Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/PvgwRlUqx5l8W4N83zrKdHTwTaY.roa
File: PvgwRlUqx5l8W4N83zrKdHTwTaY.roa (raw, json)
Hash identifier: HJmAy6plt7EaRjG3H9OUj++QzEsZOYTODS8MTJferfU=
Subject key identifier: 3E:F8:30:46:55:2A:C7:99:7C:5B:83:7C:DF:3A:CA:74:74:F0:4D:A6
Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial: 019548174722869DBF91B38E3807A0BC643C
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/PvgwRlUqx5l8W4N83zrKdHTwTaY.roa
Signing time: Thu 27 Feb 2025 15:47:19 +0000
ROA not before: Thu 27 Feb 2025 15:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 945
IP address blocks: 194.116.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:17:47:22:86:9d:bf:91:b3:8e:38:07:a0:bc:64:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Validity
Not Before: Feb 27 15:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ef83046552ac7997c5b837cdf3aca7474f04da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:d0:a2:3a:e0:ae:0d:3a:90:19:6f:27:3e:
20:62:38:bf:ac:ef:dc:65:8e:89:17:43:46:5e:7b:
bd:4e:7b:16:66:87:9b:62:a8:80:a3:c3:05:e2:26:
26:99:49:fa:05:ac:4c:af:5a:ca:6e:bd:15:dd:70:
35:ef:88:3a:fa:3f:dc:25:8c:cc:08:aa:75:3b:5b:
f2:dd:31:72:89:ca:51:6b:47:65:fd:db:b3:09:48:
9b:9e:a9:68:7d:bc:3e:4e:94:8d:b4:75:4e:04:e1:
ff:48:1f:5a:f5:7d:17:7d:e0:ee:0a:fc:76:48:9b:
58:19:1c:2e:ff:76:10:06:34:e7:32:18:43:85:65:
93:84:dd:34:b6:15:af:a9:af:98:34:0f:f2:54:85:
12:ed:80:c3:50:f0:cd:92:cc:3b:37:ad:72:3e:ec:
fc:f9:91:dd:bd:36:94:17:a7:06:af:3f:f3:7f:a2:
13:72:82:05:7f:19:05:1c:27:ee:e6:3d:cc:8b:e7:
41:a6:99:9f:1b:8a:f1:79:59:11:23:d3:86:3a:b1:
cd:48:9d:57:d7:22:88:4e:3d:6f:68:2f:66:f8:1e:
0e:f2:f1:51:09:26:f1:4e:8a:2a:7d:84:e2:41:6b:
6c:02:94:1c:d8:74:ab:5c:54:1d:5b:03:65:8c:6b:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:30:46:55:2A:C7:99:7C:5B:83:7C:DF:3A:CA:74:74:F0:4D:A6
X509v3 Authority Key Identifier:
keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/PvgwRlUqx5l8W4N83zrKdHTwTaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e6:d4:fc:d7:b1:15:3e:50:62:16:80:aa:99:c9:6b:92:af:
d7:f3:1a:94:57:7c:77:77:9f:fe:eb:85:46:76:21:24:c2:39:
1e:4f:a2:ed:85:ae:4b:67:d4:e8:ed:31:de:69:c3:7e:08:1d:
17:40:08:95:ca:dd:38:7a:a7:88:2d:e4:88:b8:1d:34:16:4a:
46:ac:71:5e:e5:65:35:27:bf:8f:a7:21:cf:e8:52:ee:ea:9c:
7d:7e:b1:67:0c:d2:11:26:30:70:13:46:27:5b:88:7c:e9:dd:
77:f8:cd:c8:92:32:b4:6d:64:90:f7:f8:94:46:04:e7:55:c8:
4d:49:8c:6a:e1:ef:01:7d:4a:22:2b:2d:5e:d2:2b:b7:45:30:
71:78:e2:dd:cd:f2:5a:ac:35:fe:bf:f4:1c:1e:d0:ee:dc:13:
fe:b5:ab:f1:72:87:c2:19:14:7f:ce:bb:ca:e5:e2:e1:03:ba:
99:57:e1:19:c1:c9:c6:62:bb:04:39:aa:3f:35:fd:21:3d:cb:
47:9a:8f:00:1b:43:25:b2:4c:fb:00:cf:20:74:be:34:f6:9b:
4c:c5:c2:6b:32:85:94:e9:c1:42:de:3a:e7:1e:a2:59:f8:d8:
70:45:63:41:f0:44:7d:6e:3d:89:28:d6:f0:89:e3:01:c8:b8:
cd:73:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:13 2025 by rpki-client