Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/pdqJCRLiJ7NUW64tDbwue3bHfpU.roa
File: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (raw, json)
Hash identifier: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=
Subject key identifier: A5:DA:89:09:12:E2:27:B3:54:5B:AE:2D:0D:BC:2E:7B:76:C7:7E:95
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019424458EB09CFE9043E6438E04D49CAB44
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/pdqJCRLiJ7NUW64tDbwue3bHfpU.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215082
IP address blocks: 77.93.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8e:b0:9c:fe:90:43:e6:43:8e:04:d4:9c:ab:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5da890912e227b3545bae2d0dbc2e7b76c77e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b2:dd:a7:fd:7f:e8:5f:5c:fd:d3:dc:5f:58:
5d:2e:fd:60:62:45:28:7b:28:98:2d:8f:16:91:1c:
7f:84:67:bb:32:e0:70:b8:65:65:02:68:fb:e3:0d:
14:96:f0:49:7e:bf:bf:35:a1:d4:b6:ea:81:5c:6a:
e3:20:c2:a3:c0:83:28:51:9c:df:47:67:9b:c0:a4:
71:4b:34:e7:bc:90:16:a7:8a:b1:e7:f0:a3:6a:36:
b3:ca:f4:e2:d8:e3:95:94:16:b4:d0:cf:29:2d:11:
0e:0b:70:d9:5a:9c:26:d6:b5:79:e1:a7:68:8e:36:
05:1c:5a:8d:91:1d:ee:c0:3d:5f:1a:08:a7:bf:6d:
27:97:d4:a5:6e:35:9e:72:d4:a5:24:a7:6a:58:c9:
04:bf:ad:1d:2b:5c:61:c6:82:84:08:ed:a6:9b:5e:
b2:63:e1:7e:93:94:18:22:d1:3c:3a:d6:f2:4f:48:
b2:d5:d1:6e:34:f5:4e:c8:c6:fe:31:e9:b9:b8:85:
f7:4c:47:c7:fc:1e:e7:bd:ba:21:a9:4c:3b:f9:d1:
35:47:e9:6a:9b:91:70:86:d3:92:c0:12:bf:04:3f:
7b:b0:b8:f5:3c:b7:2d:be:22:4a:23:60:b2:61:b7:
ab:36:6c:bc:f4:b9:c6:3f:3a:30:c2:77:18:98:32:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:89:09:12:E2:27:B3:54:5B:AE:2D:0D:BC:2E:7B:76:C7:7E:95
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/pdqJCRLiJ7NUW64tDbwue3bHfpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.172.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:60:0f:f8:86:0e:a9:52:db:2d:8a:6b:1a:0a:77:e9:31:f3:
f9:b7:69:ad:aa:86:1c:d3:a6:98:3d:bc:5d:48:c1:c0:89:21:
3b:09:42:18:d8:36:2e:59:d2:d3:ac:02:89:11:1e:dc:e9:fc:
dc:19:80:2e:38:dc:fc:92:92:13:2d:3e:9b:80:e5:b4:54:2c:
e8:59:3a:9f:bb:94:8c:8d:24:58:61:e8:ac:58:59:39:57:17:
35:2e:9a:ce:24:97:a4:e7:c0:a2:60:54:ee:4f:bf:01:41:7e:
b2:1f:21:0a:94:99:48:e3:a7:cb:c1:3e:69:f3:e3:67:b7:bd:
21:e2:18:b8:11:ad:3f:c1:d9:bd:0f:7d:c1:74:b6:fd:ee:de:
da:64:b3:3a:19:5a:54:02:b3:66:24:9a:78:bb:e8:d4:72:2d:
b0:d8:59:4a:68:68:ff:0e:c9:fe:ac:71:a4:3f:66:12:04:95:
3d:fa:ea:df:65:35:08:c4:99:1a:50:39:7b:68:00:0f:1c:55:
36:6e:c0:c9:c6:9d:d6:41:c4:ce:53:6d:96:ff:59:97:0b:8f:
cb:ca:0d:01:f2:fc:18:84:5c:e6:5d:23:c1:d3:c0:e4:4e:34:
71:8c:b4:8b:5c:31:5a:e5:86:33:e2:c0:4d:52:d1:e0:4f:40:
b7:b9:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:11 2025 by rpki-client