Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/PW3nlM7nFnxOwsqkv-YkJFxzUD0.roa
File: PW3nlM7nFnxOwsqkv-YkJFxzUD0.roa (raw, json)
Hash identifier: NPdwKJLvvFtq2Qp8PFg9ndUpDvahiFbdM9GL0rt3bw4=
Subject key identifier: 3D:6D:E7:94:CE:E7:16:7C:4E:C2:CA:A4:BF:E6:24:24:5C:73:50:3D
Certificate issuer: /CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Certificate serial: 019428266A675F7EB92681305AA233294757
Authority key identifier: 49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/PW3nlM7nFnxOwsqkv-YkJFxzUD0.roa
Signing time: Thu 02 Jan 2025 17:53:13 +0000
ROA not before: Thu 02 Jan 2025 17:53:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 195.182.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:6a:67:5f:7e:b9:26:81:30:5a:a2:33:29:47:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Validity
Not Before: Jan 2 17:53:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6de794cee7167c4ec2caa4bfe624245c73503d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:94:7f:94:3a:a3:a0:ea:b9:99:39:87:7d:
77:fa:46:e1:c1:4b:c8:c3:8a:1c:a3:37:a5:62:0f:
68:70:84:3f:24:b9:c4:26:34:d4:68:76:ca:0c:6a:
8e:34:96:48:5c:de:32:63:20:c3:f1:4a:66:a7:52:
ce:65:35:86:1d:f8:e2:49:e3:24:99:13:5c:05:a3:
52:f2:68:df:13:f0:c3:e8:09:c2:a3:f0:8f:7f:54:
75:df:96:8b:2f:85:74:79:07:dc:9b:d4:e4:4b:cd:
59:20:43:8c:a5:55:04:13:f3:ff:33:ed:bb:79:ca:
f3:4c:dc:79:c4:8b:d7:4d:43:3f:1a:b7:9d:c0:8c:
0c:3c:dc:4d:32:b2:8e:2c:3a:6c:b0:ea:1c:d6:aa:
c7:be:cf:b2:ec:64:26:bf:24:61:24:95:60:a2:ae:
de:9b:76:7d:26:47:80:9a:d8:74:57:2f:c9:5d:ed:
8e:3b:a9:d0:ac:68:25:25:5d:28:e0:29:da:c5:78:
a1:16:18:29:2b:17:53:ba:bf:78:04:48:8e:8d:3d:
ad:4b:53:a9:60:73:8f:28:fc:ae:d8:96:cd:cb:50:
3d:91:33:e1:2b:e6:d6:7b:86:34:82:3b:46:29:49:
a0:7d:26:1c:62:67:2a:19:a2:e4:b7:99:c6:4d:b1:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:E7:94:CE:E7:16:7C:4E:C2:CA:A4:BF:E6:24:24:5C:73:50:3D
X509v3 Authority Key Identifier:
keyid:49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/PW3nlM7nFnxOwsqkv-YkJFxzUD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.25.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e6:5e:55:a1:96:48:e2:bc:af:97:d2:f0:6b:54:d3:29:33:
3e:3e:34:00:69:4a:dd:60:9b:97:5e:38:f0:65:01:46:2b:3e:
cd:2a:81:93:64:16:fb:c9:a9:97:13:4c:a4:86:0a:ce:e1:cd:
75:e3:b5:88:d5:ad:7f:95:44:2d:7b:ba:05:7e:67:11:30:88:
e2:12:38:70:c3:70:28:33:c9:7f:af:c7:75:29:54:a3:b1:60:
35:a2:3e:5c:bc:bd:3b:b7:1c:54:d9:3e:c4:c2:87:6e:18:c6:
9f:a8:34:d5:69:4c:36:1d:ee:d1:0d:3c:c1:6b:52:ae:17:cd:
c3:60:a5:c9:4c:fe:da:89:2c:e6:23:03:05:8f:24:73:b6:a5:
10:84:7c:8b:c5:dd:2e:f6:d2:52:32:62:cf:98:6f:b9:18:d9:
08:f2:b8:e3:2c:23:ec:33:3b:29:e0:e0:57:6b:cf:f0:8c:0e:
10:dd:04:c2:7e:8d:70:c5:b5:90:46:e5:f8:98:d3:65:cf:f3:
eb:66:44:84:ed:33:9b:1e:26:fd:d4:a1:70:fd:dc:3c:11:59:
d8:f9:63:fe:55:5d:ac:81:db:18:6e:99:2c:ed:88:a8:45:c5:
22:aa:e1:4f:8e:52:af:99:3b:97:56:ae:31:2d:54:5f:76:8a:
a4:a1:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:16:11 2025 by rpki-client