Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/PRDF7uUUDEgvhpybsRj704dqk1M.roa
File: PRDF7uUUDEgvhpybsRj704dqk1M.roa (raw, json)
Hash identifier: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=
Subject key identifier: 3D:10:C5:EE:E5:14:0C:48:2F:86:9C:9B:B1:18:FB:D3:87:6A:93:53
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 01942368F03F12259CE4E30843AB551E3AA1
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/PRDF7uUUDEgvhpybsRj704dqk1M.roa
Signing time: Wed 01 Jan 2025 19:47:47 +0000
ROA not before: Wed 01 Jan 2025 19:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41150
IP address blocks: 195.64.190.0/24 maxlen: 24
195.64.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f0:3f:12:25:9c:e4:e3:08:43:ab:55:1e:3a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Jan 1 19:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d10c5eee5140c482f869c9bb118fbd3876a9353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:1b:3d:08:cb:62:f2:73:86:d9:42:f3:6b:
3b:f4:0b:c1:8f:ae:ad:48:d3:41:df:71:f7:53:ec:
ac:2e:e9:26:aa:5f:76:73:47:96:f4:55:58:3f:20:
52:45:62:f7:fa:4f:24:f4:c2:46:8c:2b:6f:e9:52:
a4:d8:80:aa:82:e8:70:6a:65:07:46:f7:d4:59:00:
ca:df:81:6d:55:1c:36:c5:bc:6b:6d:d2:d5:6e:4d:
a8:56:2d:1b:52:86:35:83:39:7d:63:79:65:19:b7:
74:5c:ad:db:19:6d:ac:93:77:9f:85:14:a0:c6:58:
27:05:1c:da:7b:a7:32:c2:eb:e8:70:7b:f7:94:83:
18:68:25:8f:2c:5d:3e:7c:b6:dc:bf:da:b2:23:a8:
bc:a9:e9:4c:9b:ce:9b:f7:bf:a3:b7:9e:77:b8:78:
62:03:6d:f6:87:bb:bc:21:e9:59:9b:6e:07:e7:ca:
d8:50:80:dd:9e:91:9d:81:89:0b:56:27:72:58:8a:
54:0d:54:5f:9d:d3:19:19:90:ff:5e:08:d9:3c:cd:
7b:02:16:0b:cb:5c:fd:dc:ae:a2:03:ec:55:df:dd:
ab:98:f5:d8:15:49:63:1f:74:2a:46:66:07:2f:59:
dd:11:96:9e:3f:4f:ad:de:ac:de:6f:74:13:ce:a8:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:C5:EE:E5:14:0C:48:2F:86:9C:9B:B1:18:FB:D3:87:6A:93:53
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/PRDF7uUUDEgvhpybsRj704dqk1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.190.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:f9:99:30:f9:35:fc:b9:ad:f6:15:70:d5:58:26:a1:a5:21:
e7:32:49:9b:3c:b7:3c:bf:dd:87:f6:0d:99:bd:03:1e:9d:dd:
47:83:8d:5c:db:cb:cb:7e:1d:34:40:91:b4:c9:df:b8:9f:0b:
3f:06:48:ef:8b:90:fc:2b:31:c0:8e:27:70:71:63:58:e1:7f:
7a:c8:ce:de:a4:fc:e5:b2:24:fe:64:c3:7e:cb:89:a5:ab:7f:
40:cf:33:36:26:71:c2:0e:8b:7c:27:91:9b:69:db:fe:2a:de:
61:f3:9b:9c:24:b4:a3:5d:7f:11:61:23:a9:91:8a:c2:94:4e:
7a:1b:95:ab:e5:bd:cb:3f:d0:7d:ee:bb:df:8a:8d:13:e3:6d:
88:ef:70:3d:be:de:5e:2a:4b:00:ae:1b:80:89:de:5c:1f:b9:
6a:7d:f0:7c:03:62:bd:4d:72:ae:c8:92:b9:50:0e:28:e0:6e:
47:60:a5:e0:41:18:c7:e0:05:0b:fd:26:86:14:03:ad:d2:09:
2e:e1:bf:53:9b:2b:75:e5:3e:15:af:01:92:a5:a2:b2:5e:08:
be:0f:9a:ba:33:16:23:ed:bb:8d:c5:a3:c2:1d:a3:52:75:67:
e9:5c:2f:1f:cf:29:27:5d:44:2f:8a:a3:23:22:2e:c7:54:7c:
97:24:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:32 2025 by rpki-client