Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/PCU_z8etHMahQn2RAV03QXEYQNY.roa
File: PCU_z8etHMahQn2RAV03QXEYQNY.roa (raw, json)
Hash identifier: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=
Subject key identifier: 3C:25:3F:CF:C7:AD:1C:C6:A1:42:7D:91:01:5D:37:41:71:18:40:D6
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 0194221FA225047D71A5A82AF310052E2BBD
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/PCU_z8etHMahQn2RAV03QXEYQNY.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197214
IP address blocks: 87.243.65.0/24 maxlen: 24
87.243.66.0/24 maxlen: 24
87.243.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:25:04:7d:71:a5:a8:2a:f3:10:05:2e:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c253fcfc7ad1cc6a1427d91015d3741711840d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:52:66:45:09:29:fa:f2:59:65:67:e9:79:
9d:e9:b7:81:98:4a:5e:1c:c8:4e:34:19:31:27:96:
10:10:60:5d:85:96:31:66:45:7d:9a:42:41:c8:50:
5d:ef:6c:16:aa:1a:6b:94:19:0b:f2:53:94:cc:0e:
dd:be:f0:a2:bc:7e:c9:89:81:f4:14:0d:25:b8:b2:
50:08:76:57:7f:36:2e:f6:b7:2f:22:7c:72:dd:f1:
10:31:07:86:39:09:2b:81:69:cb:bb:76:13:ad:1e:
c3:3a:eb:79:ac:7f:ae:87:14:66:ca:9a:a5:53:53:
46:ab:b4:ab:57:d7:8c:21:36:ae:68:44:69:e4:06:
34:a5:67:4a:da:b5:6b:7f:25:bb:95:a7:3e:cc:fe:
c6:66:c2:2c:4d:ff:ba:d8:34:b3:88:3f:82:9f:89:
a5:42:4b:5a:00:f1:39:34:60:99:65:7e:39:e8:c4:
5c:ff:65:8d:b0:c1:e6:8d:ba:d9:fd:10:e6:2a:8a:
6c:44:20:12:96:cd:fc:65:ad:85:1b:eb:fd:b1:e2:
9f:e5:ba:f6:a7:3b:e5:e4:8b:7c:df:7e:a4:e2:24:
46:e2:dd:39:19:17:7d:a8:44:61:df:9f:32:c2:56:
00:f5:34:c2:9c:e9:51:c9:c7:c5:d0:37:a7:86:f4:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:3F:CF:C7:AD:1C:C6:A1:42:7D:91:01:5D:37:41:71:18:40:D6
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/PCU_z8etHMahQn2RAV03QXEYQNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.243.65.0-87.243.67.255
Signature Algorithm: sha256WithRSAEncryption
49:3b:0a:89:f7:d5:a2:aa:d4:4b:af:ad:f4:13:0c:6b:88:39:
71:85:64:42:55:a9:04:b8:34:3b:30:92:a7:93:77:4a:91:94:
c4:2d:18:35:5c:8e:93:38:c8:e6:67:6d:ea:97:19:42:43:c3:
63:99:9f:d8:e4:31:28:a2:ef:eb:ab:39:5f:86:8a:e0:44:d5:
d7:30:b8:32:c1:6a:eb:08:52:b7:ba:9c:6c:1f:37:85:5d:a4:
cc:e8:23:d8:7c:b4:05:88:e8:f6:6f:f8:41:a0:ae:1a:8e:09:
09:f7:5f:89:2d:e2:95:3f:32:5e:c8:d5:dd:0d:88:60:cd:72:
17:f9:6a:da:fa:f8:73:fe:65:3a:bf:f4:c5:fa:0a:ce:2d:19:
74:3d:51:29:92:11:ec:a4:b5:8d:00:09:bc:31:6f:61:7b:46:
72:42:60:12:72:13:6a:bf:c7:1d:e3:76:d1:d6:09:f0:0b:70:
75:15:c1:10:43:bb:7a:56:b3:00:fd:f8:04:93:60:9c:e8:c9:
eb:7a:63:90:c5:16:1a:48:bd:f7:0b:e0:09:0c:0f:64:b5:d3:
d6:64:d3:c4:01:8d:dd:c5:26:4d:6d:d5:62:91:7d:32:3f:08:
58:6d:6d:b7:3b:93:7d:3e:91:77:d8:ae:ad:83:04:63:fd:39:
f5:bd:60:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:34 2025 by rpki-client