Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pztwDJPA9-brolVFuRj1WfMXyXw.roa
File: pztwDJPA9-brolVFuRj1WfMXyXw.roa (raw, json)
Hash identifier: QNr9WyMLMw+68dNh9HUYjlQvz/J2Yrr19FO9dIBQEX8=
Subject key identifier: A7:3B:70:0C:93:C0:F7:E6:EB:A2:55:45:B9:18:F5:59:F3:17:C9:7C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F884D05ED9C48A962F8FB54A6B376
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pztwDJPA9-brolVFuRj1WfMXyXw.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3229
IP address blocks: 93.170.27.0/24 maxlen: 24
95.47.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:88:4d:05:ed:9c:48:a9:62:f8:fb:54:a6:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73b700c93c0f7e6eba25545b918f559f317c97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:06:83:cd:57:fe:5a:76:fd:b0:86:2a:14:
65:4b:cc:e8:c4:81:5c:57:ee:c2:1c:08:65:ba:68:
9d:cf:90:89:35:40:d2:8a:8c:1f:ca:6b:c3:9c:da:
0f:38:3f:e8:63:da:de:b2:12:3b:95:42:38:44:3d:
be:eb:18:29:a1:ae:88:3f:13:9c:bf:59:ac:18:04:
30:49:81:a0:1f:ef:6f:aa:e8:e7:bc:15:df:87:c0:
cc:5a:f5:36:2f:94:32:3f:1e:37:5b:a1:d5:06:cb:
51:d7:23:2d:cf:0d:bc:d1:c0:b2:60:60:72:77:1b:
fa:e8:8d:20:82:c7:eb:87:95:83:9f:9e:5e:76:a8:
18:7e:51:60:b9:d6:7e:8b:ab:76:7a:00:86:f6:98:
00:c6:81:ff:62:39:40:22:4e:6d:e0:36:ad:04:2a:
d7:ff:a6:0a:f7:d6:71:26:1f:68:c6:36:0a:1a:62:
89:f3:fa:59:dd:03:97:02:fe:d9:21:83:5e:af:5f:
3b:5f:92:c1:61:79:28:45:6d:2c:ea:72:8a:30:88:
72:0d:3d:7d:20:ee:45:11:d5:a7:9f:9c:6c:cc:2f:
80:76:0d:48:82:a3:d7:91:a1:42:8b:e3:18:ec:ca:
95:b6:1d:cd:9f:11:97:88:3b:62:5f:66:23:70:b3:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:70:0C:93:C0:F7:E6:EB:A2:55:45:B9:18:F5:59:F3:17:C9:7C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pztwDJPA9-brolVFuRj1WfMXyXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.27.0/24
95.47.252.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9a:cf:e9:b2:d7:05:a8:af:f1:52:fa:a1:56:ab:4b:aa:5e:
b9:c0:1f:b2:62:c2:b1:52:7c:4f:e8:e2:63:f2:03:3a:2a:59:
bd:8f:1d:49:2b:46:09:61:ac:59:58:c6:f6:7b:6b:2d:3a:cc:
55:e7:a5:fd:5d:d8:58:37:04:d6:14:5b:be:ae:d4:72:1f:31:
b6:13:5b:26:ca:a7:65:72:21:c0:28:90:26:f7:a9:cd:6c:06:
46:3c:9c:ff:45:73:c4:ee:b6:ea:85:0e:89:11:fe:e0:14:72:
8d:94:90:69:e7:8c:7e:29:a5:7c:2c:83:16:f3:36:58:22:4e:
22:ef:20:12:4e:5d:74:fc:24:c0:d7:8f:77:d2:ae:0c:b7:40:
7b:e6:6d:d9:d9:41:4a:38:cd:98:4f:52:50:60:58:26:5b:67:
ff:a6:ac:45:45:cb:10:ce:5c:00:ff:d3:d5:b2:d5:9e:8e:c5:
94:6e:55:51:01:ad:bf:ea:5d:1d:dd:c4:e0:a4:a3:e8:90:80:
4a:6c:59:71:81:f0:21:e2:00:97:33:64:35:db:c1:f4:3d:bf:
4d:b4:60:ae:a0:99:97:95:3a:9b:51:f0:1d:a3:ca:ab:48:c1:
de:46:19:98:e6:93:2d:0a:db:a8:ed:7c:a3:cd:36:3c:3d:ad:
4f:02:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:34 2025 by rpki-client