Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/PK8tn7aA21YnBGkaW8vsR--3SMI.roa
File: PK8tn7aA21YnBGkaW8vsR--3SMI.roa (raw, json)
Hash identifier: 6hKxTYUjKrR9kNKZnNUnOhA7Ud/oCfYnMkf05c+xzZ4=
Subject key identifier: 3C:AF:2D:9F:B6:80:DB:56:27:04:69:1A:5B:CB:EC:47:EF:B7:48:C2
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BFB555DD63563E58CF2279DCE650F
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/PK8tn7aA21YnBGkaW8vsR--3SMI.roa
Signing time: Thu 02 Jan 2025 09:49:58 +0000
ROA not before: Thu 02 Jan 2025 09:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209563
IP address blocks: 85.202.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fb:55:5d:d6:35:63:e5:8c:f2:27:9d:ce:65:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3caf2d9fb680db562704691a5bcbec47efb748c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:15:1c:8e:db:2c:5b:7e:12:d9:c4:25:ef:
eb:3f:54:34:48:f7:ad:c1:40:83:ca:5d:24:0f:ed:
2d:cc:17:3d:db:5b:2a:87:0c:01:69:e6:b9:44:9d:
c5:52:9e:92:7e:d8:0e:4d:7b:49:2e:8d:5c:a1:2a:
5b:b6:3a:a8:dc:51:33:06:76:10:e2:87:5c:38:6d:
96:46:69:a3:d4:04:df:a0:ce:2c:7a:53:eb:84:c9:
c6:87:97:32:ac:0d:3f:a1:37:85:7c:6f:a0:2a:e0:
fc:4e:a1:3b:99:4d:76:4a:b6:4c:33:4b:e3:09:81:
37:8f:e1:a1:07:4e:b9:69:ad:1b:ed:f2:8b:b3:53:
85:df:57:c9:c2:13:82:9c:31:17:56:bf:fd:91:22:
32:86:70:68:cf:cc:e2:e0:4c:06:b7:95:0b:09:6d:
e7:4d:2c:2a:db:a9:c4:2c:2b:88:4f:64:7f:dd:3e:
1f:cf:c6:aa:d7:12:55:07:60:16:2f:7d:9d:6d:6a:
42:80:64:3a:25:93:b3:93:3b:d7:db:f9:47:72:bb:
db:a0:81:37:0b:21:53:a2:bc:5f:31:d4:6e:6d:e0:
6d:f9:d4:76:7b:1d:21:fe:3e:45:53:38:35:98:fc:
ab:fa:af:3f:d6:6d:3a:a1:2d:24:0f:34:2f:b8:a0:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:2D:9F:B6:80:DB:56:27:04:69:1A:5B:CB:EC:47:EF:B7:48:C2
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/PK8tn7aA21YnBGkaW8vsR--3SMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:db:8e:cb:8b:3a:a7:c3:8e:0c:c6:06:44:01:34:c8:63:b7:
c5:7f:ad:4b:74:b8:72:3c:4f:fe:ad:8b:c9:c2:02:be:f3:cb:
07:a5:b2:a4:af:1a:9a:cb:9b:cd:87:2d:87:96:a7:db:a1:ac:
14:ca:92:68:80:57:67:ff:03:26:f5:be:be:0e:6e:21:3d:74:
98:37:c2:3a:cc:68:5d:66:46:53:84:03:de:3a:95:69:47:2a:
3d:77:ed:76:62:10:44:ce:14:ec:47:00:b1:d0:4b:ff:cc:25:
56:bd:61:93:cd:06:31:58:4a:59:57:3e:0e:cd:70:fc:ff:6d:
aa:c4:cc:2c:9f:85:fd:68:ff:af:ad:f8:dc:4c:57:a5:2a:43:
d2:89:f9:cb:81:ad:8a:cb:6a:e7:e6:49:fc:26:e3:a6:8f:2c:
33:76:77:21:47:5f:af:0f:50:3a:9f:73:5d:a2:f5:8a:f7:da:
55:37:c4:d8:8f:67:c4:d6:4b:0b:0d:13:e6:f5:8d:59:95:9c:
81:73:5a:4e:07:72:99:06:94:fa:96:01:f0:23:9c:0a:fa:6d:
56:82:82:0a:3e:79:56:ee:c1:6e:2e:97:6e:b7:3c:08:ae:e2:
dc:bb:d2:0b:1f:00:e1:a2:3f:ae:92:9e:f6:db:00:7b:bc:1e:
90:d6:d2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:14 2025 by rpki-client