Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/P1ZtH1tzePD4Vahlfq-1pK0NCVA.roa
File: P1ZtH1tzePD4Vahlfq-1pK0NCVA.roa (raw, json)
Hash identifier: MDIXhSdv2wAFzVk5mq/aOXmoZOYx14K+lncmzhb8LUk=
Subject key identifier: 3F:56:6D:1F:5B:73:78:F0:F8:55:A8:65:7E:AF:B5:A4:AD:0D:09:50
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019475B299A26BCC10F81AC0634702B32AEB
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/P1ZtH1tzePD4Vahlfq-1pK0NCVA.roa
Signing time: Fri 17 Jan 2025 19:17:06 +0000
ROA not before: Fri 17 Jan 2025 19:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 2.59.22.0/24 maxlen: 24
86.54.28.0/24 maxlen: 24
86.54.29.0/24 maxlen: 24
212.104.141.0/24 maxlen: 24
2a01:e940::/48 maxlen: 48
2a01:e943::/48 maxlen: 48
2a01:e945::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:b2:99:a2:6b:cc:10:f8:1a:c0:63:47:02:b3:2a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Jan 17 19:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f566d1f5b7378f0f855a8657eafb5a4ad0d0950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:ae:44:a5:82:3c:f2:a5:54:d9:a5:25:ba:
e3:98:d3:74:16:7c:5d:41:91:6c:a2:17:69:4d:ca:
32:ad:4d:4e:9b:d6:68:e8:0d:95:a2:f2:a1:33:31:
36:7b:9d:7c:74:c0:36:c6:eb:d7:84:cd:ad:ed:f4:
e5:25:b4:d3:be:54:54:b0:59:95:19:02:1a:73:8e:
c7:c6:82:8d:ae:aa:ac:f1:c9:cc:70:62:c5:60:37:
d4:22:d5:32:01:bb:81:4b:35:1d:b5:3e:26:45:26:
b2:05:53:57:28:45:3b:98:e0:5a:a3:9a:cc:44:6c:
aa:39:ee:b2:69:19:cd:c3:3b:cf:ad:40:60:39:20:
d8:d0:7d:34:5a:00:91:e5:fa:64:5b:88:29:ca:63:
6b:e4:7e:98:dd:5b:ff:54:89:b9:74:36:be:f0:3e:
51:8b:98:a7:1d:47:9c:9e:82:68:31:48:8d:8f:9a:
07:cd:0e:da:8d:93:d2:3f:bb:db:b5:e1:12:b4:17:
07:a7:8e:8a:14:42:5a:62:3e:b1:4a:8b:77:f7:a3:
5d:38:d3:5a:0a:e1:35:65:bf:fb:bf:d4:c2:35:6f:
0f:da:69:fe:cd:f9:f6:2f:d7:0b:d7:1a:76:0c:1d:
27:58:14:09:43:7f:bd:86:8e:71:8a:ce:6e:e9:66:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:6D:1F:5B:73:78:F0:F8:55:A8:65:7E:AF:B5:A4:AD:0D:09:50
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/P1ZtH1tzePD4Vahlfq-1pK0NCVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.22.0/24
86.54.28.0/23
212.104.141.0/24
IPv6:
2a01:e940::/48
2a01:e943::/48
2a01:e945::/48
Signature Algorithm: sha256WithRSAEncryption
93:14:9f:d6:46:47:92:0f:81:00:65:78:a4:a0:40:eb:03:28:
f0:9e:aa:09:b5:d4:e8:9b:3b:3b:af:d1:b7:a8:72:3f:b9:74:
c7:2f:f0:56:96:3c:e3:2f:be:b6:c3:80:b7:47:9f:cf:a8:d0:
d8:85:d8:6f:40:f4:59:ed:03:ed:b0:fa:5a:a7:2a:8d:f5:95:
a3:b7:24:58:d1:8e:59:d5:90:2b:e0:b5:ea:a0:74:bc:68:b0:
65:0f:37:b3:b1:a0:58:05:4e:37:25:91:f4:b4:2f:b6:b3:b0:
21:57:37:d0:3f:67:33:4e:9d:44:f6:63:7d:6e:67:de:3b:d5:
dc:cb:7a:ae:17:34:95:74:a3:c0:fa:81:9e:11:d8:3d:0c:57:
1d:d2:d4:54:93:13:d6:4d:8f:78:81:72:45:9f:d8:d3:66:e2:
a3:c2:47:19:b7:fe:b8:30:44:4d:67:03:90:99:47:42:4d:a8:
db:7b:34:fd:87:89:a0:2f:e0:ee:7e:fb:24:d9:03:0b:57:0a:
91:0f:57:fe:6e:29:90:ef:c6:b0:4f:44:f4:0f:11:b4:4f:78:
f1:36:91:ef:31:fa:ec:1d:f2:ac:d9:31:99:dc:de:35:97:6c:
58:bc:1b:8c:57:0a:59:e4:7b:fd:b9:c2:0d:8b:6a:c1:05:63:
3a:4f:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:46:00 2025 by rpki-client