Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/PbFqVGsynD7-VXzxL0zZGsy8PM0.roa
File: PbFqVGsynD7-VXzxL0zZGsy8PM0.roa (raw, json)
Hash identifier: svm6tk6khd9i1wtcFWYwOdlCNXWvspEJLl+QjlmcJ8g=
Subject key identifier: 3D:B1:6A:54:6B:32:9C:3E:FE:55:7C:F1:2F:4C:D9:1A:CC:BC:3C:CD
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 01964D4E29B85204412E79AD8C957A1A3599
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/PbFqVGsynD7-VXzxL0zZGsy8PM0.roa
Signing time: Sat 19 Apr 2025 09:08:10 +0000
ROA not before: Sat 19 Apr 2025 09:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 45.156.118.0/24 maxlen: 24
45.156.119.0/24 maxlen: 24
91.228.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:4e:29:b8:52:04:41:2e:79:ad:8c:95:7a:1a:35:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Apr 19 09:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3db16a546b329c3efe557cf12f4cd91accbc3ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:e7:c0:1e:97:d3:97:a6:5d:d9:28:ec:cd:
06:78:9d:41:56:64:f7:46:82:19:77:05:ac:98:e1:
77:bd:13:d5:34:51:45:6a:cf:5b:77:a7:33:01:57:
6d:eb:25:61:c9:53:d4:f2:81:33:0c:2d:aa:c2:d6:
49:b4:07:ed:fd:d1:fb:4c:67:2c:89:6e:e7:c9:df:
ca:e2:50:a4:30:39:98:8e:9a:ee:a4:e3:cf:0c:ab:
17:63:87:06:13:b6:58:7a:3d:62:f1:14:ce:81:fa:
fd:19:f6:2b:3a:1b:37:02:62:8e:1f:09:b6:59:2f:
fb:b3:84:96:92:c5:b2:a0:b5:97:19:92:4d:cb:8a:
bd:52:aa:92:49:04:62:1d:dd:16:39:c3:1f:f2:e5:
b0:50:7b:f0:60:58:e9:e5:b1:50:d8:43:9a:c6:b7:
2a:af:6d:98:d5:7a:c6:70:75:b3:59:01:4a:f6:78:
f9:d6:6b:a3:41:50:c0:ae:49:2f:6e:f3:29:62:eb:
a0:d4:e5:8c:bc:a7:44:f2:0c:94:9c:e0:32:ce:fa:
a7:b3:6a:b0:06:8f:25:04:90:c6:b1:a0:ee:3e:55:
bc:38:e8:6a:a7:ba:d1:6f:5c:4f:8a:9c:5a:34:cb:
ee:6c:e8:e1:f4:88:ac:e0:72:b6:fb:13:f9:06:e4:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:6A:54:6B:32:9C:3E:FE:55:7C:F1:2F:4C:D9:1A:CC:BC:3C:CD
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/PbFqVGsynD7-VXzxL0zZGsy8PM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.118.0/23
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4e:00:4d:40:81:70:05:23:c5:aa:44:39:16:8f:3d:6b:4a:
db:0f:f3:1e:d5:05:c1:b8:3b:5e:52:3f:da:0a:27:5e:00:15:
98:44:34:81:0c:fd:ee:6d:b9:9c:b5:0d:5f:5f:8c:72:ec:65:
64:f0:5a:ce:b1:b9:c7:91:6c:3a:39:e4:0c:f3:d0:09:c5:d5:
bc:14:35:37:20:b4:2b:9d:95:08:a9:74:56:5d:52:16:4b:74:
b6:ec:97:e3:17:23:82:d6:23:09:9f:75:d8:f2:0e:c3:9a:a0:
01:6e:1a:ef:c3:5a:ce:8f:71:87:82:3d:8d:eb:aa:fd:f9:f1:
41:3a:7e:32:09:e7:05:70:27:1c:04:91:ba:06:ac:5a:84:49:
c6:9f:f3:4a:03:33:26:a4:77:8a:87:e6:b2:91:b2:d5:93:49:
b9:0c:7a:8f:3e:d8:c0:c2:50:1f:f7:75:e5:75:91:ac:2b:17:
ec:d7:aa:a1:68:04:0d:70:bc:cc:3d:e9:9b:34:e9:b5:ba:e6:
22:31:4a:8b:5c:6b:29:22:a0:85:28:21:63:c9:ee:a7:b5:60:
18:2a:17:71:d2:8a:d6:d8:eb:ff:d7:28:9d:b2:ca:08:2b:18:
55:aa:75:1b:23:41:e5:9b:65:75:ac:3c:82:4e:07:de:a8:c4:
2e:95:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:15 2025 by rpki-client