Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/PNGVC-CrfH1p9OIprudcP9OFefc.roa
File: PNGVC-CrfH1p9OIprudcP9OFefc.roa (raw, json)
Hash identifier: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=
Subject key identifier: 3C:D1:95:0B:E0:AB:7C:7D:69:F4:E2:29:AE:E7:5C:3F:D3:85:79:F7
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 019426D9F5B57B61C5EE68C899AF81959649
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/PNGVC-CrfH1p9OIprudcP9OFefc.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51188
IP address blocks: 185.166.28.0/22 maxlen: 24
193.28.203.0/24 maxlen: 24
193.93.132.0/22 maxlen: 22
194.28.0.0/22 maxlen: 22
2001:67c:25c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f5:b5:7b:61:c5:ee:68:c8:99:af:81:95:96:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cd1950be0ab7c7d69f4e229aee75c3fd38579f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:ac:7c:00:ad:7b:91:ca:ec:ae:3e:a0:d1:
01:a0:2c:80:75:82:54:cb:05:f6:e0:eb:17:8c:67:
da:78:b1:cf:b6:dc:06:70:21:a3:7f:51:e5:2a:b7:
48:3b:f8:9a:ed:16:9b:0b:29:49:83:9a:d2:3e:ab:
1a:51:03:0e:55:2c:90:d0:af:24:34:ae:f1:7b:de:
42:d8:79:8f:5f:0d:1b:f0:e9:f1:f1:6b:75:0b:78:
b1:58:ae:f2:9c:e7:7c:de:32:cf:1f:0a:bb:2f:61:
23:4b:e2:4b:ae:19:4d:5f:20:97:91:22:bc:84:6d:
c5:c6:be:61:12:ff:37:10:0c:d5:6f:22:17:c3:9d:
81:e9:a6:db:69:d7:7d:5a:ad:23:5c:b4:b8:10:97:
d9:1b:11:7c:67:72:44:f9:4d:4d:a2:20:26:67:7b:
44:98:22:a1:4f:c1:9f:d6:e1:49:4b:27:d7:ad:c8:
34:86:56:4d:55:b5:c3:0a:a6:09:1c:2c:fe:a9:84:
c6:d0:00:b4:02:08:fb:3f:26:f6:28:c9:fd:1b:44:
2c:75:9e:89:44:8c:e9:cb:11:fd:93:74:7b:ac:ad:
91:b2:3b:97:5f:5e:99:b7:81:a6:7d:a5:39:2c:24:
68:ef:63:00:63:0e:d9:3c:8c:f4:bf:c2:7d:80:3e:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:95:0B:E0:AB:7C:7D:69:F4:E2:29:AE:E7:5C:3F:D3:85:79:F7
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/PNGVC-CrfH1p9OIprudcP9OFefc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.28.0/22
193.28.203.0/24
193.93.132.0/22
194.28.0.0/22
IPv6:
2001:67c:25c::/48
Signature Algorithm: sha256WithRSAEncryption
b6:92:a5:54:e0:eb:6d:aa:32:6c:97:1e:95:dc:13:80:b5:88:
47:83:3f:a2:1c:fe:74:5a:e3:20:09:b9:c4:1d:3d:fe:a8:e5:
f8:37:63:a6:0b:92:96:15:0f:04:b5:d6:7d:bf:3b:f7:b6:a2:
bc:26:dd:52:9e:e2:15:a2:7d:47:3e:93:91:38:44:85:ea:10:
ff:75:c5:79:c4:22:c8:e8:cd:c2:29:83:c6:73:75:a1:fe:43:
42:ff:83:1c:09:41:ef:dd:dd:46:df:a7:ae:0e:bf:e9:d6:ee:
79:2d:72:f4:01:e2:2b:89:a5:f1:04:6a:77:0f:c6:1e:7e:bb:
65:48:75:8a:de:04:8e:8d:20:d0:df:d4:25:92:ae:8f:ac:51:
9c:ae:20:b3:95:68:f2:a2:a7:08:54:07:25:ce:98:f4:82:af:
81:f8:64:14:e7:c1:31:2c:a4:83:0f:0c:5a:44:ac:1b:f6:d8:
7f:bd:10:e6:d5:01:33:a5:ec:e4:35:ad:d1:50:0a:61:61:56:
41:e6:41:c3:de:88:31:d3:6d:28:36:1b:86:72:18:46:c4:55:
ea:45:23:ef:4f:54:85:4f:71:f7:c5:52:6e:91:d8:a7:f0:bd:
98:c4:eb:32:83:5a:ea:4d:89:c6:42:c9:31:98:ad:1e:cb:df:
97:45:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:34 2025 by rpki-client