Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/PLSWkynWBozVrtkmXuniU53IS9U.roa
File: PLSWkynWBozVrtkmXuniU53IS9U.roa (raw, json)
Hash identifier: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=
Subject key identifier: 3C:B4:96:93:29:D6:06:8C:D5:AE:D9:26:5E:E9:E2:53:9D:C8:4B:D5
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 019561C782A162F9EFFE0D7D37EEDB26A23A
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/PLSWkynWBozVrtkmXuniU53IS9U.roa
Signing time: Tue 04 Mar 2025 15:30:19 +0000
ROA not before: Tue 04 Mar 2025 15:30:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208006
IP address blocks: 91.216.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:c7:82:a1:62:f9:ef:fe:0d:7d:37:ee:db:26:a2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Mar 4 15:30:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb4969329d6068cd5aed9265ee9e2539dc84bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:b6:1a:ec:ab:77:c4:14:01:f1:28:43:b4:
3c:d6:ac:8f:20:9b:62:77:6e:1b:fa:ae:c8:7f:c6:
df:2a:cc:71:57:f8:ac:3a:c2:0e:94:bd:32:af:f6:
30:d7:df:7c:60:9c:c4:cb:2e:e6:d9:20:50:3f:db:
4e:b7:8f:82:29:c3:10:88:c0:48:fb:e7:7a:34:88:
f8:8a:ab:14:6d:9e:bc:56:ca:0b:48:3d:38:91:d8:
4b:62:e2:b4:9c:15:00:bf:92:42:e7:3a:ed:8f:2c:
d3:89:a1:22:d1:cc:9b:99:98:e5:a5:e0:b5:b3:5b:
eb:03:1d:2f:4a:af:ca:ea:69:27:89:1e:15:c8:c4:
ca:32:d1:64:30:0b:3f:76:6b:e8:aa:b8:c5:51:d6:
39:8e:15:ca:d1:6e:5d:3b:42:8f:30:61:1d:2a:94:
9d:6f:0b:e8:70:69:ed:6d:ec:de:41:4b:43:7a:b0:
c9:52:e0:66:98:ed:fc:11:f5:0c:77:99:33:2f:44:
38:d3:2b:fb:a5:d0:e4:c6:2f:21:e8:33:97:2f:a7:
f7:93:7d:e9:d1:28:db:34:69:49:c5:95:ba:b2:76:
82:58:0e:c6:9c:2d:f7:ef:db:c2:f5:18:48:71:0c:
0c:a7:c0:93:07:60:48:b9:51:c1:4f:5c:41:22:e0:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:96:93:29:D6:06:8C:D5:AE:D9:26:5E:E9:E2:53:9D:C8:4B:D5
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/PLSWkynWBozVrtkmXuniU53IS9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.13.0/24
Signature Algorithm: sha256WithRSAEncryption
86:01:a3:78:2e:30:f7:88:5c:f8:42:0f:e6:40:87:c0:4c:77:
35:05:e4:8b:b6:9b:24:8d:81:e1:d2:bc:7b:e4:b6:61:85:e0:
df:74:6a:3d:19:eb:7b:65:00:3c:bd:20:32:21:bc:b1:bd:ed:
c0:9a:cf:ab:24:1c:2d:1a:f1:15:f6:ac:2b:28:db:2c:6d:8a:
23:c9:01:52:a6:92:f1:01:fb:00:38:52:03:4c:e8:16:3f:8f:
8f:1f:a8:20:a1:e9:31:5e:88:21:76:f5:a0:39:7c:71:66:9f:
3d:9b:2f:86:1c:ee:54:3f:0b:f6:1d:2c:04:7b:59:18:b3:3f:
5f:cf:f5:f2:22:78:53:ee:9f:fd:42:6c:a8:72:9b:35:33:78:
68:49:2f:23:96:65:a6:20:ab:77:3b:46:24:18:43:35:ad:5f:
cb:9a:c2:41:53:f2:10:3f:a8:b9:eb:37:b9:58:cd:6b:2c:9e:
ea:6a:3b:f7:96:51:b7:87:e6:6b:25:d5:8b:bb:37:c4:c7:f7:
3a:4f:2d:67:ac:c7:77:11:5f:87:6f:a2:fb:f4:f5:bc:20:91:
90:78:90:f1:92:1b:39:bb:78:05:14:7b:58:51:f5:7a:c8:07:
a1:1f:5c:66:20:48:75:78:32:bb:06:0e:7e:75:0d:ec:c6:a2:
51:82:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:09:39 2025 by rpki-client