Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/Pgq22PofDYngFneIOCYn3YcILuE.roa
File: Pgq22PofDYngFneIOCYn3YcILuE.roa (raw, json)
Hash identifier: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=
Subject key identifier: 3E:0A:B6:D8:FA:1F:0D:89:E0:16:77:88:38:26:27:DD:87:08:2E:E1
Certificate issuer: /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial: 019422FC3AC402CD979103BE5E083CB72808
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/Pgq22PofDYngFneIOCYn3YcILuE.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 185.228.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3a:c4:02:cd:97:91:03:be:5e:08:3c:b7:28:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e0ab6d8fa1f0d89e0167788382627dd87082ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:ee:2c:71:7d:6f:cd:62:ca:4c:be:f5:0e:
ec:a9:43:2c:a0:b2:7d:33:c1:81:61:3b:74:b0:57:
ee:9f:a4:3c:55:9e:34:48:4c:ff:31:ff:17:16:bf:
f0:10:21:ae:14:57:3c:47:67:62:f4:5b:69:a9:a1:
c0:2f:6d:5f:d5:2a:48:a9:cb:bd:1f:ec:f6:41:39:
36:85:f8:5b:11:21:09:eb:bc:7d:0a:31:96:c1:1e:
3c:17:d2:89:10:32:b5:a9:89:d1:ad:ab:5c:ff:e1:
05:27:e8:c5:16:c0:a0:d5:81:ae:e3:ba:c6:c3:c8:
82:79:10:ca:63:9b:85:a6:c0:54:2f:05:bc:08:89:
da:44:f6:72:70:3d:89:c3:61:22:4e:76:bc:aa:00:
7d:5b:d3:91:b2:79:4c:a4:98:8a:5a:e1:8e:4c:2b:
03:cc:f4:5a:f8:35:82:d3:c7:09:d1:9c:33:34:65:
b6:19:e7:5a:3e:bf:ae:60:20:f4:48:23:10:92:2d:
18:e0:13:09:f1:6b:c7:bb:72:dc:b9:3a:8b:af:35:
0b:e6:9f:ac:84:13:d5:cb:0f:e5:b2:51:4f:7e:a7:
41:f9:19:68:ed:12:c6:90:b2:13:65:20:21:a4:59:
8f:5d:7a:aa:5d:da:e3:62:0e:b0:92:3e:63:c7:d5:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0A:B6:D8:FA:1F:0D:89:E0:16:77:88:38:26:27:DD:87:08:2E:E1
X509v3 Authority Key Identifier:
keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/Pgq22PofDYngFneIOCYn3YcILuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.36.0/22
Signature Algorithm: sha256WithRSAEncryption
26:32:a8:62:7e:fd:eb:c1:91:94:06:a6:ee:b5:69:93:c9:8c:
56:21:04:69:98:63:8a:d5:20:17:ed:6b:47:75:9b:f5:39:d2:
26:d7:fc:e1:e4:f9:c4:f5:ea:e5:54:4b:c8:7d:e4:1b:45:bc:
c1:8d:8f:9e:13:74:56:10:d6:82:e3:a4:37:73:bb:ab:fb:15:
23:8a:c2:65:b7:5d:ad:47:97:db:a3:41:10:06:50:7f:ff:d4:
45:60:41:ca:cc:dc:51:d3:86:4c:f8:78:f8:a1:4e:a9:60:65:
ab:89:04:4f:71:28:6b:fb:a6:42:97:0e:2e:3b:9d:1d:9b:25:
51:4b:c8:c9:50:eb:33:c2:89:7e:83:57:cb:e6:32:85:a8:f8:
ec:49:70:7e:5c:44:65:ae:d3:85:f1:46:6d:c0:c8:33:f9:20:
31:76:3c:43:ca:e0:5a:b2:01:cf:23:02:86:94:59:b4:41:f8:
bd:b9:98:11:77:dc:33:5d:d8:d9:8a:b1:89:d1:6c:7e:34:99:
be:23:46:ed:0a:2c:5c:cd:27:47:e3:be:48:bb:00:28:ae:37:
10:62:86:94:59:75:ab:fc:e5:a5:e0:94:a5:46:13:1b:76:e3:
50:3c:3a:68:b4:89:84:ef:00:2a:5d:97:61:2e:01:a7:b4:1b:
1b:cb:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:23 2025 by rpki-client