Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pc5QkYWJRHSIUT4-aISn1B0ETL0.roa
File: pc5QkYWJRHSIUT4-aISn1B0ETL0.roa (raw, json)
Hash identifier: bGUIoNzoUj7sJpYGAF2W/rabzS0jqmoXnaDeHRq18Tc=
Subject key identifier: A5:CE:50:91:85:89:44:74:88:51:3E:3E:68:84:A7:D4:1D:04:4C:BD
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0195F1C6C2D234F37E5E8CAA5DEE086E1EF2
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pc5QkYWJRHSIUT4-aISn1B0ETL0.roa
Signing time: Tue 01 Apr 2025 14:34:49 +0000
ROA not before: Tue 01 Apr 2025 14:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 185.248.169.0/24 maxlen: 24
185.248.170.0/24 maxlen: 24
185.248.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:c6:c2:d2:34:f3:7e:5e:8c:aa:5d:ee:08:6e:1e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Apr 1 14:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5ce50918589447488513e3e6884a7d41d044cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:b9:61:b2:c9:12:64:a4:29:7e:f0:e1:dd:
88:b1:b0:cb:8a:59:34:d6:b1:83:f9:61:12:f0:bb:
e4:6a:7a:48:2f:42:38:9d:d7:e1:dd:7b:88:0c:7f:
b8:32:a5:4f:6c:7e:80:4f:e2:7b:ad:c5:30:fd:03:
3d:f2:c1:90:76:2b:45:6d:11:40:f2:ce:62:94:df:
9c:04:b9:77:0a:7f:4e:77:c6:fc:52:35:5b:58:c5:
24:e8:70:0b:9b:de:c1:3f:f9:18:fd:1c:d2:23:03:
fb:8a:76:bc:65:4c:de:23:9f:61:ba:28:13:fa:0e:
ac:46:0e:ef:1d:02:f8:b7:95:16:7a:cf:7f:5d:93:
04:f8:92:92:98:dc:64:0e:32:61:a2:f4:4d:99:85:
36:b4:2d:83:3a:54:d2:e9:4f:d2:46:74:21:b8:e4:
70:e4:eb:8e:4f:ae:a6:fd:a8:08:47:43:7a:a8:8a:
a2:3d:03:9a:d1:2d:03:d2:1e:66:c1:ca:51:7e:50:
4e:f6:7d:5b:08:f3:5c:41:24:4a:cd:62:24:71:92:
fd:d5:91:6b:ff:86:37:de:9d:f2:93:06:fe:f3:fc:
61:7d:1d:a2:ff:a5:cb:75:ce:35:98:1c:b6:2d:bd:
1c:c7:c2:41:81:cb:b8:e0:27:83:ae:17:d9:42:e7:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:50:91:85:89:44:74:88:51:3E:3E:68:84:A7:D4:1D:04:4C:BD
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pc5QkYWJRHSIUT4-aISn1B0ETL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.169.0-185.248.171.255
Signature Algorithm: sha256WithRSAEncryption
3f:e1:fc:79:5f:0c:61:0e:d5:fb:5c:56:6a:61:28:37:c2:7a:
67:89:ca:5c:2f:b3:58:7e:b8:fc:35:9f:8f:b3:20:6e:fb:b7:
e1:a4:0c:a1:81:63:71:d7:75:2a:f9:fa:f9:43:cc:d1:9b:d9:
17:9d:56:7b:b0:49:3a:8b:4d:82:8a:77:4e:a4:8e:3e:0d:b4:
33:15:1d:6f:7d:dc:89:53:e9:83:04:d2:c1:f5:e8:5c:28:47:
73:dc:a3:33:1c:2d:a9:72:6d:0f:6d:0e:63:b8:b8:42:19:c4:
3e:a7:75:bd:a0:f1:da:39:7d:f3:1d:3c:6e:89:18:03:99:1f:
dc:f6:a2:92:bb:2b:b5:4c:12:95:fa:bf:3a:f0:8d:e5:8a:05:
21:01:eb:3f:a1:37:62:72:b9:2a:0b:11:98:36:e4:2e:0a:e8:
75:8d:47:31:81:7b:3c:5b:3d:86:47:4e:0a:be:4d:27:56:12:
61:9f:d1:8d:5d:70:a3:c7:dc:af:28:f6:4c:71:7f:41:47:01:
95:91:0d:44:8c:40:5f:e6:2a:f5:5c:3d:0b:9f:6e:ca:a3:e5:
5e:ef:41:c9:d9:9f:10:8a:84:56:2e:eb:8f:a5:b1:85:23:e1:
86:41:f2:6c:03:dd:0a:ec:42:36:88:de:18:da:c6:69:e8:cb:
a6:1f:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:51:36 2025 by rpki-client