Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PpcXV4DxgRPPDMJiaVLofKygIBU.roa
File: PpcXV4DxgRPPDMJiaVLofKygIBU.roa (raw, json)
Hash identifier: fclzkRxZ6p8JkgYEq2mqNhD1t+VltJ6/CO652PjN/M8=
Subject key identifier: 3E:97:17:57:80:F1:81:13:CF:0C:C2:62:69:52:E8:7C:AC:A0:20:15
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746C0FDD801AFE57F4B1C0A0C174C24
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PpcXV4DxgRPPDMJiaVLofKygIBU.roa
Signing time: Thu 02 Jan 2025 13:48:55 +0000
ROA not before: Thu 02 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216394
IP address blocks: 77.92.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:c0:fd:d8:01:af:e5:7f:4b:1c:0a:0c:17:4c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e97175780f18113cf0cc2626952e87caca02015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:40:bc:e0:16:55:36:6d:36:a4:d8:8c:b8:
d2:79:eb:8b:44:67:97:d9:82:9d:86:aa:c5:f3:2d:
74:a8:d4:13:7d:ba:16:79:fd:5f:91:70:28:c2:3e:
d1:b0:48:97:93:c6:9c:fa:11:21:27:f4:7d:92:06:
53:9c:8a:73:82:ea:1c:bf:4d:d4:c2:c7:64:07:78:
7d:00:92:a4:ed:b2:04:0a:25:ec:cd:00:3f:38:e5:
e0:ac:bc:ed:20:e5:02:c0:b2:48:2a:36:9f:25:41:
57:33:2d:22:dd:14:5c:b5:cb:18:94:86:55:ea:f9:
ed:40:a1:54:99:4d:8f:c5:38:72:37:12:b3:dc:a0:
b9:d9:84:7c:08:48:14:66:a8:c2:ca:88:4f:b3:dd:
40:83:77:01:f6:0a:0b:99:c2:71:cd:d4:49:c5:34:
b2:e5:5e:57:ba:b2:80:0b:8b:ee:82:33:b5:12:d4:
3c:14:91:c0:46:1b:5e:74:29:f9:be:c2:02:55:65:
63:7a:8b:f8:29:9c:39:22:ce:7d:c7:8d:68:38:c8:
50:98:ad:18:05:1e:0a:20:07:a7:a0:d1:4c:dc:b3:
16:15:fe:8f:5c:aa:2f:7a:a5:c7:4e:87:d9:d4:a1:
0d:16:71:0c:b6:6e:07:4c:01:64:4d:87:3d:4b:bd:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:17:57:80:F1:81:13:CF:0C:C2:62:69:52:E8:7C:AC:A0:20:15
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PpcXV4DxgRPPDMJiaVLofKygIBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5c:bc:97:12:a2:3f:a4:66:a8:9b:a2:90:eb:ad:1c:68:eb:
17:e8:b8:af:88:d3:a9:6f:66:f0:fb:85:d9:83:cf:3b:09:50:
a5:be:db:39:b2:a4:d2:c2:45:e5:3e:91:26:ea:32:d7:84:57:
f3:69:94:6e:fe:03:91:8c:be:52:16:c0:3c:a3:65:a6:da:ea:
3d:61:14:1d:79:00:59:56:09:a1:e2:6f:2f:5d:e5:30:f9:a6:
80:01:0f:ef:87:38:eb:39:02:20:7e:f9:0c:ec:a4:ff:66:61:
35:c8:3e:b9:17:cd:72:61:91:5b:07:43:2a:d9:d7:6c:ed:bb:
53:23:52:9d:7e:2e:04:dc:0e:45:df:02:ef:11:43:ea:aa:95:
b4:83:e0:a7:86:ab:2a:26:8a:de:17:bc:35:91:e9:20:83:cb:
af:24:aa:34:ea:b8:e2:38:11:26:4b:e2:2e:7e:a2:35:89:50:
b8:13:03:b2:60:9c:81:27:ae:98:62:b8:8a:28:d7:4f:5a:e3:
d9:4d:11:0a:6e:16:1d:5a:db:19:be:64:3e:64:31:97:b6:d3:
2c:61:b7:94:52:7d:f3:88:4f:65:3d:1f:a5:0b:9c:b4:48:13:
03:49:82:07:6a:f0:4d:8c:66:2c:a7:91:e8:fe:d4:fd:be:84:
96:12:bd:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRsD92AGv5X9LHAoMF0wkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMTAyMTM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTk3MTc1NzgwZjE4MTEzY2YwY2MyNjI2OTUyZTg3Y2FjYTAyMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQpAvOAWVTZtNqTYjLjSeeuLRGeX
2YKdhqrF8y10qNQTfboWef1fkXAowj7RsEiXk8ac+hEhJ/R9kgZTnIpzguocv03U
wsdkB3h9AJKk7bIECiXszQA/OOXgrLztIOUCwLJIKjafJUFXMy0i3RRctcsYlIZV
6vntQKFUmU2PxThyNxKz3KC52YR8CEgUZqjCyohPs91Ag3cB9goLmcJxzdRJxTSy
5V5XurKAC4vugjO1EtQ8FJHARhtedCn5vsICVWVjeov4KZw5Is59x41oOMhQmK0Y
BR4KIAenoNFM3LMWFf6PXKoveqXHTofZ1KENFnEMtm4HTAFkTYc9S72LaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD6XF1eA8YETzwzCYmlS6HysoCAVMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvUHBjWFY0RHhnUlBQRE1KaWFWTG9mS3lnSUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyXMA0G
CSqGSIb3DQEBCwUAA4IBAQB6XLyXEqI/pGaom6KQ660caOsX6LiviNOpb2bw+4XZ
g887CVClvts5sqTSwkXlPpEm6jLXhFfzaZRu/gORjL5SFsA8o2Wm2uo9YRQdeQBZ
Vgmh4m8vXeUw+aaAAQ/vhzjrOQIgfvkM7KT/ZmE1yD65F81yYZFbB0Mq2dds7btT
I1Kdfi4E3A5F3wLvEUPqqpW0g+CnhqsqJoreF7w1kekgg8uvJKo06rjiOBEmS+Iu
fqI1iVC4EwOyYJyBJ66YYriKKNdPWuPZTREKbhYdWtsZvmQ+ZDGXttMsYbeUUn3z
iE9lPR+lC5y0SBMDSYIHavBNjGYsp5Ho/tT9voSWEr0Z
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:28 2025 by rpki-client