Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PCHNCyRTPyaRcxtZ0jcMVmDjbwk.roa
File: PCHNCyRTPyaRcxtZ0jcMVmDjbwk.roa (raw, json)
Hash identifier: +96pm/EvN9onQ85yRF5RehbA85LnkkjRWJedypr/scQ=
Subject key identifier: 3C:21:CD:0B:24:53:3F:26:91:73:1B:59:D2:37:0C:56:60:E3:6F:09
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0196BF2626971C0A5331F9F5676A256BCD90
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PCHNCyRTPyaRcxtZ0jcMVmDjbwk.roa
Signing time: Sun 11 May 2025 11:41:10 +0000
ROA not before: Sun 11 May 2025 11:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a07:f240::/29 maxlen: 29
2a0b:b480::/29 maxlen: 29
2a10:a9c0::/29 maxlen: 29
2a13:5040::/29 maxlen: 29
2a13:cdc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:26:26:97:1c:0a:53:31:f9:f5:67:6a:25:6b:cd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 11 11:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c21cd0b24533f2691731b59d2370c5660e36f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:36:a4:1c:e9:be:d4:62:42:9a:95:6d:23:e9:
4a:4b:12:a7:4d:82:94:51:41:59:6c:f0:a8:2a:12:
1a:f9:20:44:cc:86:63:4a:ad:d4:8c:5e:de:23:cc:
5b:27:2b:1f:52:c8:ba:a0:06:ce:54:89:a7:df:19:
6a:97:02:93:4d:cd:5c:e6:8b:8b:90:a4:c5:33:85:
79:74:38:6a:d3:fe:6c:a8:91:a6:6e:11:62:78:7c:
b1:7e:75:37:e5:c7:aa:22:bc:04:15:bb:4b:fa:ef:
00:8c:c9:ac:d5:a4:03:74:b0:ad:5b:a9:dd:ca:75:
ec:d9:16:5b:cb:8b:dd:d4:b1:db:8d:a0:4d:cf:62:
c2:c1:54:72:29:8f:df:60:ae:7a:97:80:1b:f6:7a:
8e:0e:79:05:c7:7e:ce:cd:3c:73:f0:1e:9a:84:8c:
4e:6d:e3:7f:45:d8:db:75:8e:68:1d:58:9d:67:45:
92:19:81:c0:ec:c8:38:a8:49:c0:ae:57:f6:a4:6c:
ef:35:94:bc:1d:e3:4d:f3:24:97:07:9d:2d:06:e1:
ab:85:cb:3d:72:31:59:4b:15:ce:ba:26:37:14:3b:
93:71:ae:33:7a:ab:af:51:b6:8a:51:29:53:6f:e1:
09:37:49:da:43:6b:b5:9e:13:8b:b9:d7:4d:4b:ed:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:CD:0B:24:53:3F:26:91:73:1B:59:D2:37:0C:56:60:E3:6F:09
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PCHNCyRTPyaRcxtZ0jcMVmDjbwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0b:b480::/29
2a10:a9c0::/29
2a13:5040::/29
2a13:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:25:1a:07:84:0f:93:a1:05:72:85:1e:e8:97:62:9c:77:e0:
13:69:bd:d2:ce:84:7f:a9:a6:4c:8a:12:70:af:27:46:02:cd:
9e:46:b9:fc:fa:97:a4:04:75:cb:a3:fc:eb:82:69:88:88:4b:
ea:cb:05:17:ef:3e:a6:3f:83:78:63:8b:e4:fc:5b:9b:88:0d:
8a:c5:3c:c6:5c:f6:0e:15:01:9c:52:60:6b:d6:4d:cf:45:c2:
14:55:f5:d4:6c:68:c1:25:b4:b3:d2:8b:bd:8e:ec:d0:08:df:
f2:dd:a4:e4:49:d6:b5:48:6e:1b:c4:b8:7e:3a:18:18:a8:11:
e3:4a:35:fb:99:9a:74:7d:75:7b:dd:28:3a:0c:cc:92:41:f6:
a4:7c:c9:90:02:03:e5:9b:9d:0e:e8:d9:cf:eb:81:77:34:4b:
5d:0f:fa:2f:96:1e:46:1a:d4:82:e6:ab:54:32:52:3c:4c:38:
0e:bf:e4:7b:ac:6d:31:f7:38:dc:12:98:33:0d:c4:0d:11:4b:
2c:20:cd:d4:d1:36:8b:28:c8:eb:3e:b4:31:06:05:ed:e9:8f:
1c:b6:50:b0:d0:d6:e6:65:17:1b:a0:89:6d:b2:c8:a2:f0:80:
51:00:97:4d:5d:20:f4:14:1c:d6:ab:1b:9a:5e:b5:63:c4:f2:
ee:81:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:45:48 2025 by rpki-client