Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/pAEDN-h1-DUGqiGuMkWdVhlgowg.roa
File: pAEDN-h1-DUGqiGuMkWdVhlgowg.roa (raw, json)
Hash identifier: 3zGPa3AJjPYig0kDedAY3IsrPUE9H1fVHWA5Xf9h6RE=
Subject key identifier: A4:01:03:37:E8:75:F8:35:06:AA:21:AE:32:45:9D:56:19:60:A3:08
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 019421B2569E99B43100404B2860B10A31ED
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/pAEDN-h1-DUGqiGuMkWdVhlgowg.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60592
IP address blocks: 91.224.58.0/24 maxlen: 24
193.150.130.0/23 maxlen: 23
193.150.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:56:9e:99:b4:31:00:40:4b:28:60:b1:0a:31:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4010337e875f83506aa21ae32459d561960a308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:80:d2:44:44:23:26:26:19:bf:a1:cc:50:
b5:5d:09:92:5f:28:c3:bb:37:3a:b9:76:52:be:52:
82:70:2f:49:cd:15:48:93:1f:bc:60:d1:90:27:d6:
91:58:b4:30:3b:95:6a:e6:78:f5:e9:52:65:13:2e:
5a:f9:90:66:8a:41:5f:fb:ea:22:57:9f:e9:73:6e:
5e:3c:ba:8f:80:ba:46:9a:fd:58:d0:5c:87:4d:05:
79:78:47:b8:3d:71:dd:f0:de:c3:4a:da:d7:4a:fd:
48:5f:b7:34:78:0b:a5:a0:e3:63:a7:76:e2:49:fc:
8f:1c:68:24:47:61:4c:30:0e:24:89:7d:0a:29:ba:
c1:c6:32:ad:4b:b2:35:ec:fb:e3:a1:ff:3d:3e:dd:
e4:00:ee:34:8c:e6:dd:26:d1:b4:96:0c:80:04:7c:
3e:2f:d4:a9:3a:58:4d:09:29:22:46:f1:6c:35:df:
2a:2a:f2:46:39:f3:3e:11:69:0a:21:90:ed:ef:8d:
50:cf:53:41:38:63:eb:9b:4a:34:22:d7:8b:8b:b2:
6e:7f:fb:d0:03:06:b2:ef:2c:8a:e7:24:95:77:3e:
6b:31:6b:b1:b8:29:71:7f:9f:15:23:dc:90:09:ae:
6b:c3:b7:d9:ca:32:ac:ee:04:db:01:ee:b9:87:ea:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:03:37:E8:75:F8:35:06:AA:21:AE:32:45:9D:56:19:60:A3:08
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/pAEDN-h1-DUGqiGuMkWdVhlgowg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.58.0/24
193.150.130.0-193.150.133.255
Signature Algorithm: sha256WithRSAEncryption
68:d2:38:93:8f:6f:c3:c7:b0:a8:5d:ea:ba:bd:e6:98:27:72:
d1:72:1f:b6:f3:c4:9f:3a:d9:57:f4:ab:46:cd:a9:14:0c:e4:
2b:ce:dd:05:e0:8f:37:92:20:29:a2:58:e9:f9:5b:6a:1b:b0:
ef:b1:cf:c1:04:92:f5:42:1f:d9:d5:5c:04:87:9d:17:95:05:
00:df:c0:98:8a:b5:c6:b6:4e:01:62:e5:7c:37:06:77:71:65:
fa:23:d7:31:12:89:df:f6:4d:1b:f3:94:03:a2:c1:60:b5:1c:
a4:53:22:81:f6:71:ac:10:01:92:cd:a3:0d:71:a1:3e:f0:5b:
2c:cc:0e:40:d5:1a:30:40:9a:c1:fd:c2:a4:da:0e:bf:0f:0c:
8e:54:0c:1b:cc:80:3c:70:09:a2:d1:34:6d:25:84:64:c5:df:
57:0c:1a:a1:fb:3f:29:47:07:b6:e2:de:e9:5e:b0:c2:1e:96:
26:88:38:91:df:21:cd:5f:7f:7b:91:7b:be:c5:af:21:21:11:
2c:f9:c9:e9:f1:dd:90:0b:26:6f:da:02:3f:5e:f4:13:54:80:
07:db:1a:f2:df:9d:ce:09:05:80:1d:72:97:9e:c4:44:d3:be:
d2:62:ef:d3:5a:cb:73:9f:63:30:4f:c5:9b:9c:3a:52:a4:db:
0b:c4:e7:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:55:06 2025 by rpki-client