Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/pauhzMvpgkVgNc366YpahktJW_E.roa
File: pauhzMvpgkVgNc366YpahktJW_E.roa (raw, json)
Hash identifier: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=
Subject key identifier: A5:AB:A1:CC:CB:E9:82:45:60:35:CD:FA:E9:8A:5A:86:4B:49:5B:F1
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 019422FC3EE76FFB0C150937FBFDAEB10E46
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/pauhzMvpgkVgNc366YpahktJW_E.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48803
IP address blocks: 31.24.72.0/21 maxlen: 21
94.103.192.0/20 maxlen: 21
185.27.164.0/22 maxlen: 22
2a01:8e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3e:e7:6f:fb:0c:15:09:37:fb:fd:ae:b1:0e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5aba1cccbe982456035cdfae98a5a864b495bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:80:51:e8:cd:a2:06:b7:24:d3:32:53:66:
96:a9:2b:3e:51:60:f8:c6:28:e2:ed:30:b5:7b:0d:
52:03:f8:fd:b9:46:ee:32:ec:f9:9e:1e:5f:1c:13:
f1:74:4c:6c:b1:8d:24:a5:a3:3a:7f:18:6a:d8:aa:
ea:38:56:7f:d5:e1:a4:04:a5:77:be:66:72:99:e4:
91:fd:7a:af:ad:ff:60:2e:3e:b6:bc:cf:66:a4:85:
2a:e2:13:e3:d7:7c:f1:25:4f:8b:fd:e0:c0:c1:26:
cc:c8:6b:00:60:6f:95:4c:e9:40:47:ec:4d:f4:dd:
03:a7:a7:28:1d:90:b0:0b:08:1e:79:3a:47:c1:97:
d4:bd:1e:32:53:df:c0:33:8b:a8:a3:f1:69:24:c8:
1c:d6:94:5f:d4:b3:29:97:a1:99:13:dd:ba:4f:24:
1d:ef:e3:4b:4d:35:6b:ee:00:46:2f:cc:d3:be:2f:
48:38:a3:79:95:a6:87:26:52:dc:a7:ef:2b:24:62:
77:f0:96:3e:b0:cd:73:95:c5:e5:13:c4:a3:f7:96:
4a:2f:00:e1:48:97:5a:60:f9:ed:8b:cf:31:8b:e8:
b7:a4:ad:0a:a8:5c:50:c1:99:c8:e5:91:6b:da:eb:
9e:ad:e9:6f:00:f6:b0:76:4e:e0:e3:d2:c1:cf:dc:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:A1:CC:CB:E9:82:45:60:35:CD:FA:E9:8A:5A:86:4B:49:5B:F1
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/pauhzMvpgkVgNc366YpahktJW_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.72.0/21
94.103.192.0/20
185.27.164.0/22
IPv6:
2a01:8e00::/29
Signature Algorithm: sha256WithRSAEncryption
4d:db:73:bd:22:61:c6:06:fa:96:41:45:52:58:46:70:ec:fa:
18:76:88:89:1a:8c:29:b4:2e:b8:3f:a6:ad:45:d3:11:46:17:
08:b3:0d:a2:4b:42:10:f5:36:1f:bb:9f:20:3f:6b:c8:aa:54:
74:68:02:40:bc:48:c2:04:05:3f:c8:cb:2e:df:b7:41:8c:6f:
c6:cc:01:65:ab:b3:94:1e:28:5b:a2:7e:98:79:f4:ec:54:99:
7d:b2:0a:e2:a6:1a:bc:1f:ce:11:d3:ee:50:d3:0b:da:a5:0e:
f7:61:0e:c1:d1:dc:d4:40:9d:5d:70:d5:d4:c2:83:91:cb:9c:
b2:28:4d:97:fc:fb:13:64:6e:8f:e7:fe:69:56:e1:9c:67:9d:
22:5c:95:99:ff:0e:cb:7d:70:52:1c:b8:b4:84:22:36:30:d0:
4d:1b:df:62:06:65:0a:be:aa:20:bb:fa:f0:e1:ec:f2:c1:25:
f7:23:a7:17:3c:a2:ca:e5:74:0d:97:b2:95:82:4c:85:18:be:
9d:ef:c2:0d:e8:bd:d7:04:c2:39:fd:56:59:d7:72:5d:64:61:
0d:50:e1:c4:ba:7c:63:05:ff:1c:41:67:53:e6:7e:9c:d6:39:
21:7f:8f:b5:ea:42:65:eb:2e:a5:94:2c:50:20:76:4d:f2:9e:
66:3f:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:31:35 2025 by rpki-client