Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PTy298-nUrNtL6XANPxlJ7TyOo8.roa
File: PTy298-nUrNtL6XANPxlJ7TyOo8.roa (raw, json)
Hash identifier: xKKmkxhyHB8ISDXmYkZq+hQ/caVLmzK9MfNxnz4PSO8=
Subject key identifier: 3D:3C:B6:F7:CF:A7:52:B3:6D:2F:A5:C0:34:FC:65:27:B4:F2:3A:8F
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01962B230E3532329FC37B25E345DE89F3B8
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PTy298-nUrNtL6XANPxlJ7TyOo8.roa
Signing time: Sat 12 Apr 2025 17:53:59 +0000
ROA not before: Sat 12 Apr 2025 17:53:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 195.216.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:23:0e:35:32:32:9f:c3:7b:25:e3:45:de:89:f3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Apr 12 17:53:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3cb6f7cfa752b36d2fa5c034fc6527b4f23a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:c9:2e:08:2a:b0:ab:d6:83:b8:88:0b:40:
52:4f:10:8d:9f:5e:8e:e4:47:73:71:99:9e:8d:5a:
e5:fc:d7:26:77:4e:a2:6f:fa:e6:29:c6:95:93:74:
7f:18:a0:bd:99:b5:3b:00:a6:38:d5:d2:50:3b:52:
a7:2f:db:8a:4b:66:38:38:41:15:c9:b0:0b:5f:0e:
7a:40:bc:f2:9f:33:1d:08:eb:58:6c:6c:57:55:b7:
6b:67:a6:79:38:ca:9f:b3:88:d1:4e:20:af:ad:6c:
1c:93:dc:aa:6b:99:44:82:85:fa:91:12:20:ab:da:
67:68:16:bd:0b:b9:7e:8c:e3:91:29:a9:84:cd:35:
67:5d:68:a1:ee:b6:12:98:34:22:37:04:2d:fe:27:
49:9c:f3:6c:63:d3:10:18:a4:70:15:da:7a:60:89:
85:48:23:0f:3f:55:39:7f:10:53:54:67:1d:56:52:
81:53:9f:05:11:3f:de:ed:84:f5:04:2d:16:95:f2:
e4:d4:fb:b7:2e:b7:21:68:a6:57:77:bc:c2:60:0b:
d8:28:f7:38:01:8e:e8:0f:c1:8d:0d:d5:32:06:b8:
46:ca:1a:87:0b:e1:2a:19:80:d6:f7:7e:34:3d:07:
26:80:ff:06:77:24:46:cc:a5:d1:e0:61:f5:21:6e:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:B6:F7:CF:A7:52:B3:6D:2F:A5:C0:34:FC:65:27:B4:F2:3A:8F
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PTy298-nUrNtL6XANPxlJ7TyOo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.183.0/24
Signature Algorithm: sha256WithRSAEncryption
09:50:81:ba:fa:f6:86:9d:9a:ee:d2:e9:d9:30:3c:48:cc:85:
20:fe:f2:58:ab:dc:9e:8e:ba:bd:17:f8:98:39:e6:9f:a3:46:
68:68:fb:be:61:2e:e0:55:2c:e4:4a:14:b6:1c:cc:99:21:ee:
4e:c9:6e:d6:e3:8a:7c:06:3e:95:7d:2f:a7:65:e4:08:0e:26:
e7:24:0f:95:5c:06:17:3b:44:eb:52:4e:63:e7:e4:44:46:62:
e4:ed:4e:e5:fc:25:d2:e9:92:74:bf:07:74:26:89:f0:43:93:
f7:e0:6a:7c:8b:be:c4:89:a8:ca:2a:27:96:c0:1a:eb:61:94:
4c:7e:24:a8:11:fa:18:21:54:c8:a6:71:c4:96:22:3a:af:e4:
84:23:a3:87:60:b1:cd:db:e6:24:5d:6f:85:7c:59:b4:ae:ec:
d2:f2:6d:2b:b8:cc:bb:8d:c8:cb:af:2f:ef:0e:ad:06:76:ed:
b6:ca:98:b3:92:e9:e6:56:6e:2f:54:a7:51:49:72:d3:0d:17:
44:b0:30:a9:7f:94:95:da:39:90:95:76:27:6c:97:d9:7e:8d:
c0:e1:e7:50:af:9f:34:d5:26:d2:f7:8b:56:41:f6:86:23:7a:
35:73:a3:0e:b7:3a:4b:e3:f4:09:fa:cc:0e:ed:7e:61:0e:eb:
52:e3:cb:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYrIw41MjKfw3sl40XeifO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwNDEyMTc1MzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDNjYjZmN2NmYTc1MmIzNmQyZmE1YzAzNGZjNjUyN2I0ZjIzYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY7JLggqsKvWg7iIC0BSTxCNn16O
5EdzcZmejVrl/Ncmd06ib/rmKcaVk3R/GKC9mbU7AKY41dJQO1KnL9uKS2Y4OEEV
ybALXw56QLzynzMdCOtYbGxXVbdrZ6Z5OMqfs4jRTiCvrWwck9yqa5lEgoX6kRIg
q9pnaBa9C7l+jOORKamEzTVnXWih7rYSmDQiNwQt/idJnPNsY9MQGKRwFdp6YImF
SCMPP1U5fxBTVGcdVlKBU58FET/e7YT1BC0WlfLk1Pu3LrchaKZXd7zCYAvYKPc4
AY7oD8GNDdUyBrhGyhqHC+EqGYDW9340PQcmgP8GdyRGzKXR4GH1IW400wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD08tvfPp1KzbS+lwDT8ZSe08jqPMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvUFR5Mjk4LW5Vck50TDZYQU5QeGxKN1R5T284LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i3MA0G
CSqGSIb3DQEBCwUAA4IBAQAJUIG6+vaGnZru0unZMDxIzIUg/vJYq9yejrq9F/iY
Oeafo0ZoaPu+YS7gVSzkShS2HMyZIe5OyW7W44p8Bj6VfS+nZeQIDibnJA+VXAYX
O0TrUk5j5+RERmLk7U7l/CXS6ZJ0vwd0JonwQ5P34Gp8i77EiajKKieWwBrrYZRM
fiSoEfoYIVTIpnHEliI6r+SEI6OHYLHN2+YkXW+FfFm0ruzS8m0ruMy7jcjLry/v
Dq0Gdu22ypizkunmVm4vVKdRSXLTDRdEsDCpf5SV2jmQlXYnbJfZfo3A4edQr580
1SbS94tWQfaGI3o1c6MOtzpL4/QJ+swO7X5hDutS48tB
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:21:22 2025 by rpki-client