Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/pFni8BuhN7DO3E6SL-8dURfAHBM.roa
File: pFni8BuhN7DO3E6SL-8dURfAHBM.roa (raw, json)
Hash identifier: Z7r1I+UjoIHQbs4HyVmg7922FtvK+u2Y8zjbNGqqhcs=
Subject key identifier: A4:59:E2:F0:1B:A1:37:B0:CE:DC:4E:92:2F:EF:1D:51:17:C0:1C:13
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0194228D2257550C51AB9AE27B72CDCE83BF
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/pFni8BuhN7DO3E6SL-8dURfAHBM.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197328
IP address blocks: 91.92.113.0/24 maxlen: 24
185.4.227.0/24 maxlen: 24
185.150.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:22:57:55:0c:51:ab:9a:e2:7b:72:cd:ce:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a459e2f01ba137b0cedc4e922fef1d5117c01c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:ac:43:9e:af:ee:fe:09:6d:44:59:9a:1d:
2e:d6:15:7a:a1:2d:32:00:47:12:44:e5:56:3e:ac:
a0:39:71:7b:b5:fe:46:17:0f:97:f5:c2:6d:4e:3e:
b5:47:8f:3b:a2:d6:1e:8e:d8:41:44:ce:93:48:1b:
17:66:24:6c:85:a8:c6:f0:e9:af:9a:2e:4f:9b:dc:
b2:c5:42:e2:92:90:7a:cd:bc:30:9b:ac:41:3c:8a:
b4:ec:95:f3:fc:a8:29:6c:23:c3:5d:55:cb:60:23:
bb:61:f7:44:d9:aa:9c:34:d9:36:a4:8b:51:39:e8:
1c:1c:39:34:83:37:11:92:2d:8e:ba:04:43:54:4e:
69:ee:b8:85:c0:9d:1c:c8:9c:a2:17:8c:c6:25:c2:
c6:95:b7:9b:43:18:09:cc:99:b6:57:d0:c6:6f:84:
84:40:af:e4:0d:d8:26:10:74:1a:15:4a:88:3a:d4:
d2:a9:f2:60:61:3e:13:08:9d:17:16:d6:0f:b7:26:
df:13:c5:64:20:d9:ed:e9:5c:f5:a9:0c:96:3a:d0:
71:b8:56:9a:61:d8:dc:e3:42:bf:87:5b:f6:35:52:
da:07:47:35:f3:32:25:09:f2:65:11:a5:24:67:8a:
40:7c:ec:e8:65:9f:89:24:74:2d:f6:de:7e:65:55:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:E2:F0:1B:A1:37:B0:CE:DC:4E:92:2F:EF:1D:51:17:C0:1C:13
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/pFni8BuhN7DO3E6SL-8dURfAHBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.113.0/24
185.4.227.0/24
185.150.2.0/24
Signature Algorithm: sha256WithRSAEncryption
62:94:19:1a:c1:83:a2:70:33:a6:2f:53:ee:f7:47:03:fd:07:
7b:4b:61:7b:23:fc:0c:47:99:fe:e3:ea:36:5c:4e:c0:96:b0:
5e:e4:cd:37:31:81:e7:66:dc:35:ef:d6:83:a0:3e:fc:fd:cb:
5c:79:60:6c:b8:2f:91:bd:ec:09:c5:42:3c:81:d6:76:f0:31:
c4:4f:7f:65:cf:95:32:e9:66:43:2a:3a:23:3a:97:b8:2b:f0:
c6:d4:86:81:aa:6f:75:c2:34:aa:30:b6:95:b7:b8:93:6a:3b:
00:02:01:9e:ac:40:46:6c:66:8f:3d:24:cf:08:f1:5a:89:04:
d9:b2:7c:73:64:9a:f4:ba:b2:1f:1d:a7:51:29:ef:f1:50:10:
03:4d:fe:46:26:24:94:47:89:dc:6f:91:4b:be:2e:cb:17:3a:
37:82:c1:2e:7d:11:4e:50:bf:a5:6f:3e:7b:ba:ed:10:6c:28:
b3:2c:da:cc:e2:e4:58:f8:98:6d:f1:b8:cb:2b:ce:dd:fb:89:
33:80:85:cf:e0:a8:2d:3f:34:9c:23:14:fa:07:6d:2a:be:b8:
94:0b:fb:69:ba:e3:22:07:95:54:c1:6f:eb:8f:5c:8e:4a:34:
43:aa:1d:8c:2d:99:25:c1:bb:6e:0f:b9:d4:fd:5e:9e:66:bb:
74:de:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:08 2025 by rpki-client