Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/pkcx_-V9HNVC8HzviAJSCvzoxJg.roa
File: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (raw, json)
Hash identifier: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=
Subject key identifier: A6:47:31:FF:E5:7D:1C:D5:42:F0:7C:EF:88:02:52:0A:FC:E8:C4:98
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019427B532D5A451DA1BB9FBD4A8B26BF936
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/pkcx_-V9HNVC8HzviAJSCvzoxJg.roa
Signing time: Thu 02 Jan 2025 15:49:33 +0000
ROA not before: Thu 02 Jan 2025 15:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20879
IP address blocks: 93.113.90.0/23 maxlen: 24
176.223.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:32:d5:a4:51:da:1b:b9:fb:d4:a8:b2:6b:f9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 2 15:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a64731ffe57d1cd542f07cef8802520afce8c498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:95:44:6d:c4:17:15:e0:0d:9f:5f:85:e0:
d7:4d:c8:ef:25:48:ba:9f:65:4c:58:52:a7:78:03:
80:79:3d:01:c8:6f:e0:84:5c:eb:3a:16:07:53:3c:
06:ff:28:4a:67:60:08:8a:1c:26:56:f6:5a:bb:ba:
f7:c3:68:38:c4:d0:b4:6e:9e:11:aa:7f:cc:4d:7a:
a3:82:16:2c:fb:59:fb:14:cb:a3:80:6c:f7:06:98:
73:1a:bb:2d:d8:76:24:f0:e3:ce:54:fd:53:32:48:
da:75:ef:98:bb:74:df:29:64:65:f7:6e:64:3e:df:
87:bf:49:22:fb:fd:1e:76:c4:d5:20:8e:5f:8a:da:
5f:e8:92:9f:9f:79:cd:8a:0b:61:ec:7e:2f:85:a0:
dc:e1:b1:49:34:21:53:cb:5e:d3:d6:ad:95:e7:8f:
2a:54:13:08:29:e6:c1:be:4e:90:45:73:4e:b1:b5:
34:d6:34:d6:db:ce:2a:4c:78:d4:f2:6a:29:0d:12:
45:78:43:42:7a:cb:43:5f:05:41:17:45:2b:43:3a:
09:92:30:24:3a:98:ae:65:0a:e5:38:14:a3:77:d0:
77:2f:e6:0a:45:1c:20:f4:9c:45:2d:12:1b:ff:72:
96:29:ce:c5:9a:b5:b4:f9:44:17:60:68:38:f5:a8:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:47:31:FF:E5:7D:1C:D5:42:F0:7C:EF:88:02:52:0A:FC:E8:C4:98
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/pkcx_-V9HNVC8HzviAJSCvzoxJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.90.0/23
176.223.0.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:c0:6b:2b:80:ee:58:a4:d9:f9:63:38:dd:9c:f6:db:3f:34:
64:75:08:93:13:af:5a:0c:78:4f:63:76:a7:80:37:01:0f:b5:
77:18:f1:27:31:bf:50:aa:1c:c4:81:bb:30:73:43:bd:e9:1f:
67:2f:d1:8f:0b:dc:8e:47:2e:e1:88:af:1c:f4:af:e1:9b:42:
c3:6b:cb:9e:3d:0e:84:76:c3:a3:7f:f2:42:0c:d4:e2:5b:ee:
11:8f:cb:a8:d7:7c:3c:43:7e:9e:c9:e2:d2:a4:db:a2:a8:75:
73:2a:9c:a7:db:bc:e8:2e:d6:6a:76:db:e0:21:70:4d:e7:14:
16:fe:03:89:df:70:49:cf:8b:a6:fc:e3:6f:56:0a:57:7c:c7:
40:d1:36:72:35:f1:04:1d:44:43:c2:ad:34:50:37:3b:90:39:
cb:48:04:9d:48:e3:97:58:0b:c1:25:c5:0c:0a:b5:e7:23:7b:
da:fb:c7:97:4f:f3:fd:20:b5:d6:42:8c:8f:a9:2f:8f:df:ee:
9b:1e:3c:29:21:69:01:02:3f:0f:73:22:2c:e3:d9:d7:10:5e:
46:05:30:40:2b:b4:7c:3a:9b:6f:ab:29:35:d7:1a:ca:22:5a:
96:03:e8:50:fc:02:0d:08:c2:6d:cf:63:89:c2:bb:0c:c3:2f:
93:1e:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:14:42 2025 by rpki-client