Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PweX4vwdfn9m5okxz1-m9fnVzPg.roa
File: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (raw, json)
Hash identifier: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=
Subject key identifier: 3F:07:97:E2:FC:1D:7E:7F:66:E6:89:31:CF:5F:A6:F5:F9:D5:CC:F8
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 0194228DABB6318334A24BFCAD3E6F6E0CCA
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PweX4vwdfn9m5okxz1-m9fnVzPg.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 185.154.189.0/24 maxlen: 24
2a12:dac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ab:b6:31:83:34:a2:4b:fc:ad:3e:6f:6e:0c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f0797e2fc1d7e7f66e68931cf5fa6f5f9d5ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:53:38:54:0b:41:19:8a:07:5d:80:f0:56:
58:13:96:bc:1e:6b:d8:a2:b6:3a:46:4e:38:53:d5:
9d:e0:43:e5:c3:38:55:73:e8:c5:ad:d6:46:cc:e8:
de:23:f3:eb:17:fb:ab:ac:7c:09:fc:64:16:ae:2c:
d9:93:47:a2:1b:5b:95:23:0d:41:4b:d2:fa:55:89:
a7:c6:c9:11:d8:31:bc:65:cd:fe:47:9b:5a:ac:a6:
6b:8b:fc:cb:54:b8:f5:d6:1a:6c:d3:6d:df:97:6e:
98:1a:e9:86:94:49:16:49:99:3d:78:67:c0:1b:c0:
dd:43:d2:fa:c5:dd:c7:26:71:52:c2:ff:42:db:c9:
99:f0:2b:b9:d5:0b:10:a8:46:7b:c7:08:b5:10:b3:
1e:71:70:dd:08:48:de:66:f9:ce:c8:5f:6e:85:cb:
b4:a1:25:a1:0d:05:7f:4e:10:97:b2:b8:99:4c:e7:
35:d7:cc:9d:c0:e0:28:16:46:03:43:0a:d4:1b:1e:
26:df:e1:85:42:fb:db:84:ae:fd:e2:bb:44:45:26:
7d:4c:43:65:46:c2:df:66:28:ae:d3:62:80:00:18:
2d:11:1b:4c:c4:26:6b:b3:37:8d:9d:cc:da:fd:da:
ec:ed:6e:28:a3:b8:1a:28:cc:00:6a:2a:06:4d:c5:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:07:97:E2:FC:1D:7E:7F:66:E6:89:31:CF:5F:A6:F5:F9:D5:CC:F8
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PweX4vwdfn9m5okxz1-m9fnVzPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.189.0/24
IPv6:
2a12:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:ed:fd:cd:de:47:03:b7:9c:4e:de:ce:55:5f:2b:94:7f:38:
88:d3:20:b5:89:73:1c:fd:65:58:cc:12:53:20:c8:79:51:84:
c6:f3:45:40:e3:3e:98:99:bf:e1:e5:66:23:f3:60:88:ba:64:
2c:f7:4c:11:15:e2:eb:e5:ae:c3:75:d4:aa:56:b9:44:ba:3f:
45:54:5c:41:cc:14:be:5f:49:d0:d5:8c:27:0f:80:36:f9:d6:
ea:de:1a:0a:d6:61:36:76:b5:6e:b7:83:be:f0:af:e0:51:d2:
1a:c5:7d:12:1d:22:4a:a9:ea:b8:1e:c3:96:44:d0:cb:3e:6b:
2d:22:2a:47:dc:4b:e8:5e:a7:b1:c7:d0:a0:f5:01:d2:0b:d8:
58:b9:cd:92:fb:fd:10:8d:90:25:f5:57:35:d4:fe:8e:a4:e8:
49:22:52:31:48:e3:ab:3f:fd:30:92:ed:cf:f9:2c:eb:b1:a6:
7d:d6:7f:74:a2:23:cb:bd:22:a4:2b:48:a0:e8:6e:9f:26:00:
e8:f2:0c:ca:e0:e6:de:4f:3b:9d:d8:5f:78:47:dc:ba:88:a0:
7d:55:89:45:9a:f1:12:11:fc:0f:5a:d0:5d:13:e1:31:85:73:
70:6b:e5:2a:e3:80:ad:a6:cc:17:3d:83:0e:3f:ea:fa:1c:80:
06:38:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:31:42 2025 by rpki-client