Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/P77Q3SiMGocGRB6eMcUK3MHjTkI.roa
File: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (raw, json)
Hash identifier: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=
Subject key identifier: 3F:BE:D0:DD:28:8C:1A:87:06:44:1E:9E:31:C5:0A:DC:C1:E3:4E:42
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 019421443295D38F8E1FF11E485025ABF9E1
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/P77Q3SiMGocGRB6eMcUK3MHjTkI.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58909
IP address blocks: 188.42.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:32:95:d3:8f:8e:1f:f1:1e:48:50:25:ab:f9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fbed0dd288c1a8706441e9e31c50adcc1e34e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:c4:1c:56:9a:38:d1:f0:a5:2e:4f:34:1f:
e1:1d:70:c3:69:b0:75:7b:66:a0:1a:c2:40:f1:50:
18:17:f1:0e:9c:8a:b2:7f:85:22:e3:da:94:50:db:
41:f3:48:56:13:63:d1:ed:4a:df:a4:b9:2b:7a:95:
02:ea:ce:c0:6b:4b:73:45:df:26:8a:ad:a6:13:00:
ff:13:6a:47:b4:cf:48:14:86:69:a8:cb:cf:6a:26:
c9:78:95:ae:7d:6f:9b:59:dc:de:0f:a7:3e:2e:fa:
25:85:81:5a:10:1f:57:05:8c:df:d6:4a:b3:ff:ec:
4e:3a:7c:c7:5d:15:51:5f:a9:ae:76:0e:40:c3:a4:
64:0f:07:0b:bc:29:9c:11:e4:65:0f:5f:8e:1a:0c:
b1:a7:4b:28:20:47:02:fd:e7:6f:87:6c:2d:8b:6d:
17:85:2c:f7:a6:7e:76:f8:4c:cd:58:7b:5a:39:0f:
89:4a:55:9e:c9:8c:82:05:9c:99:f0:2d:d5:78:5f:
9f:02:42:12:c5:3b:c1:56:aa:05:60:e3:ec:20:0c:
72:63:39:26:5b:44:99:a6:ed:6c:c7:f5:da:e5:ea:
e5:62:23:56:a2:92:34:0c:1e:24:43:f2:50:ca:69:
81:1b:72:3e:af:9c:5d:04:a0:fe:29:09:4a:91:df:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:D0:DD:28:8C:1A:87:06:44:1E:9E:31:C5:0A:DC:C1:E3:4E:42
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/P77Q3SiMGocGRB6eMcUK3MHjTkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.42.96.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:f2:e4:4e:0e:88:25:d5:25:a7:20:be:38:15:c5:89:ec:5b:
e9:3c:72:36:4a:9a:04:34:f8:b8:ea:02:71:81:3d:37:f4:53:
7d:04:49:a8:b0:3b:b7:3a:b1:7a:dd:5c:36:0d:14:34:b5:e2:
58:c0:22:8a:29:34:e8:8b:cb:af:c9:fa:8a:b3:23:f5:fc:5e:
ae:e8:f5:38:4d:01:88:d8:aa:47:cc:67:bb:7e:47:42:e4:fd:
e4:d0:e3:f9:e0:62:8d:1b:51:ec:f8:f9:16:80:d8:39:48:09:
c8:df:89:ab:b2:80:d8:1d:fa:ec:bb:e9:cf:97:84:08:5d:2f:
c5:78:c4:9e:e6:93:58:c8:3d:1d:d3:86:7c:af:38:52:53:df:
b1:29:1f:fe:60:19:ec:86:8c:74:2b:e7:b4:48:9c:60:91:cc:
96:4d:e3:80:aa:88:b2:c2:7e:ac:db:ad:00:62:e3:e2:b0:f7:
0e:aa:94:7c:f9:08:d0:99:5f:eb:8a:34:aa:da:e5:01:36:a7:
6a:ca:b6:48:bb:18:74:74:6c:ee:5a:37:63:ec:c1:4a:f2:23:
0b:c0:22:c5:e1:39:5c:6c:5d:c4:2f:6f:d6:0e:2d:a9:41:78:
b2:d8:77:57:e6:49:6f:bd:25:18:82:0f:1d:60:7f:1a:ae:56:
ae:74:19:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRDKV04+OH/EeSFAlq/nhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDNlY2I4ZjcxMWUwYjkyYjUwNWI4YTBmN2E1ZWUwNDIy
OTEzOTUwHhcNMjUwMTAxMDk0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmJlZDBkZDI4OGMxYTg3MDY0NDFlOWUzMWM1MGFkY2MxZTM0ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBLEHFaaONHwpS5PNB/hHXDDabB1
e2agGsJA8VAYF/EOnIqyf4Ui49qUUNtB80hWE2PR7UrfpLkrepUC6s7Aa0tzRd8m
iq2mEwD/E2pHtM9IFIZpqMvPaibJeJWufW+bWdzeD6c+LvolhYFaEB9XBYzf1kqz
/+xOOnzHXRVRX6mudg5Aw6RkDwcLvCmcEeRlD1+OGgyxp0soIEcC/edvh2wti20X
hSz3pn52+EzNWHtaOQ+JSlWeyYyCBZyZ8C3VeF+fAkISxTvBVqoFYOPsIAxyYzkm
W0SZpu1sx/Xa5erlYiNWopI0DB4kQ/JQymmBG3I+r5xdBKD+KQlKkd8jZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD++0N0ojBqHBkQenjHFCtzB405CMB8GA1UdIwQY
MBaAFLjT7Lj3EeC5K1Bbig96XuBCKROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMt
YTE4NjFlNTM1NDRkLzEvUDc3UTNTaU1Hb2NHUkI2ZU1jVUszTUhqVGtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMtYTE4NjFlNTM1NDRk
LzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvCpgMA0G
CSqGSIb3DQEBCwUAA4IBAQBt8uRODogl1SWnIL44FcWJ7FvpPHI2SpoENPi46gJx
gT039FN9BEmosDu3OrF63Vw2DRQ0teJYwCKKKTToi8uvyfqKsyP1/F6u6PU4TQGI
2KpHzGe7fkdC5P3k0OP54GKNG1Hs+PkWgNg5SAnI34mrsoDYHfrsu+nPl4QIXS/F
eMSe5pNYyD0d04Z8rzhSU9+xKR/+YBnshox0K+e0SJxgkcyWTeOAqoiywn6s260A
YuPisPcOqpR8+QjQmV/rijSq2uUBNqdqyrZIuxh0dGzuWjdj7MFK8iMLwCLF4Tlc
bF3EL2/WDi2pQXiy2HdX5klvvSUYgg8dYH8arlaudBll
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:10:59 2025 by rpki-client