Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/PneAThfusF70GWHWywmhFb0vzKg.roa
File: PneAThfusF70GWHWywmhFb0vzKg.roa (raw, json)
Hash identifier: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=
Subject key identifier: 3E:77:80:4E:17:EE:B0:5E:F4:19:61:D6:CB:09:A1:15:BD:2F:CC:A8
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D954BE97A3F98877841CCA560EF199
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/PneAThfusF70GWHWywmhFb0vzKg.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212480
IP address blocks: 92.255.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:54:be:97:a3:f9:88:77:84:1c:ca:56:0e:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e77804e17eeb05ef41961d6cb09a115bd2fcca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:f2:1b:42:8c:4e:e8:a2:f4:be:b8:8c:86:
d8:a7:e1:9e:bd:43:11:90:02:e0:40:14:56:34:36:
3c:87:bd:a9:9a:70:19:d1:10:07:91:f6:ad:7c:c0:
95:6f:b6:83:ce:be:f8:b2:0d:25:d9:95:f7:c5:6f:
c0:4f:46:97:7d:ee:67:c5:d8:a1:40:ac:67:92:39:
89:29:a4:ca:b1:56:c4:44:ad:02:7d:fa:c0:63:58:
f2:45:0b:12:55:76:10:34:25:ee:a2:a2:3a:8c:a8:
76:8a:64:20:5b:de:56:aa:53:47:08:a8:b2:dd:d0:
a5:04:58:6f:bd:45:8f:b3:78:f0:5b:7a:aa:b5:38:
68:24:d1:8b:da:23:50:a6:f7:0e:96:e8:cc:37:48:
01:10:30:ae:50:08:3b:f9:42:02:65:be:50:70:7b:
23:22:36:9e:ae:f0:0a:f3:11:db:11:14:80:ee:1b:
4e:90:40:25:c3:d4:d7:2a:e3:9d:a2:1a:56:a1:94:
85:32:1a:96:d7:b4:a2:df:d4:96:db:8e:eb:1c:59:
c5:3b:1b:91:69:b8:6d:58:70:89:7f:37:c9:ec:68:
23:dc:ac:a6:8a:ca:72:d1:db:28:d1:20:ab:f7:7c:
27:8e:e4:3f:cf:58:9e:d7:a9:50:8f:6c:d5:94:b5:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:77:80:4E:17:EE:B0:5E:F4:19:61:D6:CB:09:A1:15:BD:2F:CC:A8
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/PneAThfusF70GWHWywmhFb0vzKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.49.0/24
Signature Algorithm: sha256WithRSAEncryption
19:69:8e:2a:ad:78:7a:be:d8:a3:bd:7b:8a:3e:b4:63:02:9b:
97:dc:7e:09:07:3a:c3:31:f5:17:43:62:5f:be:e6:76:e3:60:
bb:85:fe:3f:9d:24:c1:da:5c:26:14:63:d3:d2:00:1f:4e:af:
0d:2d:3b:b7:46:51:5f:96:e5:84:c6:94:ea:f0:b4:c6:f9:45:
55:34:9f:a9:94:38:07:e7:93:cf:b7:b3:7c:50:89:08:68:d1:
ff:bd:05:82:89:19:b2:86:ec:5a:f3:1c:85:8f:58:29:a1:e8:
89:f2:43:3d:d9:64:b7:b2:27:6f:1b:8d:7d:25:11:b6:51:72:
da:00:a4:98:b6:33:96:8b:a5:ab:86:e3:5e:d3:01:55:34:3c:
b3:53:d5:5c:ae:9b:22:ea:3d:43:d6:7c:85:9a:09:4e:df:6d:
3e:d6:0d:f0:f8:4f:31:2d:08:e6:40:64:81:63:91:fc:53:93:
97:df:73:18:28:b5:7c:a2:e1:22:d6:19:28:dc:89:29:d2:84:
34:1b:de:25:16:a8:23:54:f0:8f:6b:4b:61:03:db:d5:b1:d6:
da:25:47:68:11:04:77:39:28:83:e4:24:f4:85:a1:e1:88:1d:
5a:f0:ac:2d:02:53:33:59:f1:d8:58:76:f7:82:36:42:69:ca:
b2:9e:29:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2VS+l6P5iHeEHMpWDvGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz
NmM0ZmYwHhcNMjUwMTAyMTE0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTc3ODA0ZTE3ZWViMDVlZjQxOTYxZDZjYjA5YTExNWJkMmZjY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwzyG0KMTuii9L64jIbYp+GevUMR
kALgQBRWNDY8h72pmnAZ0RAHkfatfMCVb7aDzr74sg0l2ZX3xW/AT0aXfe5nxdih
QKxnkjmJKaTKsVbERK0CffrAY1jyRQsSVXYQNCXuoqI6jKh2imQgW95WqlNHCKiy
3dClBFhvvUWPs3jwW3qqtThoJNGL2iNQpvcOlujMN0gBEDCuUAg7+UICZb5QcHsj
IjaervAK8xHbERSA7htOkEAlw9TXKuOdohpWoZSFMhqW17Si39SW247rHFnFOxuR
abhtWHCJfzfJ7Ggj3Kymispy0dso0SCr93wnjuQ/z1ie16lQj2zVlLWjHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD53gE4X7rBe9Blh1ssJoRW9L8yoMB8GA1UdIwQY
MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvUG5lQVRoZnVzRjcwR1dIV3l3bWhGYjB2ektnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP8xMA0G
CSqGSIb3DQEBCwUAA4IBAQAZaY4qrXh6vtijvXuKPrRjApuX3H4JBzrDMfUXQ2Jf
vuZ242C7hf4/nSTB2lwmFGPT0gAfTq8NLTu3RlFfluWExpTq8LTG+UVVNJ+plDgH
55PPt7N8UIkIaNH/vQWCiRmyhuxa8xyFj1gpoeiJ8kM92WS3sidvG419JRG2UXLa
AKSYtjOWi6WrhuNe0wFVNDyzU9Vcrpsi6j1D1nyFmglO320+1g3w+E8xLQjmQGSB
Y5H8U5OX33MYKLV8ouEi1hko3Ikp0oQ0G94lFqgjVPCPa0thA9vVsdbaJUdoEQR3
OSiD5CT0haHhiB1a8KwtAlMzWfHYWHb3gjZCacqynild
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:34:46 2025 by rpki-client