Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/PHKOdowfTDkm4Ym-blDcENcWk9E.roa
File: PHKOdowfTDkm4Ym-blDcENcWk9E.roa (raw, json)
Hash identifier: gEQ/3c+iOHJyyNR6EpoFDtWxPGDLhPruGOkZ744gOcQ=
Subject key identifier: 3C:72:8E:76:8C:1F:4C:39:26:E1:89:BE:6E:50:DC:10:D7:16:93:D1
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D765208172D18BBF353F19E0A96E3C
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/PHKOdowfTDkm4Ym-blDcENcWk9E.roa
Signing time: Wed 01 Jan 2025 21:48:26 +0000
ROA not before: Wed 01 Jan 2025 21:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62387
IP address blocks: 5.1.79.0/24 maxlen: 24
2a00:f826:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:65:20:81:72:d1:8b:bf:35:3f:19:e0:a9:6e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c728e768c1f4c3926e189be6e50dc10d71693d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:c1:be:c5:10:9f:c4:3c:3d:bb:a7:78:8c:
47:db:b4:ae:2c:1e:29:86:af:42:05:4b:cc:af:47:
0a:95:15:c7:65:09:e8:38:49:31:fd:b6:3a:58:14:
ac:2c:d9:9f:2d:f3:d8:58:39:d0:95:99:ec:fa:63:
37:e7:08:19:9f:e7:a0:b5:e9:a8:df:4d:f7:0d:82:
25:d3:ab:31:0e:c6:25:16:c5:4a:5c:96:69:88:53:
46:fb:e7:87:31:64:84:88:67:fc:e0:0a:9a:2a:9b:
82:79:92:03:6c:30:e8:a0:96:c1:d3:85:06:82:b4:
01:cf:09:16:4f:f3:f7:77:8a:00:7b:e8:e3:2c:59:
cd:0f:ea:c2:14:03:a5:17:58:3a:b1:4b:1c:ec:64:
90:6c:24:0c:17:98:d8:13:f9:1a:87:55:d8:40:ef:
9c:d5:d0:d8:56:97:3f:ac:22:96:ed:9d:62:aa:98:
a1:a2:dd:2a:4b:26:e1:e2:c2:1f:c6:31:91:55:e4:
07:12:df:a5:c2:3a:67:d5:8c:26:04:30:5c:58:d6:
fa:8e:62:6d:0a:9c:b8:70:8a:4c:35:e8:f3:7b:27:
a9:d9:b7:c0:4d:0a:1e:4c:0b:d6:b5:3d:fc:41:af:
de:87:3b:a4:52:bc:3c:af:3b:2f:b1:15:e4:a1:d6:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:8E:76:8C:1F:4C:39:26:E1:89:BE:6E:50:DC:10:D7:16:93:D1
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/PHKOdowfTDkm4Ym-blDcENcWk9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.79.0/24
IPv6:
2a00:f826:11::/48
Signature Algorithm: sha256WithRSAEncryption
77:6a:9b:b2:7a:d9:32:62:f0:c9:62:45:5f:13:28:17:c6:42:
66:76:85:21:85:12:af:7a:8d:98:06:24:d4:c1:da:29:28:33:
4f:7c:ff:09:42:d1:43:ff:11:60:8f:61:76:2c:28:d6:18:fc:
a7:4f:18:14:53:77:6f:1f:57:4f:6d:f6:66:70:ce:84:43:c3:
18:36:d6:33:cb:b8:dd:79:82:c1:20:52:a2:7d:91:87:26:dd:
d8:db:64:5d:ab:f6:ca:dc:af:51:ae:60:69:c0:11:ac:97:a8:
db:a2:b5:c2:0c:20:c7:f0:aa:e6:50:d5:1e:95:df:89:5f:20:
bc:b4:6c:ff:c0:05:1d:c4:04:1f:10:22:41:86:01:4d:3d:4d:
f1:b0:15:44:74:93:b4:00:ab:15:4e:e2:82:24:da:f8:7d:dc:
4b:d7:4d:c0:bd:d1:8c:c4:f2:51:d6:24:0a:67:8a:03:9d:f6:
52:4f:d4:2a:57:e3:1e:3c:86:50:08:bd:f8:af:8a:c5:08:1c:
1a:2b:26:03:6d:6b:ca:9c:9b:6f:ff:fe:f9:9c:de:60:3a:62:
46:e5:30:36:89:3a:12:24:1e:84:4e:ea:3a:94:01:9c:79:34:
25:78:68:88:5a:1a:43:54:51:b2:38:be:94:fa:49:cc:47:8d:
1c:d8:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:16 2025 by rpki-client