Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa
File: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (raw, json)
Hash identifier: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=
Subject key identifier: 3C:66:19:B8:45:7F:DA:62:E2:FF:32:4D:39:BF:D0:8B:7B:60:98:54
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 0194258F711A944332ED349FA95D476432DA
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64486
IP address blocks: 2a09:d2c1:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:71:1a:94:43:32:ed:34:9f:a9:5d:47:64:32:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c6619b8457fda62e2ff324d39bfd08b7b609854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:f3:85:60:0f:1a:09:6a:70:ca:ed:7b:a2:
0e:dd:f4:b8:30:eb:45:6d:ab:62:c3:8b:1b:a7:09:
05:bd:5c:21:7a:f9:ee:16:5c:05:54:26:19:dc:99:
b7:e1:c7:25:d6:9a:6b:12:ac:96:d6:11:52:23:7e:
0e:25:21:76:b9:91:09:ca:72:7d:c5:7e:1b:69:3c:
1e:c4:f2:03:7e:66:21:42:29:af:a1:43:6a:6f:f9:
5f:7c:ec:56:62:5c:33:bb:09:5c:cc:a9:e9:7b:12:
fb:56:4f:12:c3:cf:f5:61:32:bb:bd:ea:6a:c6:58:
45:3e:9b:0a:8a:93:ea:0f:06:84:28:bb:f9:4c:88:
1c:08:5d:53:83:09:de:3d:2e:bf:96:bc:52:e6:71:
23:85:92:e0:85:1f:53:28:a0:38:9f:99:61:8e:24:
a7:2b:e6:56:0a:dd:60:35:09:7c:03:14:fb:93:c5:
04:8d:3c:0d:23:9c:43:0d:09:db:99:6d:27:6c:66:
de:18:47:3b:62:8d:59:e6:08:3b:2f:9a:9d:f0:22:
02:f0:73:fe:d0:53:52:24:9d:2b:9e:37:b0:14:0f:
09:84:d3:d4:50:1f:7a:2d:bf:f8:04:40:48:06:cc:
08:22:bb:8f:44:ea:a8:5a:ee:ca:ac:8c:17:0c:69:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:19:B8:45:7F:DA:62:E2:FF:32:4D:39:BF:D0:8B:7B:60:98:54
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:d2c1:100::/48
Signature Algorithm: sha256WithRSAEncryption
c2:ad:34:09:22:67:6c:5c:d5:c9:41:42:8a:64:eb:14:7d:ea:
81:3f:5f:c4:85:4d:e8:ec:3a:c5:80:80:64:fc:f2:ce:96:f4:
02:77:2b:7d:31:18:70:9e:b4:e6:c1:95:c0:34:5b:d7:7f:b5:
1a:e2:aa:37:80:e2:bd:46:20:a5:44:c9:71:b9:06:02:8d:a0:
eb:0a:c8:9d:1f:22:cb:4b:a5:04:65:ae:71:91:1b:9d:aa:51:
53:c5:f2:a8:88:e5:6b:d9:05:f5:da:94:10:b8:93:6d:e7:8f:
74:33:d5:74:d4:d7:4b:ac:e3:f0:42:d6:2e:83:fa:93:c6:e2:
60:b5:05:b7:68:a4:af:35:19:73:17:20:f7:40:1b:d9:bb:a1:
ed:98:5b:6f:b5:cd:ee:6d:04:ed:1f:6b:14:7c:90:6e:50:b9:
3d:27:7d:7c:8b:cb:16:c0:06:97:bf:9f:a1:9f:8f:19:72:0a:
ca:e4:ce:f9:df:2f:22:96:23:ae:49:c7:41:46:43:e3:cd:ab:
18:2c:ec:9a:26:04:bf:99:2b:b2:d2:5c:d1:57:01:43:6d:d6:
78:0f:2a:7d:20:76:0a:df:70:19:4b:58:96:73:80:1b:8c:22:
13:67:ee:16:ed:ae:da:0a:ba:b7:7d:63:2a:d2:ad:c8:58:a1:
02:44:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:56:03 2025 by rpki-client