Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Pzwt6ih_LJAe0s_fK-EP8MTfgUg.roa
File: Pzwt6ih_LJAe0s_fK-EP8MTfgUg.roa (raw, json)
Hash identifier: o0cbrTSpOsjTGBfzYgguGL35Hmvz0kGc2Ad7clqUjIQ=
Subject key identifier: 3F:3C:2D:EA:28:7F:2C:90:1E:D2:CF:DF:2B:E1:0F:F0:C4:DF:81:48
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C5301B2BA7CD496FAEAF883221C16
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Pzwt6ih_LJAe0s_fK-EP8MTfgUg.roa
Signing time: Thu 02 Jan 2025 09:50:20 +0000
ROA not before: Thu 02 Jan 2025 09:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8443
IP address blocks: 91.147.36.0/22 maxlen: 22
93.177.0.0/18 maxlen: 18
95.159.128.0/18 maxlen: 18
95.159.174.0/23 maxlen: 23
95.159.182.0/23 maxlen: 23
195.72.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:53:01:b2:ba:7c:d4:96:fa:ea:f8:83:22:1c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f3c2dea287f2c901ed2cfdf2be10ff0c4df8148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:6b:ea:76:ff:52:40:62:a5:3d:66:76:dc:
e3:85:40:b9:cf:44:d3:8f:48:c9:a0:db:0e:a2:cc:
9c:a1:3a:95:3c:84:8c:82:61:b0:81:d6:f8:19:50:
88:ca:9a:e0:06:8b:f8:11:0a:fb:2e:82:3c:0b:b4:
c2:70:b5:c7:a3:85:6f:38:02:26:80:7c:fa:b8:9e:
b4:42:af:6c:13:7f:b1:3c:1d:68:d1:96:dd:f7:28:
cc:a5:5d:79:c9:60:9c:85:78:6f:d1:34:f1:a8:cd:
90:fd:5c:b2:5f:e8:88:c3:45:39:f9:0b:ac:3c:bc:
e3:e1:d4:b6:29:af:2f:2f:97:bf:9e:36:3e:ff:f7:
0a:1e:1c:8f:dc:8e:35:9d:14:5e:25:29:d0:55:41:
40:88:f5:21:28:cd:30:53:00:8a:f3:0d:20:0d:79:
32:57:8a:be:06:f3:7c:bb:30:f6:62:4d:af:94:fa:
ee:fd:d7:4d:85:30:d7:4f:d6:c3:31:8c:4e:da:41:
6e:32:0f:a6:80:ff:a4:2c:6d:7c:b8:99:c0:0a:7a:
0f:3e:62:ca:67:9f:d5:8e:a2:b8:1b:28:a3:8c:a2:
f8:a0:5b:79:15:84:45:0e:5b:be:b0:02:5c:a8:04:
29:61:39:3a:06:b2:16:49:2d:2f:a8:a9:14:b4:a7:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:2D:EA:28:7F:2C:90:1E:D2:CF:DF:2B:E1:0F:F0:C4:DF:81:48
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Pzwt6ih_LJAe0s_fK-EP8MTfgUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.36.0/22
93.177.0.0/18
95.159.128.0/18
195.72.224.0/19
Signature Algorithm: sha256WithRSAEncryption
40:9a:73:c6:2a:5f:09:d3:e2:66:fe:10:3e:db:6b:2e:a3:8a:
31:ad:c5:1f:d6:3b:da:1c:6a:94:60:81:6a:ba:73:a3:ed:48:
d1:40:e0:47:95:8c:67:a9:9f:04:87:62:0f:1c:a1:e4:e5:35:
ca:ef:f7:19:b6:8f:5d:31:34:60:a0:33:b1:16:8b:35:bb:79:
e3:20:d1:82:b5:2c:49:6d:3f:99:48:35:9b:ce:47:62:c1:f0:
b3:4d:43:cb:c4:4a:f1:85:3c:63:73:90:60:e4:fc:e9:4f:16:
13:40:b2:91:aa:b5:64:32:b5:67:64:98:ec:e8:d3:69:ea:dd:
cb:97:5e:d8:ba:cc:72:27:d3:32:e9:1b:2b:15:41:94:d9:f9:
a5:68:43:4a:8b:d4:d2:1c:d2:be:fd:1c:d8:40:62:44:72:eb:
7d:60:fd:42:10:1d:e8:ca:aa:a6:55:99:b6:5c:8b:5e:60:4e:
c6:68:cd:f6:b7:2a:61:e7:21:74:e3:72:a0:74:12:aa:b1:f4:
51:f5:ca:c5:8e:f9:95:85:ae:4e:ae:30:e7:ef:55:90:a9:06:
73:e3:5e:e0:6b:91:b4:de:e1:c7:72:75:a5:e2:67:a5:7d:99:
5b:73:c5:f9:17:63:95:8b:40:7c:ae:d8:e9:27:30:31:6d:be:
e5:6f:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:41:32 2025 by rpki-client