Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/pnLsiL6edNAl7saH4pXx8QzVPbg.roa
File: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (raw, json)
Hash identifier: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=
Subject key identifier: A6:72:EC:88:BE:9E:74:D0:25:EE:C6:87:E2:95:F1:F1:0C:D5:3D:B8
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 019421B1FB8E8B65B47CFAF2D74FB3C71B5D
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/pnLsiL6edNAl7saH4pXx8QzVPbg.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205376
IP address blocks: 194.121.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fb:8e:8b:65:b4:7c:fa:f2:d7:4f:b3:c7:1b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a672ec88be9e74d025eec687e295f1f10cd53db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:f8:f3:6f:6e:f9:46:1e:f5:19:d5:2d:20:
48:22:d9:6b:48:05:ae:bc:79:37:1c:de:a8:a6:a7:
be:04:03:25:6d:ea:0b:f9:6f:a6:1c:2d:25:fc:68:
69:29:ac:a1:2d:48:50:0d:cd:bf:c0:a8:5d:ea:65:
ea:4d:7d:cc:97:b4:46:94:25:c6:e6:44:a2:b2:ef:
92:f2:d9:3a:3b:1d:e8:63:c1:88:37:2c:c6:f6:58:
6c:16:59:c3:5f:79:b7:b7:0f:11:96:30:6c:65:94:
a2:04:bb:f7:ee:b1:6b:58:87:a6:98:79:0b:d6:b9:
20:d7:5f:bb:2a:0d:ef:b8:89:77:a4:30:f8:ba:7d:
c5:75:3d:43:35:fe:1b:e9:c3:d2:9b:dd:64:12:41:
fa:75:7d:22:6d:f4:92:62:e3:e3:53:6f:7a:a9:6e:
cd:61:35:52:eb:b6:d5:40:7d:ba:23:8f:f1:be:ce:
0c:40:6f:b9:a1:f4:f1:41:a1:91:57:10:c0:af:d8:
82:95:33:b5:bf:f5:02:04:a6:5d:5b:31:02:22:11:
93:9d:50:0e:87:46:d9:b1:4b:9a:d4:2c:eb:31:f6:
ec:d3:56:51:4d:d7:92:dd:09:23:b1:4b:6a:94:41:
f8:7a:f8:bc:1d:ea:26:57:0d:b6:da:55:cc:31:af:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:EC:88:BE:9E:74:D0:25:EE:C6:87:E2:95:F1:F1:0C:D5:3D:B8
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/pnLsiL6edNAl7saH4pXx8QzVPbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.121.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:07:e9:ba:6e:6c:9e:32:85:64:7d:a9:0c:bd:58:bf:2f:db:
c1:83:fa:fa:67:6b:6d:e9:84:64:84:b3:85:b4:46:3e:52:85:
db:97:be:63:93:af:81:29:e1:21:e0:52:d2:88:9f:77:e8:20:
3b:b0:a0:b3:54:03:76:49:0e:31:24:04:7c:a6:be:78:e5:9e:
5a:08:22:53:5d:a6:fe:0d:89:08:c3:22:bc:c4:49:5a:43:17:
5f:65:f6:60:41:fe:0c:9f:05:82:ac:3d:cb:85:8f:2f:2b:ab:
33:0c:b9:aa:f4:e7:f0:6a:f4:e1:d0:88:82:b7:b3:6f:ed:93:
7c:ba:81:d5:4a:35:52:9e:8d:e7:a9:e1:ac:95:25:f8:cb:59:
f3:ce:94:45:ac:f0:00:44:31:28:46:86:44:b9:d9:9a:b8:11:
a2:52:88:fa:c2:eb:42:88:20:2f:38:db:13:a6:0e:e2:1b:27:
a0:35:8c:4e:6a:18:01:66:8e:5b:84:29:c0:b3:db:a4:25:d1:
db:ed:29:63:3d:39:74:af:2c:ba:44:9b:88:b5:41:72:d9:a7:
9d:b5:7b:2b:02:61:98:0a:57:eb:71:f9:3f:35:23:79:8d:a7:
e9:2e:6c:e1:52:a2:62:76:c1:d5:ed:b1:f2:cb:9f:7f:8a:60:
1c:3a:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:02 2025 by rpki-client