Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/pCf2SBThhhwtPhuM3t9JK4mMkuo.roa
File: pCf2SBThhhwtPhuM3t9JK4mMkuo.roa (raw, json)
Hash identifier: Mxx4vZjePTYoAoss+lZxcdSgohHlT76+FicTsz9ie3c=
Subject key identifier: A4:27:F6:48:14:E1:86:1C:2D:3E:1B:8C:DE:DF:49:2B:89:8C:92:EA
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019420D61E6F63210970242E75ED3342587A
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/pCf2SBThhhwtPhuM3t9JK4mMkuo.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43284
IP address blocks: 77.73.240.0/21 maxlen: 21
194.56.219.0/24 maxlen: 24
2a02:2108::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1e:6f:63:21:09:70:24:2e:75:ed:33:42:58:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a427f64814e1861c2d3e1b8cdedf492b898c92ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:ba:33:a7:60:74:7d:3a:54:2d:93:47:78:
ca:5e:09:24:be:36:48:bd:5d:72:19:2a:e5:ab:4c:
09:f9:5e:8b:27:6d:82:b3:50:2f:d4:f6:c5:25:20:
18:11:f2:4e:30:ff:94:72:82:00:9a:f4:f3:ff:72:
68:4c:56:83:8c:f8:19:fa:7e:75:3d:26:df:1c:6a:
04:43:7b:46:bc:2b:44:08:46:15:0f:7c:5d:e7:f5:
51:29:b1:ea:da:26:ce:da:ca:2c:1c:61:c3:33:27:
3c:f1:71:2b:e3:82:a2:aa:bb:13:21:8d:af:bf:f1:
87:d1:c4:1c:7d:8d:3a:7e:6c:a4:e7:24:94:a9:f6:
d5:a5:74:a3:6e:2d:99:24:d3:4c:98:2e:d1:60:f4:
b8:ae:fe:fd:4c:cd:77:ab:02:00:17:3c:cc:3c:88:
a0:9a:2f:53:ce:56:2b:59:b2:a3:1d:71:fd:e0:92:
1c:be:e8:31:4c:03:b7:44:c8:33:dc:e1:1d:5e:18:
4b:41:ff:22:88:56:d6:bf:6d:96:c9:1b:eb:a5:64:
cc:9e:36:03:6b:a1:8f:b1:ff:4d:8d:9e:95:94:c0:
f2:af:92:0b:33:32:b6:bb:8e:96:7c:b4:b1:c9:dd:
b9:56:d9:84:0e:b1:5c:ab:56:8c:b8:07:a8:51:e4:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:F6:48:14:E1:86:1C:2D:3E:1B:8C:DE:DF:49:2B:89:8C:92:EA
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/pCf2SBThhhwtPhuM3t9JK4mMkuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.240.0/21
194.56.219.0/24
IPv6:
2a02:2108::/32
Signature Algorithm: sha256WithRSAEncryption
50:71:7d:4a:b3:de:f1:57:18:3d:79:97:46:80:72:b7:4d:2a:
59:b3:0d:81:e0:d6:73:f6:af:46:6a:44:c9:a2:70:64:42:bc:
6f:55:29:79:a5:b7:60:d4:5e:a3:b2:32:0f:a8:80:93:4f:9f:
ed:17:1f:dd:c6:03:bf:21:b7:ee:f7:0e:5c:b6:28:ca:24:1b:
0c:3d:55:01:7e:06:70:bd:6d:6a:bf:7b:63:6f:4e:fa:71:4b:
34:70:22:78:e3:bc:e6:a8:f7:cf:92:9c:a0:9e:04:2d:fd:41:
55:66:f5:94:b7:f3:68:f7:71:01:79:01:29:71:84:f0:7a:e1:
85:f2:84:d6:df:1f:0b:6b:f6:f9:79:9d:d4:6b:7f:51:6a:b8:
00:c2:34:c0:c8:21:70:22:31:b7:03:ee:9b:ff:48:f5:ed:af:
49:a9:85:82:cf:52:ee:5a:07:4d:57:45:a3:99:f8:4a:82:24:
9b:72:b5:af:a1:bf:44:e9:4f:33:0c:a8:58:09:90:75:2d:a8:
9d:9a:5a:e5:cb:f7:20:ac:9d:e0:a8:29:91:78:d1:11:fe:ec:
73:fd:e0:20:9a:45:8b:d5:a2:e7:e2:ce:c6:34:6c:8a:34:21:
43:3e:0e:1d:77:1c:27:7b:fd:3f:f8:9d:a2:1d:55:0c:44:a5:
08:46:19:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:41 2025 by rpki-client