Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/pYhcj4jriDQOw9AurBjLjtrgCIY.roa
File: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (raw, json)
Hash identifier: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=
Subject key identifier: A5:88:5C:8F:88:EB:88:34:0E:C3:D0:2E:AC:18:CB:8E:DA:E0:08:86
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 019425FCCC02E7F1ACC2AF3B129F2552EA3E
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/pYhcj4jriDQOw9AurBjLjtrgCIY.roa
Signing time: Thu 02 Jan 2025 07:48:31 +0000
ROA not before: Thu 02 Jan 2025 07:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 195.142.200.0/24 maxlen: 24
195.142.201.0/24 maxlen: 24
195.142.202.0/24 maxlen: 24
195.142.203.0/24 maxlen: 24
195.142.244.0/24 maxlen: 24
195.142.245.0/24 maxlen: 24
195.142.246.0/24 maxlen: 24
195.142.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:cc:02:e7:f1:ac:c2:af:3b:12:9f:25:52:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Jan 2 07:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5885c8f88eb88340ec3d02eac18cb8edae00886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:24:94:db:54:4b:f2:06:6d:f6:68:fe:45:
5c:6a:9c:4a:99:79:b9:62:71:a1:a9:f3:89:1a:c5:
df:c6:30:6e:51:a6:b7:59:22:5b:37:cb:9f:57:86:
59:df:ea:5a:0f:eb:c8:25:1f:bc:f4:75:a8:9c:05:
ab:fc:d6:0d:31:d2:4f:a7:71:7c:9a:87:32:42:e6:
69:3a:cb:dc:bc:03:95:4a:3d:82:27:1f:2e:d4:af:
1a:d4:82:52:eb:4c:5f:ff:e1:b0:7f:82:25:f5:0a:
a2:d2:47:8b:37:3a:8a:0c:8e:be:9f:8c:1c:5e:3e:
d6:fb:6d:86:7e:7b:b1:68:32:06:9a:a2:8f:81:eb:
e2:2e:7b:b4:ae:62:96:4b:89:9d:c6:6d:85:01:43:
4c:7a:b3:2c:0b:78:eb:c8:57:be:69:75:ec:8e:2d:
b4:d1:bc:ee:a7:2a:f2:63:db:9b:46:8c:14:ca:1d:
ce:97:91:af:0c:11:9b:49:d5:a7:90:8b:7e:7d:86:
b5:14:1a:1f:9e:99:fb:4f:08:07:90:1e:dd:54:b9:
b2:43:1f:6d:82:55:7e:5c:e6:14:15:9c:81:e0:9c:
14:ef:85:27:b8:41:a1:33:36:2b:ca:9c:ac:09:f8:
2f:db:3e:39:7b:f7:f2:15:f1:a8:f2:dd:c2:f9:a3:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:5C:8F:88:EB:88:34:0E:C3:D0:2E:AC:18:CB:8E:DA:E0:08:86
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/pYhcj4jriDQOw9AurBjLjtrgCIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.142.200.0/22
195.142.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:c0:cd:b9:25:61:a9:37:f5:e1:b9:15:39:b0:c7:66:d7:d3:
23:34:50:6b:80:0e:6a:12:34:1b:44:8c:8e:3f:54:5b:b5:68:
49:d1:18:d0:b9:a5:9d:81:bc:81:b8:a3:5a:6e:e9:2a:29:2f:
bb:db:69:e5:51:8d:78:08:62:c0:4d:57:a8:4e:2f:ca:1f:b9:
16:a8:24:3d:2f:51:99:0c:c0:79:b5:d5:44:5d:3c:d4:16:aa:
ec:25:05:2d:00:9d:5d:f1:d6:6e:75:87:92:76:a7:77:6d:c2:
ee:d1:af:5c:4c:45:2b:bc:06:21:35:77:9e:d9:5e:c8:9f:20:
73:2a:f9:f3:88:4d:34:55:4d:b7:03:59:36:a4:da:97:19:96:
04:b3:f9:07:28:74:65:e0:0e:9f:e3:4e:a5:57:3c:24:0b:98:
05:ce:c2:82:9d:38:cf:2e:0d:e2:17:5e:36:61:e6:11:51:29:
ec:a0:d1:73:cb:40:45:18:14:43:9b:e7:65:5b:e8:ad:97:a0:
60:68:29:d8:89:e8:59:78:e2:f9:f7:e1:0c:d1:b6:3f:c0:b1:
61:87:62:f3:0a:ab:3d:95:e8:72:42:85:be:67:e4:fa:f8:8e:
c0:8e:20:37:39:d0:05:72:3e:8b:9a:79:39:97:69:5f:f6:52:
38:06:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:08 2025 by rpki-client