Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/PU6eIaQAT04mo5hfRBPgvjrkKSc.roa
File: PU6eIaQAT04mo5hfRBPgvjrkKSc.roa (raw, json)
Hash identifier: h/0ZW64yeCr4Lq821NrIJo1U+WyTyemXQIsvvX/3Mg4=
Subject key identifier: 3D:4E:9E:21:A4:00:4F:4E:26:A3:98:5F:44:13:E0:BE:3A:E4:29:27
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194BE4CB8239F324FF49FCCF7D030DCA2A1
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/PU6eIaQAT04mo5hfRBPgvjrkKSc.roa
Signing time: Fri 31 Jan 2025 21:38:06 +0000
ROA not before: Fri 31 Jan 2025 21:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 87.229.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:be:4c:b8:23:9f:32:4f:f4:9f:cc:f7:d0:30:dc:a2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 31 21:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d4e9e21a4004f4e26a3985f4413e0be3ae42927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:37:84:c4:6b:d0:21:6c:4b:00:82:57:a0:
eb:95:6b:e2:f6:16:e8:ba:e6:91:65:de:a8:69:69:
96:1d:31:cf:16:1e:d3:e1:74:ee:25:c7:03:0b:ab:
34:21:33:32:76:1e:7a:a0:71:7f:c0:30:5d:ce:81:
05:42:0c:2a:55:f2:a5:eb:63:d2:18:e7:6b:2b:cf:
35:71:d7:cd:36:89:9c:16:4f:55:14:b9:79:e6:5a:
20:dd:e9:07:d5:05:61:a8:d5:2f:09:01:b1:5e:11:
bb:3a:ed:89:1b:4d:9f:0d:cf:fe:28:eb:ff:c6:d3:
b3:1d:88:a5:77:89:45:10:d1:a2:a7:c3:b8:41:1e:
fe:40:e4:44:b3:ca:af:46:4f:96:b7:f0:cf:07:27:
5b:97:5f:8b:63:4f:ce:af:a4:24:bb:1c:e2:e3:75:
b9:80:e5:e8:9d:bb:4c:59:f7:25:54:b4:36:a5:bb:
53:1c:5d:d1:31:1a:aa:25:13:d1:21:0f:a7:de:8b:
27:9c:f9:6d:0f:b3:3e:15:0c:03:28:0a:b3:c8:25:
fa:40:45:ba:9c:ef:54:22:27:ca:d6:79:bf:f8:59:
71:dd:d3:0f:06:11:46:55:5a:c7:e0:42:c2:7f:75:
2c:58:35:b2:32:59:9e:ec:80:b5:6d:f4:a0:10:a3:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:9E:21:A4:00:4F:4E:26:A3:98:5F:44:13:E0:BE:3A:E4:29:27
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/PU6eIaQAT04mo5hfRBPgvjrkKSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.82.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c8:8d:7d:7d:56:78:22:18:20:65:91:53:1b:eb:75:1a:14:
89:f7:6e:c9:fc:48:2a:8c:a7:03:53:1e:4b:49:43:94:03:2b:
3f:e9:00:27:09:5e:92:ac:86:9d:6a:67:62:8b:9e:37:72:79:
53:b7:ac:25:23:65:a1:f8:76:0b:50:e2:38:65:56:36:f3:48:
f8:e2:c8:97:19:d2:b7:b4:16:a7:bb:9b:ec:70:0f:f8:3b:05:
ec:dd:2f:76:ec:87:73:88:ed:00:64:26:5c:c8:7a:2f:c1:be:
f0:e8:84:6b:59:24:39:e1:7b:35:49:13:06:67:a2:3c:6c:a0:
d4:53:b3:ef:e3:f4:0e:1d:58:7d:3e:4d:9a:01:99:83:a6:6e:
78:6e:00:95:b8:17:d0:be:d6:36:7c:3b:8c:64:76:19:27:b8:
4c:2e:cb:d1:e2:62:c0:a7:a9:b5:55:c5:35:9c:e7:d7:ca:0f:
8b:08:50:59:f2:b5:e7:63:65:aa:7f:44:6c:53:ee:b3:c1:23:
67:b5:28:cd:1b:1a:38:f3:17:52:59:12:31:24:72:04:43:41:
39:a2:ca:bd:5e:5b:df:9b:22:72:39:85:43:25:63:12:24:8c:
cc:a7:46:f7:14:72:53:0c:d3:87:f8:74:05:b8:96:8b:24:db:
66:26:6d:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS+TLgjnzJP9J/M99Aw3KKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMTMxMjEzODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDRlOWUyMWE0MDA0ZjRlMjZhMzk4NWY0NDEzZTBiZTNhZTQyOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws83hMRr0CFsSwCCV6DrlWvi9hbo
uuaRZd6oaWmWHTHPFh7T4XTuJccDC6s0ITMydh56oHF/wDBdzoEFQgwqVfKl62PS
GOdrK881cdfNNomcFk9VFLl55log3ekH1QVhqNUvCQGxXhG7Ou2JG02fDc/+KOv/
xtOzHYild4lFENGip8O4QR7+QOREs8qvRk+Wt/DPBydbl1+LY0/Or6Qkuxzi43W5
gOXonbtMWfclVLQ2pbtTHF3RMRqqJRPRIQ+n3osnnPltD7M+FQwDKAqzyCX6QEW6
nO9UIifK1nm/+Flx3dMPBhFGVVrH4ELCf3UsWDWyMlme7IC1bfSgEKMrRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1OniGkAE9OJqOYX0QT4L465CknMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvUFU2ZUlhUUFUMDRtbzVoZlJCUGd2anJrS1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VSMA0G
CSqGSIb3DQEBCwUAA4IBAQCXyI19fVZ4IhggZZFTG+t1GhSJ927J/EgqjKcDUx5L
SUOUAys/6QAnCV6SrIadamdii543cnlTt6wlI2Wh+HYLUOI4ZVY280j44siXGdK3
tBanu5vscA/4OwXs3S927IdziO0AZCZcyHovwb7w6IRrWSQ54Xs1SRMGZ6I8bKDU
U7Pv4/QOHVh9Pk2aAZmDpm54bgCVuBfQvtY2fDuMZHYZJ7hMLsvR4mLAp6m1VcU1
nOfXyg+LCFBZ8rXnY2Wqf0RsU+6zwSNntSjNGxo48xdSWRIxJHIEQ0E5osq9Xlvf
myJyOYVDJWMSJIzMp0b3FHJTDNOH+HQFuJaLJNtmJm3w
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:58 2025 by rpki-client