Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/PLGff91PpnIaKhW2uDOuQAHfxZI.roa
File: PLGff91PpnIaKhW2uDOuQAHfxZI.roa (raw, json)
Hash identifier: tVtdUbnR9K0LDd3rO9R8lG1IenCOkCUAxrqcCPMKhz8=
Subject key identifier: 3C:B1:9F:7F:DD:4F:A6:72:1A:2A:15:B6:B8:33:AE:40:01:DF:C5:92
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 019428269B14FAD9B197C8DB834A10D8B269
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/PLGff91PpnIaKhW2uDOuQAHfxZI.roa
Signing time: Thu 02 Jan 2025 17:53:26 +0000
ROA not before: Thu 02 Jan 2025 17:53:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206930
IP address blocks: 185.171.164.0/22 maxlen: 22
185.171.164.0/23 maxlen: 23
185.171.165.0/24 maxlen: 24
185.171.166.0/23 maxlen: 24
185.171.166.0/24 maxlen: 24
185.171.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:9b:14:fa:d9:b1:97:c8:db:83:4a:10:d8:b2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: Jan 2 17:53:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb19f7fdd4fa6721a2a15b6b833ae4001dfc592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:9e:6f:cf:68:f6:d5:dd:74:b9:fc:a9:13:
0c:1d:80:a0:79:24:e0:2f:99:77:56:65:65:8e:39:
5e:84:c1:68:fb:9d:73:69:ee:d7:8c:a1:0e:2d:b1:
a4:79:5f:08:7d:90:61:98:8c:18:56:ec:53:ee:e2:
05:1c:fd:53:49:bf:04:13:08:bc:39:44:29:c7:bd:
5b:35:ae:43:5a:4d:41:20:7d:60:e2:91:53:e8:10:
ff:7f:ad:18:f2:09:09:21:96:fe:73:26:49:e3:8e:
54:7c:0f:77:ad:61:5c:48:fb:ef:87:ec:bf:08:e8:
01:11:4a:75:47:eb:7d:ea:f4:e9:c5:a6:3b:0c:04:
70:8f:e8:32:19:46:ed:97:51:b7:00:93:9c:9a:98:
90:27:8a:8e:6f:00:99:01:e8:f8:00:2b:81:b0:3a:
ae:c8:7f:4a:c0:65:5f:4d:57:6b:0f:03:59:85:6a:
67:30:a8:11:be:70:25:5a:e0:99:91:0d:2c:85:92:
1f:a2:bb:6c:17:30:e2:72:24:57:c1:1a:f7:43:9f:
a5:a8:56:b2:2a:ec:f0:b9:64:65:9a:6b:bc:65:e5:
fb:7a:dd:d9:e0:0c:c6:4d:ec:47:e0:89:81:44:fe:
dd:1e:0d:bf:93:f0:39:0f:7f:33:df:63:28:2b:6e:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:9F:7F:DD:4F:A6:72:1A:2A:15:B6:B8:33:AE:40:01:DF:C5:92
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/PLGff91PpnIaKhW2uDOuQAHfxZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c5:76:a6:0d:77:ad:e5:cb:8f:2a:6b:7c:cb:c2:ed:8b:17:
04:13:5a:0d:31:b8:d1:38:7e:80:32:23:64:05:68:a6:ad:00:
57:52:da:4b:55:d0:a3:af:6c:93:5c:49:f1:81:c1:30:3e:12:
3b:89:cd:28:9e:1a:db:bf:e0:b0:c6:ca:00:48:10:a3:f6:21:
5d:2b:e9:56:b9:1b:88:17:f4:84:bc:d8:c2:7f:34:aa:eb:3a:
b6:d9:93:4a:73:34:16:9e:81:f2:41:c5:87:84:30:d9:c6:f6:
88:cf:ae:52:4b:23:e4:54:22:80:bf:f2:86:b1:ac:1b:b8:5a:
79:62:a7:de:ef:22:5f:ce:0c:39:d9:00:75:51:d5:ee:13:b3:
aa:dc:11:8e:bb:6b:72:af:45:7f:8c:9a:08:ab:0e:ad:b0:9b:
6c:7f:88:d8:21:af:f6:7c:f4:e6:cd:f4:dc:db:68:21:fc:ef:
e2:95:00:eb:47:a1:3e:21:05:39:f9:d8:e9:c7:c1:2e:2a:41:
79:9c:84:61:84:39:ed:ea:b2:81:e7:30:7e:45:5d:d1:81:3d:
fe:ae:e3:e7:b5:e9:1a:59:52:af:83:0e:c0:05:51:7d:9c:7a:
35:30:ed:40:02:6a:b4:20:85:0d:c2:36:fa:a2:b3:08:a4:cd:
d3:77:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:56:21 2025 by rpki-client