Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/PKP5a34KkATdKIYJt-5YPdlCScc.roa
File: PKP5a34KkATdKIYJt-5YPdlCScc.roa (raw, json)
Hash identifier: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=
Subject key identifier: 3C:A3:F9:6B:7E:0A:90:04:DD:28:86:09:B7:EE:58:3D:D9:42:49:C7
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8E7C499D10026C308ABDC79642F1
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/PKP5a34KkATdKIYJt-5YPdlCScc.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 193.54.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8e:7c:49:9d:10:02:6c:30:8a:bd:c7:96:42:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ca3f96b7e0a9004dd288609b7ee583dd94249c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:72:ff:77:f6:98:09:bc:3e:46:27:99:d7:
41:16:c6:5b:a3:84:e8:88:06:f1:d7:e1:c9:15:18:
40:01:f5:a5:3f:20:45:f7:ce:21:53:2d:c6:0e:1e:
3d:36:f6:ce:c2:fe:e4:18:6b:8d:5b:44:b7:66:71:
ba:81:40:92:9e:65:20:8b:e6:14:71:8e:84:c1:72:
83:43:4d:aa:bd:74:37:e1:07:52:2c:ab:fb:83:d8:
e4:53:3c:59:69:54:68:d7:1d:9a:5b:c6:54:9d:64:
1b:e2:79:aa:38:ed:3a:c3:a1:ba:4e:15:6a:10:49:
41:40:ed:05:78:41:81:44:2c:a3:88:68:f0:73:71:
77:39:d7:3a:9e:6a:13:7d:58:5f:6f:d6:bd:72:5d:
d1:d5:ce:3d:a7:7e:51:ab:94:3d:7e:1e:26:88:21:
2d:bd:82:ea:c2:e8:3a:38:c9:79:b6:6b:2f:9a:e3:
a1:77:5e:8c:c1:4e:8c:6a:fa:0d:7a:af:37:75:12:
04:36:62:4b:d9:99:e2:de:1c:51:20:f9:fb:d1:01:
4e:89:c5:6c:e4:5f:6c:ad:b6:6c:2a:56:47:c9:73:
8f:a0:c4:04:a6:87:a1:cf:6e:98:43:7f:f4:68:d3:
78:bc:10:b6:d2:11:22:ce:75:45:66:98:35:4a:67:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A3:F9:6B:7E:0A:90:04:DD:28:86:09:B7:EE:58:3D:D9:42:49:C7
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/PKP5a34KkATdKIYJt-5YPdlCScc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.54.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2d:ee:0f:ff:b6:27:8e:50:e9:9c:06:80:b5:d6:43:45:09:
95:aa:76:62:5c:8a:3e:ac:76:a6:85:1a:1a:c0:4e:98:f7:8b:
a1:c1:1e:15:98:3d:b1:55:e2:1e:03:39:59:ad:9c:f6:73:b1:
ff:b6:49:1b:61:c6:00:d5:07:fa:a4:f3:7c:9a:6a:27:86:2d:
71:b3:b4:be:43:27:74:19:c8:18:a7:71:9e:97:e7:f9:e7:10:
61:75:c2:07:24:f2:0b:f3:05:d8:db:84:80:83:44:ce:4c:82:
92:88:1c:28:e6:fe:41:a0:60:0b:c3:91:8f:5b:72:bf:7a:1e:
f1:27:12:3c:0b:0a:81:81:79:5a:17:12:39:98:f5:3b:40:97:
a2:9f:da:b4:a7:56:72:26:7f:88:c4:d9:0a:7e:00:05:61:97:
ad:f3:14:28:21:33:9e:2e:81:cd:26:b5:09:fe:62:bf:d1:5d:
51:b5:e6:85:67:05:5b:f9:05:a0:14:87:45:a1:c6:5f:c9:4b:
e2:10:ee:06:f8:61:4d:ee:9b:70:ff:5c:eb:dd:cf:25:6d:47:
92:55:30:eb:ef:b1:77:e1:56:64:58:f2:17:15:a9:27:9e:70:
ad:fb:83:6c:90:a0:63:a8:4b:94:56:cc:53:07:ec:ad:04:70:
ae:9d:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:46:08 2025 by rpki-client