Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/PPj3izdANTPOG9FQYtIHYchyjRw.roa
File: PPj3izdANTPOG9FQYtIHYchyjRw.roa (raw, json)
Hash identifier: jE7bR+K8GQ13CqQNdOkrb03t6MGrMEYn6EGrRlPQv3s=
Subject key identifier: 3C:F8:F7:8B:37:40:35:33:CE:1B:D1:50:62:D2:07:61:C8:72:8D:1C
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0196A8341FB071C2514AB4C72EFE589EE1A7
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/PPj3izdANTPOG9FQYtIHYchyjRw.roa
Signing time: Wed 07 May 2025 00:45:10 +0000
ROA not before: Wed 07 May 2025 00:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1054
IP address blocks: 91.217.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:34:1f:b0:71:c2:51:4a:b4:c7:2e:fe:58:9e:e1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 7 00:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cf8f78b37403533ce1bd15062d20761c8728d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:76:d6:b2:1e:ba:9d:7a:e3:09:7c:5c:99:
af:b0:d4:79:f2:07:1f:65:2e:95:10:15:81:17:99:
d8:17:4f:17:c2:c1:76:f0:56:51:92:19:fa:cd:d7:
f1:13:0a:df:9b:16:52:d4:76:59:65:8e:16:0d:33:
c2:bf:de:1d:68:a0:4c:61:b7:07:e9:57:67:da:18:
7e:df:67:cb:9d:b7:25:55:08:ac:29:14:14:de:25:
e9:95:60:1b:94:cb:7e:31:5c:ec:0f:76:ba:8e:d9:
de:1d:c1:dc:2a:d9:17:f0:c7:c0:61:c2:7d:5e:df:
83:fb:2e:c2:71:6b:5e:76:2e:1c:d4:b5:5c:d5:7c:
eb:c6:9c:d7:98:b4:59:03:62:72:ba:c1:3b:95:73:
ad:ef:62:10:59:6c:1e:ee:cb:96:fc:98:5d:16:de:
28:68:ad:a8:01:b7:76:1a:39:76:19:2b:8f:bc:cc:
bd:cb:9e:0c:32:b6:6b:4a:f3:8c:8a:f1:33:00:0d:
e6:6c:f1:18:ec:6b:88:54:13:00:72:ea:ca:ce:cd:
dd:84:c0:56:bb:b3:e8:33:7d:05:b8:b1:c1:74:57:
eb:55:27:49:31:d1:54:f1:3a:70:8b:aa:1b:43:fe:
e1:26:8d:e4:50:39:e1:b1:d7:35:d3:5b:d5:67:c0:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F8:F7:8B:37:40:35:33:CE:1B:D1:50:62:D2:07:61:C8:72:8D:1C
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/PPj3izdANTPOG9FQYtIHYchyjRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f8:44:ba:bb:93:90:c2:ec:7a:78:5e:bc:2c:b3:40:fa:93:
08:71:76:45:78:09:79:1b:2d:e8:f0:7b:59:4b:99:a0:2a:c2:
20:f9:52:61:c0:64:1a:60:ff:e5:2f:2c:f4:0a:91:3c:ab:1e:
04:2e:82:52:5b:fb:c9:73:97:b3:34:c9:3c:be:1b:d7:7e:a6:
93:c4:93:a1:bb:d7:0a:e6:d6:fd:ec:4b:8b:b6:28:a7:56:23:
b1:87:b3:d2:9c:5a:dd:1c:3c:71:87:bb:d7:8b:66:33:24:18:
66:91:34:7d:20:d5:c0:3b:5f:6a:37:a9:d3:2c:88:32:11:32:
ba:c9:6b:be:ce:ce:7f:ce:f9:ee:5e:73:29:8c:92:bb:45:a9:
46:34:f3:ec:bb:15:18:aa:01:ef:7d:9c:24:54:2a:84:0d:ae:
39:c1:e7:58:a1:3b:71:51:b0:a2:65:c3:13:21:d9:97:71:3a:
ca:38:c0:26:dc:ae:8a:1d:40:9c:57:9c:af:67:d4:e1:e3:8b:
0a:97:92:59:8c:05:62:90:02:b0:81:8a:ba:9a:0c:76:2e:21:
b7:9a:2e:78:e2:3a:31:b3:fc:95:45:ce:b2:49:b7:b2:da:23:
e7:0b:2f:f7:36:c6:a6:35:bf:9a:a7:f8:09:2f:bf:56:a1:ff:
3f:21:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:58:05 2025 by rpki-client