Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/pxlKKbY5iFrGDh2EplDOpH6i83c.roa
File: pxlKKbY5iFrGDh2EplDOpH6i83c.roa (raw, json)
Hash identifier: NzuvlzBZxwuFwdNVVQbFAXj9HW/JV+FHbP6jYRM1epA=
Subject key identifier: A7:19:4A:29:B6:39:88:5A:C6:0E:1D:84:A6:50:CE:A4:7E:A2:F3:77
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01954B47ED87FDB3F0E7E45364C6D0C972C2
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/pxlKKbY5iFrGDh2EplDOpH6i83c.roa
Signing time: Fri 28 Feb 2025 06:39:19 +0000
ROA not before: Fri 28 Feb 2025 06:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213787
IP address blocks: 212.22.68.0/24 maxlen: 24
212.22.83.0/24 maxlen: 24
2a09:d001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:47:ed:87:fd:b3:f0:e7:e4:53:64:c6:d0:c9:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Feb 28 06:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7194a29b639885ac60e1d84a650cea47ea2f377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:1c:57:aa:fa:b0:39:a8:b2:ee:4c:fe:77:
8e:11:fe:e8:8b:44:b3:dc:eb:19:93:29:2f:0e:5b:
1e:cf:bf:3f:9d:c8:7a:36:03:7f:0e:52:6d:b6:0c:
a8:25:7b:d9:ba:cf:79:34:89:46:e1:e1:38:c9:e7:
68:fc:b3:54:74:37:da:5f:c7:e1:72:05:ac:99:98:
3f:47:15:f2:1b:f3:c5:12:70:42:04:88:f0:14:48:
34:c3:dc:56:14:f1:54:ed:91:f3:f9:12:62:50:dc:
e4:e4:18:23:0e:ba:77:81:cf:14:b8:4a:bf:2b:b4:
60:7e:40:ee:3e:d2:2d:8e:1a:a0:5f:49:0c:81:3c:
ed:19:0a:b7:8b:4e:e5:94:d8:18:a2:91:d5:83:87:
ae:4e:2d:14:97:dd:7f:bb:f4:d1:80:f0:51:a3:99:
37:c7:d6:8a:23:91:cc:79:95:e4:7c:c7:01:e2:ed:
87:0d:38:bc:c9:9c:77:99:83:86:81:08:84:26:93:
0b:75:6f:d8:8a:b5:a9:ef:e3:63:08:11:d2:b1:4f:
b7:d1:73:e5:11:6a:ea:d3:da:6f:32:e3:e2:d8:fe:
de:94:9b:2d:ed:ec:9d:92:be:8c:7e:c4:5d:7d:f4:
5b:63:64:1f:aa:1d:ee:e0:dd:46:b6:db:5d:6a:d6:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:19:4A:29:B6:39:88:5A:C6:0E:1D:84:A6:50:CE:A4:7E:A2:F3:77
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/pxlKKbY5iFrGDh2EplDOpH6i83c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.68.0/24
212.22.83.0/24
IPv6:
2a09:d001::/48
Signature Algorithm: sha256WithRSAEncryption
47:7c:3c:bf:96:0b:59:da:58:82:7f:b4:39:ec:32:27:5a:a1:
b8:0e:c6:f8:23:70:77:57:01:4a:79:8d:fc:68:25:ab:96:08:
40:54:a4:0c:1e:d7:85:a3:6e:ce:f5:f1:57:73:32:2f:ea:5b:
5b:2f:49:35:b7:1e:23:e4:fe:00:8a:f7:c4:86:09:26:30:a2:
89:e7:5a:94:7e:82:d5:6a:d4:c4:4c:0e:32:19:dd:85:80:13:
c8:1c:a3:7f:99:22:7c:b1:c8:2e:9b:4b:c6:cd:d2:ef:df:ad:
d9:b4:9d:dc:71:99:a3:fe:6a:29:68:10:fc:62:92:e2:bb:a5:
f1:04:c1:a7:26:26:39:89:f7:95:20:7a:fe:1a:69:c4:ee:d1:
bf:06:d8:d8:59:3e:76:e6:bb:2e:f2:df:ea:1a:2f:b6:79:43:
97:98:5d:47:cb:16:94:54:64:44:48:43:d3:3d:5d:04:29:eb:
78:01:ff:b9:f2:e4:6a:5d:15:58:61:d5:e4:a2:9b:ce:3b:86:
73:6c:91:ca:64:52:c9:f2:92:93:15:81:77:dd:ce:05:19:76:
a8:61:86:6f:70:dd:ed:ed:ae:6d:e9:02:94:83:8e:91:31:51:
ff:5c:1f:4e:1b:12:f2:55:3f:6e:ab:6d:d5:05:1d:5b:73:3a:
fd:48:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:27:11 2025 by rpki-client