Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pbstzXprxQ_2h1fYCvh7hGnFtxE.roa
File: pbstzXprxQ_2h1fYCvh7hGnFtxE.roa (raw, json)
Hash identifier: 8R2FpGn0FkaVFxjBR316An56384LFtz5CeDRnrOaQ80=
Subject key identifier: A5:BB:2D:CD:7A:6B:C5:0F:F6:87:57:D8:0A:F8:7B:84:69:C5:B7:11
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0196A0A85C0751870AF3C8E1E2E366E64CBD
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pbstzXprxQ_2h1fYCvh7hGnFtxE.roa
Signing time: Mon 05 May 2025 13:35:10 +0000
ROA not before: Mon 05 May 2025 13:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.142.24.0/24 maxlen: 24
103.111.0.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
194.113.94.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:a8:5c:07:51:87:0a:f3:c8:e1:e2:e3:66:e6:4c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: May 5 13:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5bb2dcd7a6bc50ff68757d80af87b8469c5b711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:17:b2:c6:af:39:b1:72:16:ba:38:46:da:
c1:21:e9:ff:fb:b6:cc:cd:37:c7:87:75:e5:79:40:
12:82:da:19:26:c1:77:a4:77:0e:35:50:a4:0a:b5:
dd:a7:d7:6c:66:a8:9d:9a:6a:65:28:ce:f0:e7:91:
4f:4b:5c:ba:c1:32:8a:13:1d:95:fa:af:4b:54:52:
cb:fc:2d:15:df:18:cb:ce:2a:c2:88:8e:b4:0c:dc:
31:d3:1e:b9:c1:af:21:25:26:a6:4c:0c:6a:43:be:
f1:d3:6a:60:0a:3c:da:fc:17:74:cc:fe:83:96:b9:
0d:80:69:87:9a:33:53:46:13:65:c1:3f:78:1b:b2:
8a:98:d6:22:9b:a3:d6:b1:53:dc:43:2f:28:0f:2d:
2c:1f:f4:d4:e2:80:35:9a:f7:dc:fe:da:d5:e7:6e:
21:22:2b:d5:f3:43:f9:7b:04:2f:b3:a4:f9:14:cd:
5b:ca:17:c1:0c:3e:d1:06:8f:95:e7:16:45:88:1e:
8b:7e:d0:3e:11:aa:47:2e:b8:bc:cb:ef:97:9d:05:
0a:fe:2c:bf:ab:ab:6b:43:66:5b:d4:6e:41:de:ef:
ab:84:35:c8:89:fc:bd:9d:3a:fd:24:f9:b4:3a:a9:
92:69:2a:da:c8:fe:90:58:19:be:8c:af:4f:7f:4a:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BB:2D:CD:7A:6B:C5:0F:F6:87:57:D8:0A:F8:7B:84:69:C5:B7:11
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pbstzXprxQ_2h1fYCvh7hGnFtxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.24.0/24
103.111.0.0/22
185.233.124.0/22
194.113.94.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:01:dc:7e:2e:bd:7e:55:2d:08:41:38:25:70:fc:7d:bd:c4:
51:11:86:52:46:79:8e:8d:27:9e:c1:c7:52:0d:b8:e4:22:90:
9a:64:e4:f0:54:7b:b6:fd:ad:6a:bd:b0:98:93:ca:14:8f:67:
1c:14:ae:3c:54:90:7b:75:8d:e3:ef:c7:86:79:3b:cb:a2:54:
f7:b6:c0:25:a2:64:5d:d2:af:41:6c:3f:df:32:72:9e:c6:9d:
d0:bf:89:24:de:99:15:dc:22:c6:b2:e6:e0:73:c2:08:ba:40:
ba:0e:d5:12:7e:ed:6d:d6:84:56:b8:e9:e6:b4:47:47:26:34:
d3:1b:ad:2e:ff:c1:b9:54:78:40:a9:ad:ad:55:d6:04:ec:a9:
d3:32:b4:62:ee:73:e3:d5:c3:d2:fc:4e:5c:8e:83:5f:20:c7:
e6:2b:0c:0d:e1:af:4f:5a:99:ce:4e:6a:6a:64:80:31:82:65:
1d:d0:2f:6c:b7:25:09:c2:3f:e4:84:8c:3d:56:4d:c1:4d:77:
1b:41:03:31:f2:5d:69:cf:50:d9:9e:c3:4c:b6:d1:61:9a:f1:
70:56:3e:a5:e3:3e:c5:9e:96:0e:68:90:66:b5:76:5d:34:70:
ef:4b:41:77:71:81:28:ff:d6:09:8e:5f:ba:9d:db:bb:92:cb:
99:3b:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:38:41 2025 by rpki-client