa:b0:e0:45:03:a0:fa:
e7:2f:95:7d:35:3b:8f:ca:43:8c:cb:f9:e2:40:e1:
97:75:fb:0d:58:5d:a5:7d:ca:c7:5f:d0:f7:19:c0:
ed:81:ab:4f:4f:10:8e:ff:f0:86:c7:66:2a:2a:4d:
53:73:a4:53:4c:23:31:be:e8:8a:36:b6:fb:45:22:
e5:88:41:70:fc:f1:7f:24:5f:68:2e:c9:a6:ee:5f:
52:fa:5f:12:b8:c2:8c:98:2f:82:e4:a8:49:12:67:
d1:0b:c9:57:f0:43:97:78:a2:0f:70:6b:01:70:85:
be:73:f7:62:ce:dc:ec:69:4d:09:bc:3a:53:a6:5c:
01:32:e9:6e:59:04:48:1d:68:68:d9:31:c9:70:72:
6f:b7:32:46:49:a5:c2:d1:f4:d6:7a:de:19:c7:b7:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:0F:56:CC:52:75:80:14:AF:07:A4:52:20:AC:49:F1:2D:06:C7
X509v3 Authority Key Identifier:
keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/pkwPVsxSdYAUrwekUiCsSfEtBsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.59.0/24
IPv6:
2a13:c640::/30
Signature Algorithm: sha256WithRSAEncryption
85:3a:93:22:dd:73:54:a1:cf:50:8e:55:3d:37:26:ef:e2:c3:
3e:2f:4b:8c:e5:f3:39:45:4a:d0:7c:af:28:bc:f0:4c:fa:0f:
9e:58:7b:b7:82:66:3a:36:8d:17:b7:75:c0:b7:85:cd:9f:52:
0f:e8:12:73:cf:df:f1:ed:44:5a:4a:ec:b6:15:e5:5c:37:53:
c1:49:0f:81:8f:56:84:fb:13:28:6f:99:a6:72:05:5b:98:fd:
ae:b0:e4:ac:3a:ae:da:7a:bf:b4:33:c6:26:ed:95:e5:02:5f:
15:0b:71:e3:48:5b:37:09:4b:43:55:2d:a8:9d:42:a2:56:ca:
54:e3:d3:78:2a:74:b1:e5:68:ba:fb:2a:66:2f:f2:eb:88:13:
9e:59:4a:e7:9c:34:ed:10:a6:51:90:1f:f2:ee:bb:6b:86:08:
ce:a3:cb:61:b3:2f:45:76:37:a8:ef:b9:03:45:16:5a:33:0f:
0a:7d:a2:11:fc:a3:30:85:8d:2d:d5:1a:bc:65:e6:9c:41:90:
12:7d:b0:81:f1:76:68:ff:a5:bd:26:51:8e:da:94:78:79:9d:
70:0d:03:1a:ab:70:f1:50:5d:8d:aa:0e:1d:12:a2:c6:97:36:
25:65:f7:a7:9e:26:d5:b2:9f:47:b2:4c:70:b3:a6:3b:32:ec:
84:7d:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:10 2025 by rpki-client