Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PAH7wZnkHnydWnhmCCYS4kOmPCw.roa
File: PAH7wZnkHnydWnhmCCYS4kOmPCw.roa (raw, json)
Hash identifier: dUouBvfbF0gPlGajMzoGbZEmFtCcxLterZnQbTSGFj4=
Subject key identifier: 3C:01:FB:C1:99:E4:1E:7C:9D:5A:78:66:08:26:12:E2:43:A6:3C:2C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274840738CB72A5BA5586692B1333F85
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PAH7wZnkHnydWnhmCCYS4kOmPCw.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56989
IP address blocks: 91.109.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:40:73:8c:b7:2a:5b:a5:58:66:92:b1:33:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c01fbc199e41e7c9d5a7866082612e243a63c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:45:c2:6f:6f:7c:02:d5:51:83:15:50:39:
16:93:fb:2f:72:eb:1f:ef:2c:55:90:5f:dc:99:54:
00:57:fd:8e:54:57:37:53:15:65:f4:76:fc:03:55:
41:4f:a2:71:52:2f:c4:84:3f:d5:e3:c1:68:3c:4b:
75:37:ed:0a:49:f9:7b:80:f6:14:09:ae:97:8c:d7:
02:28:e0:07:2a:2f:09:8e:49:34:f8:48:f1:95:cf:
4c:04:fa:4c:7b:78:c4:56:00:70:34:1b:9c:48:98:
60:1a:4a:b2:ab:05:cf:5c:44:3f:1f:03:b9:bc:52:
73:ed:02:65:63:74:8a:8f:32:93:1c:b0:c1:ba:73:
a0:13:99:7d:23:6c:1d:c6:f4:7a:f2:5e:23:67:72:
2b:11:e8:ab:c6:e7:b9:1b:b2:07:4d:7a:10:49:d0:
20:cd:d8:80:15:81:26:c8:b5:30:c7:ef:9c:b4:ae:
60:ab:78:b0:e0:4b:c0:7c:6a:a0:b0:46:0f:12:0a:
c3:1a:c4:ec:9f:9f:80:94:54:e3:81:b4:c2:53:0e:
1a:8b:83:83:5c:f6:45:52:63:fe:12:9c:6e:1d:8b:
a4:30:c5:7f:97:d0:af:81:cb:f7:9a:04:75:88:85:
89:55:b5:c6:c2:f8:0a:2a:23:ec:18:53:0a:5d:3d:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:01:FB:C1:99:E4:1E:7C:9D:5A:78:66:08:26:12:E2:43:A6:3C:2C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PAH7wZnkHnydWnhmCCYS4kOmPCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.160.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:18:fa:ca:32:bf:56:1e:94:c6:be:8a:c3:3d:bd:19:24:d9:
e0:2a:18:07:b2:d0:8f:18:45:50:2a:48:21:2d:56:ce:37:1d:
20:5c:f7:eb:fb:ca:d3:27:85:84:84:f2:51:d0:b8:f0:c2:3a:
fc:18:ee:58:d7:e0:e7:d3:5f:c8:f0:dd:45:1b:bf:50:f3:fd:
96:47:9c:b7:13:a6:d3:34:2a:e7:95:ba:ee:79:0c:a8:a3:c6:
10:1b:d1:a0:5e:a7:02:36:b0:d2:13:f6:6c:6f:1d:27:61:ab:
fd:50:6f:3c:69:c3:5c:03:e3:c6:e8:ca:cd:04:ae:dc:28:76:
43:ee:25:32:32:ba:0d:ed:7b:29:97:53:66:97:4c:2e:e0:42:
10:d3:c1:3c:6c:53:a9:c7:fe:cb:05:dc:53:50:2e:83:a2:fe:
5c:b3:2b:8e:02:69:e4:e0:48:dc:ca:c5:b2:c3:7e:af:d4:22:
54:8b:c8:50:e5:b7:76:fa:a3:4b:8a:e2:c0:68:32:a5:f7:3d:
6c:43:bb:7f:9d:8d:ef:f7:03:0a:4e:1f:6b:89:2e:9c:f5:ae:
13:c4:80:94:b2:c9:12:b7:9a:c9:39:6d:ef:4a:ef:4c:d6:6e:
02:82:0d:1d:42:8f:86:8c:5f:77:30:ff:ff:df:7e:48:dd:61:
72:5b:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:37 2025 by rpki-client