Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/PXVQtp8fbfqZ5jFNvah34s8vf1o.roa
File: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (raw, json)
Hash identifier: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=
Subject key identifier: 3D:75:50:B6:9F:1F:6D:FA:99:E6:31:4D:BD:A8:77:E2:CF:2F:7F:5A
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019423698A1FDFC1352AEE4D1C614C2CD8F7
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/PXVQtp8fbfqZ5jFNvah34s8vf1o.roa
Signing time: Wed 01 Jan 2025 19:48:26 +0000
ROA not before: Wed 01 Jan 2025 19:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206159
IP address blocks: 2a01:190:1500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8a:1f:df:c1:35:2a:ee:4d:1c:61:4c:2c:d8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 19:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d7550b69f1f6dfa99e6314dbda877e2cf2f7f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:13:0d:c4:07:41:29:08:9b:5b:59:92:05:
a7:5a:9a:f5:9b:15:16:03:67:6f:4a:4e:d5:18:71:
ef:57:20:1f:9b:30:91:d7:f0:12:72:69:cf:cc:ce:
9e:7d:af:1a:1f:87:fc:89:36:54:bb:d3:21:ba:36:
e9:b4:65:d3:a0:d9:90:e7:8c:21:d0:8b:58:1b:3e:
a0:52:ba:5a:74:bb:a5:a9:32:d3:2c:18:20:58:76:
6e:99:04:94:92:c1:a1:d3:f8:c6:1c:0d:e8:31:ea:
79:9d:1b:97:ab:db:77:38:ce:8c:49:38:ea:e0:3f:
0f:31:b6:e0:5e:36:c2:8e:ed:95:7c:f7:8b:b3:02:
aa:88:2c:06:e0:73:8a:99:f7:53:26:9c:c2:88:51:
4a:b9:14:eb:0b:8d:18:cc:4e:c7:8b:95:a3:c8:73:
9e:e7:fe:45:10:d0:a8:b9:ac:44:47:56:c0:c5:86:
0b:70:e4:9a:1b:6c:1f:d6:35:37:c0:db:a2:05:4a:
6e:30:1a:69:c6:7b:9f:09:e0:40:f9:ae:fa:5c:c7:
ee:e4:29:cc:31:05:9c:cc:94:d4:08:9c:0a:10:9a:
c3:c7:c3:ab:67:51:ba:ce:9b:2f:d1:fd:81:d0:eb:
8d:d0:3d:88:3c:bb:b0:27:67:00:2a:09:70:6e:9e:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:75:50:B6:9F:1F:6D:FA:99:E6:31:4D:BD:A8:77:E2:CF:2F:7F:5A
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/PXVQtp8fbfqZ5jFNvah34s8vf1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:1500::/48
Signature Algorithm: sha256WithRSAEncryption
1e:de:ba:73:aa:13:81:81:26:20:18:91:6b:f9:00:1f:cc:1c:
3a:ef:06:40:1a:08:fb:b0:59:50:3c:24:2c:2a:a2:cb:8d:8c:
77:e5:eb:18:de:86:90:5d:8f:c0:52:11:a7:e6:0b:62:98:e6:
c1:95:27:17:1f:51:46:21:36:32:70:2a:55:7a:94:57:29:43:
db:41:9c:15:47:8f:58:d1:0b:70:08:91:ab:fb:f7:87:3e:86:
a3:41:3b:28:c2:07:b7:a6:a8:43:9d:3a:ab:d2:fe:1c:61:43:
06:e1:d9:5f:12:0f:61:28:07:b1:3f:82:35:6b:fc:7a:62:1c:
91:24:15:d1:ea:ec:79:38:aa:34:8c:e6:55:ef:22:26:2d:e0:
28:80:92:48:2a:42:63:23:99:19:a4:ad:98:a7:df:f1:8b:ea:
bc:23:c3:15:9e:bf:cb:b1:30:bb:69:50:83:bf:93:e0:b4:56:
2b:61:85:06:e6:01:2f:2b:81:14:18:de:4e:6e:3f:2d:54:33:
8a:81:46:1b:1a:23:c2:40:40:c6:cd:39:4f:57:db:ad:0f:96:
1d:03:11:09:03:e8:55:8e:74:72:13:a5:80:bc:97:13:21:1e:
97:2e:d0:f8:52:28:8d:dc:0f:da:29:86:1b:75:d3:89:5d:be:
8a:fe:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:30:30 2025 by rpki-client