Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/PXv4MGw4HfMQV8zuoB-3WTegwaw.roa
File: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (raw, json)
Hash identifier: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=
Subject key identifier: 3D:7B:F8:30:6C:38:1D:F3:10:57:CC:EE:A0:1F:B7:59:37:A0:C1:AC
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 01941FFA712B20AD3B8ACB77DA89428FD25E
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/PXv4MGw4HfMQV8zuoB-3WTegwaw.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.37.37.0/24 maxlen: 24
185.37.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:71:2b:20:ad:3b:8a:cb:77:da:89:42:8f:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d7bf8306c381df31057cceea01fb75937a0c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:71:08:92:9a:c2:78:68:42:9e:21:06:b9:
5a:f5:03:62:b3:22:c8:8a:a7:e9:99:e2:f6:68:87:
34:40:9b:f2:bb:56:2d:0d:0c:57:bf:21:65:16:0a:
22:39:7f:9f:db:a8:0a:37:9c:be:ac:e2:a7:fe:1f:
06:96:f6:2e:eb:45:3e:55:06:ef:1f:4b:e6:79:62:
53:2c:da:c1:d0:0b:4f:38:25:5c:8d:df:28:c0:52:
50:1f:76:db:40:a2:f8:1f:87:79:5d:06:db:4d:4e:
b6:4d:68:c8:7b:1c:e4:b8:5f:a9:de:e3:73:dc:85:
5b:65:a2:6a:0e:ab:32:9c:3b:8f:bd:00:6e:c6:a1:
0a:ea:67:66:ea:ae:66:d8:16:bc:ff:09:76:84:38:
d7:ad:26:c3:d8:6e:61:68:be:f6:9d:21:84:77:8e:
dd:d2:b2:d3:4d:05:dd:90:9f:ec:29:d4:f2:5a:7c:
de:94:3b:0e:d7:14:64:da:51:d0:11:b6:e1:cb:9c:
cc:98:43:22:cc:be:8d:86:ff:6a:52:3f:29:fb:5f:
25:4c:c3:20:ba:22:43:22:a4:12:23:d0:78:e7:12:
4e:c9:cd:11:1c:8f:3a:bb:4f:b4:54:c7:48:fa:bf:
4c:da:bf:78:f6:f8:64:b1:fc:52:9c:81:83:58:2a:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:F8:30:6C:38:1D:F3:10:57:CC:EE:A0:1F:B7:59:37:A0:C1:AC
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/PXv4MGw4HfMQV8zuoB-3WTegwaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.37.0/24
185.37.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:60:c5:b8:a8:13:21:eb:4b:20:b7:7b:4c:82:16:a5:07:d0:
01:3a:0f:61:bf:78:fe:3d:29:c7:f0:27:28:56:49:f9:7a:1d:
ee:27:79:90:a2:ce:6a:10:66:86:7b:97:d7:b0:5d:17:2d:d4:
12:47:d6:ac:ab:51:4e:7d:84:ff:c4:e8:83:6d:33:3b:f4:51:
76:f2:02:46:d4:ba:7d:9c:c5:22:1f:3e:ed:06:fb:5b:72:72:
e0:e2:80:7a:40:46:05:57:5c:8b:3b:43:ba:f8:72:41:73:33:
17:94:e1:95:03:fa:99:e7:07:a9:b3:c0:01:a8:d0:5c:2b:ac:
be:17:0f:1e:74:66:e2:27:c9:fc:b5:38:e4:c5:f4:67:c2:23:
fd:5e:5c:20:14:ef:8d:72:bb:58:2f:c2:f7:21:35:88:10:20:
8c:8c:5a:d3:30:04:d2:73:66:68:a1:1d:e3:5d:27:8e:1d:74:
26:f4:f4:9f:01:17:fe:76:42:ac:6f:12:41:b9:1a:f4:7e:17:
c2:66:8c:8b:05:f1:96:6c:47:85:e0:eb:5c:bc:5b:78:06:59:
96:26:b8:aa:1c:cf:f3:7e:ba:35:19:3d:96:43:a0:77:a8:ef:
15:2d:15:df:91:7f:dc:c1:91:4d:72:70:63:71:bc:bc:e6:a9:
85:8c:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:32 2025 by rpki-client