Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/pygSYveYfJ18y88VT99Py8VI8Ck.roa
File: pygSYveYfJ18y88VT99Py8VI8Ck.roa (raw, json)
Hash identifier: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=
Subject key identifier: A7:28:12:62:F7:98:7C:9D:7C:CB:CF:15:4F:DF:4F:CB:C5:48:F0:29
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01941FFA53B22AB34F3750068F1DAB86B6EC
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/pygSYveYfJ18y88VT99Py8VI8Ck.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24881
IP address blocks: 46.162.0.0/18 maxlen: 24
193.111.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:53:b2:2a:b3:4f:37:50:06:8f:1d:ab:86:b6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7281262f7987c9d7ccbcf154fdf4fcbc548f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:1f:64:d0:ec:3a:f4:a8:27:4a:68:41:88:
5d:61:ba:a3:60:dd:ce:b8:6e:af:17:f7:0e:06:0b:
d4:67:84:28:6c:27:4d:1f:47:c4:fb:05:fa:aa:0e:
e7:1b:0d:47:fb:e5:fc:22:ac:06:5c:c0:cc:af:d7:
65:47:91:ee:bf:0b:9d:fb:82:97:d1:2f:98:a9:12:
be:6f:2e:f0:27:2b:d2:11:79:3f:91:ce:a4:5d:d9:
e2:02:2c:cd:7a:7c:1e:5d:81:3c:53:67:c4:93:a2:
2a:bf:e6:ca:33:13:a1:3b:9b:a7:90:62:ae:4a:06:
67:2c:8a:b7:f7:fa:a4:8f:5c:2d:70:3e:0a:a1:7b:
7d:7a:ab:c1:bd:06:f7:4b:53:7d:c4:97:7a:5d:d0:
e2:ed:ef:78:5c:36:72:bc:1f:53:43:57:3d:35:15:
5b:79:45:e7:73:87:b1:a0:a7:9e:7f:88:85:44:67:
c7:aa:1b:7c:2d:67:43:59:f6:c3:fa:34:f9:e2:82:
58:7c:85:30:99:01:3f:f5:32:26:03:81:e9:33:70:
a4:ea:9a:05:39:41:39:30:fc:65:c2:37:cb:89:93:
99:4d:ba:4d:21:dd:e5:f0:d9:c7:0b:4d:67:18:c8:
b2:6e:cf:58:84:cb:80:60:05:cd:92:aa:03:78:23:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:12:62:F7:98:7C:9D:7C:CB:CF:15:4F:DF:4F:CB:C5:48:F0:29
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/pygSYveYfJ18y88VT99Py8VI8Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/18
193.111.156.0/22
Signature Algorithm: sha256WithRSAEncryption
70:2e:5e:08:81:08:6f:12:23:8f:f3:b5:89:07:a3:db:64:ef:
f5:f2:3a:31:a5:89:77:fa:70:7f:eb:2c:de:ff:1c:ec:53:f7:
73:75:cc:b1:2b:ee:94:62:bd:ae:5f:61:e5:ef:41:b9:fd:31:
ad:63:96:75:df:df:cc:7e:7d:86:19:0a:b0:00:a1:22:ac:52:
32:1e:ba:95:24:58:b4:25:90:e4:7d:ec:b0:3f:52:2d:3f:37:
1d:89:c3:d7:52:f5:80:79:a3:91:ff:9a:1c:86:be:cc:f3:96:
da:98:7c:7b:fb:01:7a:4f:c5:6c:3e:f3:d5:41:a9:18:0d:86:
97:5c:36:96:2c:0a:10:4b:b2:17:a9:bb:0e:b3:7b:67:6a:d0:
35:62:b5:72:1f:3d:7d:f6:9c:e5:37:b5:68:d8:53:dc:6a:b9:
f4:c9:0c:ee:35:ef:79:0c:43:f7:6b:25:d1:2f:7f:8f:ef:1a:
de:d5:c2:7b:ed:ad:e0:81:22:e3:78:8b:20:28:8d:b7:15:be:
8c:2c:ba:2f:ab:55:71:2a:df:77:b2:09:c8:ee:a5:2f:f7:76:
21:cd:e4:b6:66:ff:02:0a:07:fc:cf:90:a5:b6:de:b1:5d:36:
5e:8d:6d:f5:38:80:f3:db:b6:a9:a8:ec:f4:fd:12:9e:c9:46:
57:3e:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:47 2025 by rpki-client