Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Pn3N0Hbe2nr97mgBrML207VvaPM.roa
File: Pn3N0Hbe2nr97mgBrML207VvaPM.roa (raw, json)
Hash identifier: 1nE8jr+m1i2fy6QdH7wsU7mnNT2I68ahhQlpIy+PgtY=
Subject key identifier: 3E:7D:CD:D0:76:DE:DA:7A:FD:EE:68:01:AC:C2:F6:D3:B5:6F:68:F3
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747FF13812472306DDE27C72F9902DD
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Pn3N0Hbe2nr97mgBrML207VvaPM.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202843
IP address blocks: 185.60.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ff:13:81:24:72:30:6d:de:27:c7:2f:99:02:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e7dcdd076deda7afdee6801acc2f6d3b56f68f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:37:7f:22:56:6b:98:8f:ca:da:32:87:3e:
a1:98:e9:39:e7:1f:f5:f8:18:d4:b2:ba:6e:05:e1:
75:1c:83:bc:83:0c:0d:b0:d6:47:00:9b:ed:d1:7e:
32:f1:de:18:b5:5d:f2:1e:fe:f9:52:ab:55:77:92:
fa:e7:12:01:18:0c:39:bb:37:f2:e2:95:2d:42:a0:
a5:7f:0c:4a:a4:32:ae:2c:e3:b7:93:a0:03:54:68:
6e:d4:7a:f0:d7:2e:00:d1:73:d8:1a:5e:69:74:64:
9f:ee:a2:36:fc:9c:c2:61:85:2f:cb:7e:24:07:ef:
e4:f9:aa:87:63:90:13:37:2d:4e:6e:81:ea:34:3d:
99:f1:e2:13:9d:a3:61:21:eb:8f:5a:6a:77:9a:49:
e5:76:2c:e0:93:ed:09:f9:6d:ce:e0:61:a7:9e:65:
72:12:d9:1b:6f:b9:4e:31:14:4b:e1:f8:3d:6a:3d:
d3:da:63:8a:74:1b:27:7a:b7:cb:9d:a9:7e:8e:80:
10:2b:95:c5:33:53:ec:4e:31:77:5b:ab:ab:a8:89:
24:4e:17:72:23:e2:62:20:a3:bb:dd:9a:db:a1:81:
06:37:58:f6:fd:54:af:04:31:c4:21:7f:9a:61:51:
0f:0a:9d:f0:85:04:51:3f:ef:4e:42:b5:e5:74:3d:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:CD:D0:76:DE:DA:7A:FD:EE:68:01:AC:C2:F6:D3:B5:6F:68:F3
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Pn3N0Hbe2nr97mgBrML207VvaPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c3:5c:5c:2d:32:36:19:c3:e0:89:9b:7a:f4:c4:6e:fd:40:
7c:f1:e6:70:35:2f:59:bb:01:8a:c6:5e:8c:da:53:9c:d1:5c:
80:c4:3a:0a:01:1d:92:ec:d3:94:1f:2c:2d:58:12:b2:ec:d6:
31:de:bb:3f:96:9b:0a:77:ba:ca:e8:1b:7a:90:98:20:59:03:
ed:11:a4:29:f5:38:1c:43:25:69:b9:a7:10:c9:cf:02:fa:73:
68:59:11:75:e2:57:24:f9:a2:9a:04:51:b7:f4:50:13:fc:4f:
87:f1:4c:89:e0:6c:da:35:90:14:dd:b3:69:e7:71:75:c3:89:
f2:5a:e8:02:50:db:22:a2:7d:59:ee:14:b7:45:8f:a7:c7:12:
9f:87:68:19:79:c1:ed:35:63:76:2e:b6:0b:85:06:77:47:61:
bd:2c:aa:05:88:0c:2f:c5:64:fa:96:4c:17:9b:8f:9f:82:8a:
b7:a0:15:71:39:7c:5e:ee:b2:47:ec:dc:0a:d6:12:b4:4a:d6:
ca:ff:75:2a:e3:57:78:88:96:90:a0:9c:51:2f:b0:54:64:0b:
ec:15:c1:5a:c4:3f:ee:d4:a6:02:67:f9:f2:54:7c:83:6f:68:
e2:5c:a6:1b:92:0a:84:85:8a:b2:9b:65:9a:e2:b9:1b:13:eb:
6e:b2:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:43 2025 by rpki-client