Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PJlNK5GmPjaKsQY2Jf-rnj97jjc.roa
File: PJlNK5GmPjaKsQY2Jf-rnj97jjc.roa (raw, json)
Hash identifier: ZZRwPGpxIxIp5NdAxQGtjXEA9orVjWrEJ9vF0InlsSY=
Subject key identifier: 3C:99:4D:2B:91:A6:3E:36:8A:B1:06:36:25:FF:AB:9E:3F:7B:8E:37
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019507F5C80E6D26EAD93619A801FBCA4A4D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PJlNK5GmPjaKsQY2Jf-rnj97jjc.roa
Signing time: Sat 15 Feb 2025 04:55:02 +0000
ROA not before: Sat 15 Feb 2025 04:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199415
IP address blocks: 37.202.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:07:f5:c8:0e:6d:26:ea:d9:36:19:a8:01:fb:ca:4a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 15 04:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c994d2b91a63e368ab1063625ffab9e3f7b8e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:85:2b:d1:c5:48:7a:9f:fe:b1:c5:81:eb:
c6:43:ab:cb:2a:27:bf:f0:ad:ae:d4:3b:64:79:6b:
e9:81:57:d4:09:70:d5:04:a2:36:3a:3e:6d:ac:d1:
35:3c:cd:9c:dd:81:3f:29:c8:24:6b:e6:43:d9:da:
a6:1a:ab:ce:fe:47:01:16:c6:54:e8:bc:84:ed:18:
29:fd:0c:3c:4e:a3:01:68:f2:21:6f:c6:e2:da:94:
56:9b:52:71:1b:10:4e:a1:d0:88:9e:c8:18:8e:da:
2f:bb:39:3c:ee:8b:b9:11:16:d4:f8:bc:f6:5e:b5:
d5:2e:e6:47:ad:4a:73:1d:9c:fd:6e:72:a2:83:9a:
15:12:8a:2c:9b:f3:e6:82:33:0a:c4:2c:1c:94:ef:
2a:26:8f:69:44:bb:3b:9d:02:42:86:06:6d:c9:20:
57:38:e4:2b:3a:47:2d:62:2d:99:63:a6:b7:e4:ad:
aa:65:76:a6:2f:bb:61:08:90:33:eb:41:4c:c2:30:
b4:12:3f:79:20:27:fc:d5:2d:71:2e:3c:ee:f2:be:
8d:ca:cd:e0:e1:70:b5:d0:c8:0d:84:8a:60:73:fb:
0f:c2:c6:c9:68:a9:47:e3:f6:73:27:40:38:28:47:
27:e2:9c:67:27:a7:e5:eb:b3:68:83:a7:cc:16:af:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:4D:2B:91:A6:3E:36:8A:B1:06:36:25:FF:AB:9E:3F:7B:8E:37
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PJlNK5GmPjaKsQY2Jf-rnj97jjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.217.0/24
Signature Algorithm: sha256WithRSAEncryption
75:72:97:35:b9:9b:53:cf:6b:f3:df:0f:d6:c1:59:0c:80:eb:
42:be:40:a9:a5:29:98:c8:78:a6:cd:de:08:34:17:21:92:48:
f0:82:61:3a:81:44:a6:39:e8:15:af:20:86:c8:9b:e1:71:6f:
ca:6e:9a:a0:16:04:51:aa:fd:29:8d:5b:1e:c3:ef:42:84:b2:
b3:13:0b:aa:be:de:0d:59:70:35:f8:42:62:05:f9:b9:1e:7a:
7b:e9:b7:58:36:12:e5:91:c5:82:c5:64:51:59:c6:5b:8b:9e:
e9:9c:8a:34:8d:1c:35:39:4e:38:6f:23:b9:8e:2e:d8:b0:46:
b8:1d:a3:56:d6:66:b8:59:6d:6d:fe:f6:4c:36:c2:c7:86:1c:
43:41:52:49:87:09:e4:61:92:33:4e:51:e0:cd:a3:ad:97:4a:
dc:e1:a6:e3:1d:f8:08:8e:97:37:07:db:d6:f4:b6:11:b1:10:
7a:61:35:dd:1d:53:94:12:c5:a7:99:6c:66:dc:2c:ec:2e:c5:
f0:5e:7e:b6:6c:0e:5d:12:94:2f:2f:09:27:84:2e:d0:f7:15:
ef:ce:7d:f4:f6:d0:98:60:11:4c:e7:9b:ac:dd:dd:6b:88:29:
b4:1d:c0:23:a7:cb:7f:18:81:0e:ce:bb:1f:4b:81:2f:e4:c8:
cb:06:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:02 2025 by rpki-client