Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa
File: Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa (raw, json)
Hash identifier: o5UcaRmySAHefVpyYqfIuBk+qGysWoCNDWxnf1QQroQ=
Subject key identifier: 3D:EA:28:F6:0B:3D:10:13:60:8F:09:F7:42:66:88:82:85:5D:03:62
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 0194EA5B022F5D6B9F34269670C084E66B7A
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa
Signing time: Sun 09 Feb 2025 10:57:00 +0000
ROA not before: Sun 09 Feb 2025 10:57:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200252
IP address blocks: 193.107.48.0/24 maxlen: 24
2a01:f200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ea:5b:02:2f:5d:6b:9f:34:26:96:70:c0:84:e6:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Feb 9 10:57:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dea28f60b3d1013608f09f742668882855d0362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:c5:4b:d2:36:8a:be:98:6d:ab:4f:1f:90:
4c:69:ce:00:c9:30:2b:fe:7a:26:8c:08:42:26:54:
36:bb:18:a9:29:d5:c5:8e:f1:02:a5:1e:1d:32:cc:
e4:dc:1c:3c:68:f7:ec:b5:bc:69:df:d5:e1:90:60:
ad:4b:d5:cb:c9:10:db:7a:7b:72:c0:f4:2f:28:c6:
0d:1e:27:eb:7c:20:fb:b2:4b:9f:d1:c4:0b:54:e7:
71:cc:88:03:2c:75:f7:ab:01:ec:09:e8:94:ce:82:
4b:94:6a:85:c4:4e:a1:a3:b0:56:6f:15:38:c0:0e:
ee:59:82:24:1a:b8:24:75:41:53:3d:36:9c:76:7c:
a3:cf:cb:df:2a:c0:59:dc:d4:4b:73:e5:4c:6e:51:
3b:c2:74:ec:50:cc:20:91:8d:7d:cd:98:c1:dc:93:
ae:68:8c:b8:ff:77:92:00:52:4c:eb:1d:5e:a4:b5:
e1:f4:e2:ef:be:33:df:9e:d4:45:97:9d:6a:6f:ba:
3a:e4:3d:1d:fc:61:65:63:d5:2a:b7:47:32:98:be:
d8:04:dd:37:6e:67:db:99:60:3d:dc:77:20:0d:9f:
22:f2:a8:43:c0:33:aa:7a:06:66:2b:77:25:18:fc:
18:e9:62:32:1f:ba:ce:c8:c8:69:0e:41:4e:da:0c:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:28:F6:0B:3D:10:13:60:8F:09:F7:42:66:88:82:85:5D:03:62
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.48.0/24
IPv6:
2a01:f200::/29
Signature Algorithm: sha256WithRSAEncryption
9d:f4:16:d8:f7:72:5f:b5:ce:b5:7e:ad:80:3f:f8:76:fe:1a:
d3:78:6d:16:24:f4:c6:e8:11:97:93:4e:7e:29:85:84:bc:59:
56:01:b0:2e:13:c2:6b:2c:0a:9b:59:e8:d8:c3:93:09:2e:70:
ca:2a:4f:cf:64:49:23:c4:6f:15:60:91:5b:a4:c4:81:87:07:
fb:03:b0:21:a0:49:d2:97:48:d6:59:6c:ba:f2:c8:f9:1f:b9:
ab:9b:0e:c6:74:cc:4c:61:83:7d:d8:29:2d:c1:6a:fb:f6:08:
14:b9:91:dd:32:c6:8e:1f:65:6e:ed:50:0c:84:ca:ef:b7:6e:
7b:00:62:08:df:ae:a2:e3:0b:a2:f0:84:c2:81:35:47:38:88:
a4:4f:4e:44:6b:9d:c2:fc:37:98:ce:f4:8d:ab:ba:ec:26:2d:
38:61:1e:eb:d5:47:1d:d8:22:ba:9e:86:2c:c0:41:4c:36:df:
61:73:e0:29:a2:e2:e0:da:f4:8f:7e:2e:65:4f:6b:cb:0e:c4:
3c:21:70:36:cd:99:1d:33:55:7a:22:c0:e5:d8:0d:87:c2:d2:
fb:88:30:ba:ab:5f:c5:28:fe:5e:54:5c:88:a5:12:5b:fb:1a:
e7:73:79:85:2b:04:20:ad:7d:c3:6a:52:13:c1:21:bb:93:d7:
c0:8f:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:51:42 2025 by rpki-client