Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PLk9TutEnODtjh_cFDaldAbB5PY.roa
File: PLk9TutEnODtjh_cFDaldAbB5PY.roa (raw, json)
Hash identifier: qkESS4s55n9T3InGFLcKi+s8NRQZoUu8pWBH04Sl4oY=
Subject key identifier: 3C:B9:3D:4E:EB:44:9C:E0:ED:8E:1F:DC:14:36:A5:74:06:C1:E4:F6
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0197A382B014F67009A2E38AAAA126CA1689
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PLk9TutEnODtjh_cFDaldAbB5PY.roa
Signing time: Tue 24 Jun 2025 19:55:40 +0000
ROA not before: Tue 24 Jun 2025 19:55:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 188.209.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a3:82:b0:14:f6:70:09:a2:e3:8a:aa:a1:26:ca:16:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Jun 24 19:55:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb93d4eeb449ce0ed8e1fdc1436a57406c1e4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:7a:f2:f9:3e:ae:5d:1c:7f:10:ff:55:b0:
de:43:d6:d4:e3:f2:46:ad:f7:8a:4c:b2:19:3b:e7:
0f:6d:9c:ff:35:48:e3:a4:1b:ac:65:1d:ba:7c:15:
9e:ce:3b:e6:f5:23:68:49:66:e4:17:4a:98:25:82:
9a:68:9a:88:d7:9b:26:9b:fe:4c:6b:40:bd:15:61:
34:6c:18:8d:4a:05:90:c8:3c:9f:ab:e7:a1:43:6e:
f8:d3:ba:e2:b2:92:7b:03:f0:d0:28:0e:23:53:08:
21:a1:b3:e0:aa:2e:fc:bc:f2:a9:25:5c:0f:9a:10:
53:bc:6b:99:7e:01:b7:39:6e:df:96:ff:ae:28:0f:
02:e5:de:bf:d4:70:5d:07:d2:5a:8e:a6:a6:30:9d:
75:79:a7:46:9c:58:29:a6:15:c5:c3:f0:94:d1:c3:
68:e7:20:6b:ea:df:91:9f:cb:78:96:c0:93:b1:bb:
b5:eb:61:f5:d0:ee:2f:4b:eb:6f:80:ed:1a:4a:b6:
5c:69:8e:2a:4d:ed:68:71:fc:b3:18:49:6b:20:b8:
9c:66:8f:4a:3a:2e:a9:bf:74:96:2d:f8:3f:2b:03:
6c:3f:51:80:ee:0e:27:5f:34:07:d9:8e:ae:0c:33:
25:ef:de:20:64:4e:70:79:3b:f1:32:ef:82:5b:0d:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:3D:4E:EB:44:9C:E0:ED:8E:1F:DC:14:36:A5:74:06:C1:E4:F6
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PLk9TutEnODtjh_cFDaldAbB5PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c8:6e:ec:60:08:09:eb:46:97:5a:15:0d:58:17:9d:89:8c:
68:e8:86:58:66:82:d5:67:6e:0e:cd:b6:d4:e9:dd:ea:b2:80:
a1:6b:06:37:19:1f:99:bf:f5:1d:46:5c:19:0a:08:1f:93:13:
d2:b5:ae:2e:9e:75:7d:1d:18:5f:4b:4f:9b:66:8e:7d:0b:52:
58:17:39:ec:76:86:ad:a6:04:64:c3:bb:8b:44:e6:d2:f5:73:
d0:ad:e6:fc:e8:ca:e7:05:ac:e6:02:e2:0b:3b:54:12:36:98:
35:12:fc:b7:6a:32:a0:ff:9a:ce:e4:ec:82:ef:e7:37:65:ed:
a2:78:34:24:5f:c5:f1:f9:fb:84:7e:e8:7f:29:bc:97:ea:33:
77:18:c7:f1:e2:87:20:91:de:ae:6b:27:7f:ad:82:6d:7e:a2:
e1:18:e0:ce:b3:8f:2b:21:10:f5:95:55:b2:d7:99:ba:29:ec:
50:a2:75:e8:51:18:08:5e:6c:6f:48:11:02:d7:8d:4d:2e:fa:
b1:a6:ab:9a:0d:ed:66:2f:1c:31:2e:dd:23:e8:00:45:80:44:
8b:a6:3d:71:bf:b2:15:2d:98:20:df:dd:10:8f:41:d5:32:f8:
a3:54:ee:c2:d4:71:a7:e5:b8:6d:08:7e:70:b2:d6:71:ea:cb:
b9:d3:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:06 2025 by rpki-client