Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/Puy-0P_jBepIb5u3SpvEh4v47j8.roa
File: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (raw, json)
Hash identifier: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=
Subject key identifier: 3E:EC:BE:D0:FF:E3:05:EA:48:6F:9B:B7:4A:9B:C4:87:8B:F8:EE:3F
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019422FC3BBAED61B9A513F4262DC2F22BEB
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/Puy-0P_jBepIb5u3SpvEh4v47j8.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 194.176.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3b:ba:ed:61:b9:a5:13:f4:26:2d:c2:f2:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eecbed0ffe305ea486f9bb74a9bc4878bf8ee3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:17:94:eb:0a:b7:73:44:7b:ed:8f:cc:dc:
fe:f2:59:9f:fa:b4:39:40:1c:01:4d:d8:c4:59:ce:
8d:0d:50:a4:0c:e1:29:d1:78:6a:4a:88:46:79:02:
03:2f:cf:60:1e:50:9b:59:3b:f4:76:d7:2c:3a:fe:
5c:11:6e:ef:6c:66:7d:3c:9e:01:9c:20:3c:f1:46:
9a:f1:e9:62:86:c3:11:87:d7:35:94:f8:96:5e:e8:
d9:ec:0e:a3:17:b0:ce:4e:63:d9:92:73:2f:00:d1:
46:80:c4:f2:4b:81:f9:3d:95:0f:7e:68:ee:06:44:
ad:b2:54:f9:b8:5f:60:59:f0:eb:b6:f2:55:b4:75:
6c:76:91:a7:ac:2c:d3:c6:73:2d:ab:4d:4f:97:17:
55:3e:41:9b:f4:6e:e5:74:ff:06:e8:7c:7e:f2:50:
1e:ca:c1:8d:6c:81:64:6c:2f:06:f6:60:a8:24:94:
8b:20:a6:16:4f:71:f1:71:4b:f3:8d:f8:9b:7c:83:
b4:ea:66:16:2d:c0:5b:42:5a:67:b8:15:d7:ad:73:
f6:a9:27:6c:dd:47:57:b4:d9:2b:ca:17:29:45:de:
1d:34:72:3e:6d:17:61:64:4b:e2:67:0c:52:16:3c:
f5:19:3a:d4:a6:0c:4c:8c:54:d3:bb:16:68:4c:41:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:BE:D0:FF:E3:05:EA:48:6F:9B:B7:4A:9B:C4:87:8B:F8:EE:3F
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/Puy-0P_jBepIb5u3SpvEh4v47j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.191.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c0:29:bc:93:b8:18:9d:53:31:91:75:11:a0:b2:eb:fc:c7:
f6:16:7b:13:9c:a7:8c:21:25:ac:81:46:e6:ed:1a:fb:3d:a1:
82:57:62:48:30:03:fa:f4:f5:03:55:bd:99:ba:a4:1a:2d:27:
d9:26:1f:37:12:5f:b6:61:27:34:d0:7a:49:b2:25:7c:08:95:
60:53:5d:b8:04:05:f8:c5:96:aa:f3:e6:f6:7e:9a:fc:d0:3c:
93:a5:59:7c:33:24:81:31:6b:88:e4:c3:15:91:f5:a6:bc:0b:
ab:b4:b0:79:52:06:d2:a0:66:da:e6:99:45:2e:9a:4f:f7:ed:
0d:b0:d3:6e:eb:52:36:56:7b:b7:41:d1:4f:71:ba:87:25:02:
2c:28:ec:31:0f:cb:25:f6:38:c7:21:37:5c:f8:d5:3f:b1:3d:
cb:d5:01:5f:0b:4a:05:e4:7d:24:9e:33:6e:a6:a7:40:e7:90:
ad:62:ba:53:4f:9e:fa:3d:2a:12:77:49:74:71:6b:79:39:ec:
46:0e:a2:5a:77:fa:c0:ec:a0:6f:34:e8:09:a2:ba:c5:b7:4c:
2a:b0:4c:f6:8a:33:a7:47:b1:3c:04:77:76:aa:6e:2f:9d:af:
69:e2:37:be:bf:5c:a6:e3:9b:ff:9d:e3:ac:92:09:91:d9:13:
a7:7c:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:44:41 2025 by rpki-client