Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/pdvBItl8CoyO4QTFgXUssA_LmW0.roa
File: pdvBItl8CoyO4QTFgXUssA_LmW0.roa (raw, json)
Hash identifier: 3iD4pZChmT9EfU8WW77KADws+Gg07JC1ki8QyhjnxV0=
Subject key identifier: A5:DB:C1:22:D9:7C:0A:8C:8E:E1:04:C5:81:75:2C:B0:0F:CB:99:6D
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4AC13A38D7FC328D9F0458B2908E
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/pdvBItl8CoyO4QTFgXUssA_LmW0.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61138
IP address blocks: 91.108.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4a:c1:3a:38:d7:fc:32:8d:9f:04:58:b2:90:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5dbc122d97c0a8c8ee104c581752cb00fcb996d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:57:ca:83:08:d3:81:d4:34:eb:28:0e:3d:
b0:c6:07:6b:64:2d:df:ae:10:0e:5a:a4:fc:c9:ec:
8e:41:f8:db:fc:24:fc:ea:61:42:41:d1:dc:54:b4:
a3:65:78:95:1b:24:6e:cd:61:8c:48:d8:92:af:ee:
cf:57:e7:54:1d:54:bd:3b:de:8b:94:c2:c3:53:22:
b6:e1:80:ab:d0:1b:c5:d9:52:b9:cc:55:5a:63:8a:
94:b1:af:f0:7b:7a:71:45:fc:82:50:65:1a:cd:2b:
4f:b5:fe:6d:b9:a4:9d:fa:83:b4:4c:e6:13:56:5b:
77:ef:2c:4d:64:62:91:ca:a5:53:2a:41:d2:b3:7d:
bb:bc:6b:ed:d3:22:7c:c7:47:9f:01:7d:0c:0a:1c:
cf:df:5e:14:3c:d3:8c:fb:8d:4f:3e:7b:ad:f3:19:
61:e2:c2:f1:63:8c:84:77:07:03:34:cd:00:b0:79:
dd:46:30:7f:dc:aa:0c:a5:1b:1c:4d:3e:3d:dd:be:
3a:e5:bb:45:10:86:06:51:5c:06:31:08:a8:11:57:
1f:e0:46:a2:97:da:22:e2:cd:ee:0d:31:a5:ee:1c:
5a:72:55:7a:db:3c:87:b4:94:42:9b:b7:7d:46:d5:
69:93:de:11:c0:71:6c:e7:70:0d:4e:8a:30:7e:ae:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DB:C1:22:D9:7C:0A:8C:8E:E1:04:C5:81:75:2C:B0:0F:CB:99:6D
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/pdvBItl8CoyO4QTFgXUssA_LmW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.84.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:e8:db:18:ce:d8:5c:f9:24:88:82:85:5a:0c:05:2f:75:d9:
f1:1d:11:1d:a4:8b:c5:96:30:58:06:e0:25:1e:ee:1d:52:ad:
a6:09:2e:6d:1b:a5:b5:c9:9d:f6:f4:3f:60:ac:94:d7:be:27:
e3:2d:31:fb:cc:fb:6e:d0:41:f3:7b:1e:2d:7f:e9:29:5f:25:
d6:df:e9:03:62:e5:88:6c:81:91:02:86:81:ce:8f:b6:f9:23:
c2:ef:1c:c1:f1:e1:1c:c7:45:6a:4e:08:ec:83:62:3b:12:37:
68:24:ee:93:3e:a9:63:0a:ba:ce:02:16:a6:40:05:df:d6:00:
8d:f7:dd:33:dc:4e:e5:61:dc:e5:1a:df:24:f8:64:40:e2:42:
19:12:e7:ce:f4:3d:23:d2:9e:0d:a7:f9:39:6e:74:dc:7e:b6:
87:f7:27:5a:ba:12:80:26:9f:50:e6:66:71:f3:ea:bd:92:c5:
88:ac:72:a5:dd:c6:5a:5a:69:b4:70:8d:dc:39:9d:94:6f:b2:
42:06:ea:a0:a0:72:98:56:d7:1c:68:0b:da:8f:33:04:a2:08:
e4:57:30:91:17:5a:88:a9:60:58:e0:18:9f:2e:4c:e3:7a:0b:
02:f0:e6:6d:38:df:1c:58:9c:74:80:fb:1b:1e:8a:f3:e0:f5:
68:12:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:15 2025 by rpki-client