Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PGfJJnu4aiGciUQbaSkFdCFLVxY.roa
File: PGfJJnu4aiGciUQbaSkFdCFLVxY.roa (raw, json)
Hash identifier: bJCcBEVR7VxyDbPrzhVAwHJ8TEnVWcErWjcD8ojDhWw=
Subject key identifier: 3C:67:C9:26:7B:B8:6A:21:9C:89:44:1B:69:29:05:74:21:4B:57:16
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B35A1AA22EEA0DCAB8A24BF5688A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PGfJJnu4aiGciUQbaSkFdCFLVxY.roa
Signing time: Thu 09 Jan 2025 09:28:21 +0000
ROA not before: Thu 09 Jan 2025 09:28:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51358
IP address blocks: 79.124.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b3:5a:1a:a2:2e:ea:0d:ca:b8:a2:4b:f5:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c67c9267bb86a219c89441b69290574214b5716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:1e:97:56:7e:34:5d:c0:10:49:58:1c:e1:
86:f9:91:de:98:96:2d:71:95:2b:20:c4:5a:b6:fc:
4d:c0:fb:20:0e:72:35:32:15:ce:08:dc:04:51:5d:
e8:8d:2a:97:0c:46:8f:0b:5c:b1:43:56:08:96:e7:
cd:2b:c4:00:f9:38:83:f4:b3:e5:e4:24:01:68:0c:
2d:77:46:4f:8b:5a:c9:01:37:3f:58:ec:5a:b5:ab:
6f:5b:bb:38:00:a3:75:eb:82:2d:04:6c:15:7a:51:
95:4b:9d:6f:65:63:8d:33:d5:d7:39:94:b7:c8:f7:
66:4e:2f:34:3f:d1:7e:17:6f:7a:05:99:34:f2:00:
6b:79:f7:35:b5:09:46:ac:a3:13:48:15:9b:4a:f6:
6a:e1:fc:82:9a:8a:ed:4f:90:bb:2f:58:cd:6d:25:
1b:1b:2c:77:ed:df:ce:64:63:b2:3d:6e:de:5a:a9:
15:a7:c6:e4:a7:ff:18:e8:10:b5:9a:14:61:9a:0a:
6a:97:cb:2c:d6:0e:cb:8f:35:fe:77:ed:a4:17:99:
82:c4:bb:d8:e5:1a:31:4e:0b:ca:53:35:b0:d2:95:
89:23:73:75:bb:f6:97:f9:59:ec:ac:ca:a6:08:d0:
ca:cf:f7:65:8f:a2:f4:aa:b0:e2:8e:06:76:82:09:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:C9:26:7B:B8:6A:21:9C:89:44:1B:69:29:05:74:21:4B:57:16
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PGfJJnu4aiGciUQbaSkFdCFLVxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:37:c3:3b:27:21:e9:bc:1c:1c:69:44:97:fc:c0:f8:ce:84:
e6:d1:af:e2:1c:ad:70:3f:39:0a:1a:45:1d:39:04:4e:1d:f1:
b7:32:1d:01:38:88:c4:dd:ad:e2:d4:f2:06:2d:fb:08:14:b1:
e1:11:c1:05:ed:80:89:29:ee:bd:45:9f:a4:f7:ae:8d:8b:34:
07:86:3c:21:3a:35:d7:5c:a0:08:b9:83:b3:d4:a2:ca:fd:3f:
17:f7:e8:9f:cb:73:70:65:bb:8a:69:e8:d5:d5:ba:64:7c:7d:
f1:21:7c:0e:cf:2d:d1:63:03:48:54:22:7d:ab:f2:6a:32:d1:
5e:a2:56:40:45:55:c5:97:62:20:b3:89:60:a3:85:be:0b:6b:
a6:27:0e:49:c5:b4:a4:04:3d:1d:b5:56:9f:fb:e4:71:bf:92:
76:c6:7b:b5:89:67:4a:ab:cd:e0:35:51:f8:49:60:41:ff:f0:
54:73:a6:af:5d:f5:a4:49:b7:41:e1:2d:dc:57:7b:4a:21:ce:
13:2b:a3:0f:76:ec:5f:14:de:81:f6:47:9a:82:96:08:b5:64:
c6:2c:7c:c6:72:96:35:e6:0f:56:e6:97:f1:bd:66:37:a1:a1:
ce:6c:11:89:21:60:31:d5:5e:f9:79:ff:0d:55:f7:8c:d0:b9:
d1:f8:8d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:37:03 2025 by rpki-client