Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa
File: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (raw, json)
Hash identifier: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=
Subject key identifier: 3C:63:A5:00:9D:BF:51:BB:59:B7:57:23:B1:67:17:E6:46:B1:B4:4E
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D628AF2CB6B9067899B52FEB657952
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47950
IP address blocks: 193.41.244.0/24 maxlen: 24
193.41.246.0/24 maxlen: 24
2a06:e800::/48 maxlen: 48
2a0d:f400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:28:af:2c:b6:b9:06:78:99:b5:2f:eb:65:79:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c63a5009dbf51bb59b75723b16717e646b1b44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:85:9a:5d:1b:92:79:69:08:c6:78:0f:2a:
b3:21:96:47:fe:bd:f2:fe:0e:cd:4d:8b:30:dd:b1:
3c:10:1f:5e:1e:e6:dd:2b:67:86:ac:c4:f4:3b:8d:
9c:b7:c2:67:18:eb:a3:8b:e3:b9:5a:04:c6:e6:e9:
89:c9:9c:f5:ee:aa:fb:d5:4e:f6:a6:ca:43:96:54:
94:40:99:04:cd:12:a8:df:ac:bd:02:8d:17:bb:68:
b8:aa:2e:57:8f:ff:6a:fd:ae:e0:d0:fa:3d:6d:a4:
7a:5e:db:58:8e:f0:c3:84:c1:2c:8a:56:82:06:89:
a7:bc:2d:3f:fa:bd:62:cc:42:4c:ee:f4:b6:4d:24:
f0:75:bc:29:dd:35:7c:5d:1d:2f:ae:14:d4:29:2c:
f6:64:e9:12:da:a0:e0:7b:2d:01:f3:6f:81:0a:33:
9e:55:cc:80:70:30:69:21:d7:97:b5:68:e1:bc:7a:
3d:af:4a:49:b3:37:0c:c3:bd:e3:31:dc:dd:c3:f4:
9e:6a:a4:ff:52:62:b3:f9:db:40:9e:cf:26:0d:7e:
e4:49:b5:a6:00:fb:6f:d9:d7:32:17:12:07:29:4b:
5c:68:57:26:c5:22:86:0d:f4:4c:01:87:0a:5f:85:
b5:52:bd:cf:09:09:2c:5e:af:bc:99:7b:c8:a9:6f:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:A5:00:9D:BF:51:BB:59:B7:57:23:B1:67:17:E6:46:B1:B4:4E
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.244.0/24
193.41.246.0/24
IPv6:
2a06:e800::/48
2a0d:f400::/32
Signature Algorithm: sha256WithRSAEncryption
1c:7d:cf:5b:cd:6e:19:76:8c:51:23:35:4e:67:85:ad:20:19:
65:9d:62:22:4d:d2:24:da:64:0b:b1:a3:d3:29:1f:76:16:01:
99:09:da:3b:bb:85:d5:3e:d6:1e:27:e7:9d:2a:37:26:db:38:
1f:06:cf:9c:50:ee:4f:a8:53:af:14:cc:40:c2:70:6a:38:12:
38:60:11:67:bf:73:85:c1:10:86:4a:0f:ad:98:d5:b5:82:2e:
12:5d:26:41:cd:c2:2a:25:0d:c3:03:af:1d:44:79:c0:a2:21:
62:d3:39:ee:91:78:2a:3c:d7:f5:be:26:10:d5:96:83:41:c8:
f0:3d:0d:66:fc:6f:f2:33:4b:e4:92:cc:4d:41:4b:a5:7e:76:
6d:86:e7:14:f3:03:6e:fd:09:62:d8:5e:e4:56:56:83:ec:18:
85:1f:d4:fc:3b:9a:6c:f1:93:c2:d6:df:8e:a0:0e:43:32:61:
cc:7b:86:8f:9b:d5:62:bf:cf:5e:6c:b3:1d:1b:e9:de:49:56:
24:f1:44:f3:a1:1b:59:37:d6:6e:99:64:ed:36:be:55:e4:fd:
3b:c3:0f:f1:d7:48:d0:e3:bb:6d:13:34:bf:14:37:72:0b:d8:
c9:2b:15:93:f8:37:57:37:93:db:14:66:5b:5d:d7:a8:7b:4f:
b4:a0:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:34:13 2025 by rpki-client