Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa
File: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (raw, json)
Hash identifier: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=
Subject key identifier: 3F:2A:77:29:98:60:68:F9:C6:27:49:25:55:F5:AC:B6:F6:61:01:A0
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 019422FC0DE2A516901DB9ED762D1EAC9E96
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44407
IP address blocks: 45.138.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0d:e2:a5:16:90:1d:b9:ed:76:2d:1e:ac:9e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f2a7729986068f9c627492555f5acb6f66101a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:6c:5e:82:a7:b1:52:e6:48:9a:26:27:53:
fc:f3:b1:34:5a:3f:da:68:11:d2:2e:55:ea:54:86:
36:5c:72:18:dc:98:a9:c7:d5:49:02:cd:4e:51:4d:
4b:ec:93:9c:48:7c:a8:e4:ad:2b:f6:7a:64:66:30:
f7:25:6a:15:10:00:ae:fc:7a:70:f7:02:36:c2:e3:
e7:8d:3b:5a:40:a0:d8:f7:35:c3:2c:9e:d5:dd:cf:
17:7e:fc:a3:a3:07:f1:a6:4b:6d:21:8a:05:4f:ee:
eb:61:8b:b0:78:0b:9e:d3:e5:c5:08:4f:69:da:75:
3f:27:10:1e:ae:4b:0b:31:e6:a9:13:b5:2d:b6:94:
6e:ec:d1:4b:43:56:79:48:5f:dc:84:93:ed:0b:2d:
fb:05:00:0b:61:f7:96:8e:55:4a:4e:af:7c:5c:59:
7c:7e:57:0d:23:79:03:e4:8a:41:65:b0:b4:3f:bf:
a3:60:e5:99:e3:b8:70:1a:ac:9c:5d:42:26:d4:ba:
35:41:a0:ca:f0:61:8f:d8:c6:4e:69:b6:6c:2e:9a:
4c:12:ea:0c:4e:ce:05:a4:60:22:fa:89:38:cf:5c:
bb:37:a9:d9:97:fc:84:df:dc:11:49:99:dc:ee:4e:
a1:c2:41:46:90:7d:9f:c1:4e:f3:25:48:86:e3:8b:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2A:77:29:98:60:68:F9:C6:27:49:25:55:F5:AC:B6:F6:61:01:A0
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.112.0/22
Signature Algorithm: sha256WithRSAEncryption
20:7b:ac:89:5b:4d:3f:10:79:2c:d0:e2:ac:af:22:58:a5:6c:
50:72:46:69:62:fb:d9:06:78:30:dd:8f:02:c7:0f:64:dc:b1:
ee:5f:d5:2c:b3:0a:d8:3e:ad:fc:9b:9d:73:5f:c1:5b:a4:37:
61:1c:c9:5e:28:4b:9b:10:da:27:89:81:5a:b0:3d:db:e4:a1:
59:c3:3b:4e:5c:fc:23:c3:86:1c:a7:14:24:0b:3a:72:ec:8f:
ed:9b:68:c0:68:39:ec:c7:ba:4e:df:b3:77:69:9d:1f:fa:37:
b4:53:09:f9:9b:dc:74:bf:02:5f:b5:84:ed:e4:3b:7f:0e:02:
da:68:7b:f0:21:46:99:d0:eb:f3:f5:4f:2c:c1:c5:83:bd:9c:
7b:1a:73:c2:78:99:97:68:da:32:c9:a8:25:c6:26:f7:e6:a1:
5b:f9:bb:28:93:ad:ba:9b:13:8d:80:92:b8:1c:23:82:8e:18:
10:41:3e:96:5a:25:89:83:c3:da:34:38:ef:ea:cb:94:5b:2e:
cd:5c:1d:91:80:af:17:4e:44:74:62:1c:a4:f9:72:92:2d:d5:
69:0a:56:a7:be:95:07:0f:6f:a2:b1:1f:b2:4a:f1:c3:cb:1c:
56:33:f6:15:81:ea:60:b5:6c:a6:9c:4d:bc:da:92:ff:83:9b:
45:ea:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:01 2025 by rpki-client