Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa
File: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (raw, json)
Hash identifier: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=
Subject key identifier: 3D:C6:BB:91:74:E5:36:3C:2E:58:DF:C0:07:92:ED:C4:4D:99:0D:E3
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 0194221FD128617964B726AED90AEEDC0498
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa
Signing time: Wed 01 Jan 2025 13:48:18 +0000
ROA not before: Wed 01 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206207
IP address blocks: 185.190.208.0/22 maxlen: 24
2a0a:d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d1:28:61:79:64:b7:26:ae:d9:0a:ee:dc:04:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Jan 1 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dc6bb9174e5363c2e58dfc00792edc44d990de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:d8:20:33:36:5b:dd:2f:da:15:fe:05:28:
8c:a5:8e:78:63:b4:89:48:0b:7d:b8:49:5c:3e:ce:
c9:31:45:17:15:6d:e4:45:c9:78:df:17:b6:60:fc:
8d:9c:3a:3a:e7:11:b7:64:06:29:3a:b2:f9:0d:69:
95:fa:b2:e9:13:c2:b5:59:22:59:36:af:0a:64:d2:
28:f3:9d:fc:9b:db:42:b6:44:84:1f:e4:fc:fa:6e:
47:c1:c8:85:92:ef:9f:b7:d3:9a:52:65:0a:54:6c:
82:37:a8:c0:e7:88:bb:ac:bf:74:00:8b:fb:ac:ed:
20:cd:d2:21:01:e3:45:d1:c8:24:7a:de:86:f6:75:
b6:f7:5b:79:1f:ec:d5:99:06:cb:9d:2b:26:e1:2c:
0c:b0:c4:6d:12:ca:56:f8:c6:ef:07:20:b1:b5:a9:
84:a3:93:72:8e:e7:49:31:06:65:c4:ed:13:e5:04:
92:3a:99:7d:93:9a:0e:b2:62:49:88:d1:92:cf:71:
cf:7a:56:3f:e4:b4:70:24:58:5c:fb:55:46:75:d7:
64:e9:2d:b3:f4:a4:9b:49:ad:4f:3c:30:e3:2f:37:
37:57:bd:ef:1d:2a:1d:22:bc:fb:6d:a5:d7:c9:a5:
f5:42:c7:31:9c:39:91:1b:5c:a3:51:03:5e:cb:21:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C6:BB:91:74:E5:36:3C:2E:58:DF:C0:07:92:ED:C4:4D:99:0D:E3
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.208.0/22
IPv6:
2a0a:d40::/32
Signature Algorithm: sha256WithRSAEncryption
35:4e:47:a6:10:7d:b2:94:e4:1a:ed:18:8f:2d:44:c5:7a:d4:
f7:3b:2b:c1:b6:fb:26:06:b8:8e:a4:1a:bd:85:42:b6:08:bf:
3a:f9:63:4f:8e:04:ba:d2:3f:46:39:97:77:f3:71:09:81:ed:
d2:4a:7c:45:dc:0f:c4:5e:49:11:99:97:d1:25:6f:45:35:41:
1c:87:f4:6f:8e:15:16:a5:52:39:f2:dd:c5:3a:0b:9b:45:7a:
7d:ce:b2:39:40:8d:d2:94:49:ff:80:e0:94:51:7e:40:80:05:
f4:af:a6:8d:ab:44:be:51:b9:be:4d:7d:15:99:4f:53:a9:33:
c5:6c:0a:85:96:8f:0a:e8:57:e3:ca:d6:a9:0a:68:25:0a:f7:
1e:1f:e4:be:4d:9f:ba:31:bf:c5:8e:76:a3:04:ba:22:3a:6b:
98:a5:54:fe:21:7f:51:68:db:46:26:19:05:95:e6:cb:70:8f:
be:c4:b7:7d:fc:cc:70:f1:76:08:9d:d9:5a:d4:f3:6c:e7:28:
d2:2f:0a:26:bd:86:b6:84:98:84:e5:52:88:4b:d9:b5:93:dc:
81:e8:51:44:b4:fd:a5:61:16:41:a2:71:d7:1e:b2:a0:04:d9:
27:79:72:13:44:48:6d:53:e9:da:af:cd:8b:1c:29:af:df:2f:
9a:4b:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:52 2025 by rpki-client