Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa
File: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (raw, json)
Hash identifier: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=
Subject key identifier: 3C:84:51:AD:61:52:62:B6:4D:99:E0:1A:EB:FF:93:BC:C4:E6:0F:A4
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 0196206378D9F1C6B022CB0D54793121B386
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa
Signing time: Thu 10 Apr 2025 15:48:31 +0000
ROA not before: Thu 10 Apr 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204082
IP address blocks: 185.109.242.0/24 maxlen: 24
185.109.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:63:78:d9:f1:c6:b0:22:cb:0d:54:79:31:21:b3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Apr 10 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c8451ad615262b64d99e01aebff93bcc4e60fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:83:97:82:df:a7:0d:f9:65:20:76:d3:df:
2e:54:d9:1e:55:36:07:07:89:1b:ff:58:38:7e:c3:
d7:19:1a:13:5f:81:34:cf:08:77:6e:37:46:07:3e:
17:d0:3d:f7:30:fb:2e:09:cb:19:4c:58:f6:2d:c2:
f7:8e:a8:9f:0c:c3:e6:cc:3d:57:cf:ec:63:a6:4f:
11:e3:0c:fe:a8:75:16:47:69:05:c7:fd:45:fb:92:
45:c3:ce:e4:68:12:e7:84:f0:4d:95:81:58:51:91:
58:0e:f9:fe:f7:e8:53:2b:00:bc:3a:0d:2b:02:83:
3b:a7:b0:ef:c3:b0:22:94:1c:1d:48:67:1c:49:e0:
53:9e:43:60:d7:17:ad:5c:1a:79:91:57:a7:df:fa:
e3:e8:d7:38:8b:df:e5:64:75:36:6e:4d:6c:62:dc:
0f:43:2d:45:b7:b6:e8:d8:78:9b:24:23:41:47:69:
d7:f0:67:0d:d4:cb:7f:c8:62:46:d7:5c:58:1a:88:
52:cf:eb:14:df:59:0e:05:52:a6:ee:f0:cb:69:88:
2e:88:25:5a:ce:f1:df:96:24:30:7a:9f:57:dd:82:
bf:e2:f4:21:20:60:04:98:dd:f8:63:28:09:ac:7c:
bd:c2:84:40:a7:2a:c0:a7:bb:df:eb:b0:08:9f:36:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:84:51:AD:61:52:62:B6:4D:99:E0:1A:EB:FF:93:BC:C4:E6:0F:A4
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.242.0/23
Signature Algorithm: sha256WithRSAEncryption
60:e7:b2:db:e1:98:f2:24:27:2b:95:1a:bc:03:6b:ed:a1:1b:
0f:f6:bb:a8:f2:d4:39:8e:99:6b:a1:79:4b:9e:96:b6:73:4e:
16:ce:0a:4e:fb:27:1c:d3:7f:a3:57:b5:86:ad:34:f0:53:a4:
67:36:8e:63:aa:a5:dd:28:75:74:6f:81:2a:4e:36:67:e4:b2:
c7:e8:84:5e:54:37:1f:85:7f:9c:66:1e:c9:a3:05:bc:06:f3:
c0:50:f1:bd:92:32:45:66:8a:74:4c:19:00:47:83:19:19:b8:
19:3e:7e:3c:44:a0:f8:ea:0a:8f:5b:b8:12:56:5e:68:da:ee:
c3:d9:3f:e4:3e:65:e1:7e:60:df:8c:27:fc:3a:b6:84:94:65:
8f:75:07:70:b1:8d:eb:5e:13:41:0a:94:b9:eb:8e:01:4e:48:
d8:78:e4:f0:a3:7b:04:e5:6e:c8:c6:c5:19:88:82:1a:e1:88:
5d:9e:0d:19:54:20:ce:d1:e4:f5:4b:48:ba:48:fa:b0:9c:7d:
7e:ef:26:34:57:38:dc:0e:85:ca:9b:90:27:57:dd:0c:13:59:
89:38:7b:b1:c2:14:be:6e:c2:0d:f2:21:f6:12:07:65:fc:0a:
07:68:c5:18:ad:23:ba:fa:3b:92:e0:5a:55:05:2e:5d:0a:ba:
70:77:52:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:08:28 2025 by rpki-client