Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/3hd2cWOKo1TQkV2Yjc58aajJp40.roa
File: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (raw, json)
Hash identifier: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=
Subject key identifier: DE:17:76:71:63:8A:A3:54:D0:91:5D:98:8D:CE:7C:69:A8:C9:A7:8D
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019425216FC186407D530F122F009A09B4D5
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/3hd2cWOKo1TQkV2Yjc58aajJp40.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211956
IP address blocks: 78.40.22.0/24 maxlen: 24
78.40.23.0/24 maxlen: 24
2a07:4247:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6f:c1:86:40:7d:53:0f:12:2f:00:9a:09:b4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de177671638aa354d0915d988dce7c69a8c9a78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:d3:9a:be:e0:af:f5:9e:86:74:e0:be:42:
b0:ba:84:73:b0:b1:c1:05:09:9a:58:a1:f6:a7:78:
68:bb:86:8e:e9:19:5e:8d:58:7e:50:af:6c:62:03:
74:94:12:f5:e5:f9:22:12:56:18:04:fb:fc:7d:65:
ce:8f:6a:bd:3d:59:3a:f6:00:f3:a1:ec:50:e1:4f:
6d:87:b8:35:62:f0:a2:4f:1e:c9:11:0e:66:5c:c1:
d8:77:10:a0:24:70:de:96:e8:48:3e:51:16:b4:86:
b3:f6:40:68:ef:4c:5b:f7:57:be:c4:8e:53:04:01:
09:bd:11:51:c4:13:97:c3:0b:c0:fc:1c:47:ac:00:
15:84:45:51:19:01:68:e3:a6:e6:ce:46:11:2c:7f:
2a:20:bb:63:51:8f:f2:97:1c:f8:65:ab:00:f6:50:
a0:50:46:dc:37:c6:be:a2:11:3f:cf:27:2a:58:be:
e4:e6:92:d0:81:58:78:ee:27:fa:8d:d9:07:5e:bf:
e9:4e:49:07:a5:c1:b0:ca:3f:65:dd:02:fe:9b:a4:
f4:96:34:01:e7:0b:34:eb:26:20:c8:b4:c9:dc:9d:
72:b2:c3:64:23:d4:f5:1c:ab:8e:89:49:d0:50:82:
55:8b:52:a7:14:9e:22:55:e4:b1:41:d5:8d:a1:2f:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:76:71:63:8A:A3:54:D0:91:5D:98:8D:CE:7C:69:A8:C9:A7:8D
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/3hd2cWOKo1TQkV2Yjc58aajJp40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.22.0/23
IPv6:
2a07:4247:3000::/36
Signature Algorithm: sha256WithRSAEncryption
71:03:8e:ff:e2:1c:3e:09:10:00:eb:a0:60:71:12:37:72:85:
e2:17:80:78:9a:b8:9f:3f:d8:e2:30:86:99:05:49:86:57:b8:
80:38:98:35:a5:ec:0b:dd:ec:2f:46:3e:04:8c:d9:0a:2b:a8:
10:43:25:47:84:15:de:cd:41:14:ad:43:50:c9:ce:5d:10:87:
61:68:fc:28:7e:c5:c5:d8:f3:76:25:4a:33:a8:90:95:63:6c:
95:2b:13:2d:e0:22:ae:cd:3c:37:7e:06:c5:fe:8f:d4:fb:39:
63:34:45:63:91:e2:87:8b:70:a0:ec:d4:de:04:a4:9d:03:11:
91:ec:8a:eb:c2:28:25:55:bc:3d:24:4e:54:4c:b5:6e:08:c5:
9b:2c:ba:31:8a:a3:92:84:27:eb:a8:b4:cf:01:45:b6:4c:6a:
39:01:a3:61:e3:39:f8:d3:b0:d1:d9:2b:d4:46:aa:42:71:db:
8f:aa:7c:79:73:77:d9:99:38:53:b6:32:cb:ea:47:aa:1c:9f:
14:e1:d7:fe:4d:f7:2a:77:b7:ab:c4:34:e3:cd:13:f9:c3:af:
ce:d1:06:fb:96:d6:04:96:ef:ca:54:9f:40:60:de:3b:5f:3d:
ff:48:77:e0:16:e4:5e:48:6a:35:c9:74:05:fe:93:75:74:c5:
6d:de:da:1a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQlIW/BhkB9Uw8SLwCaCbTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YThiNzBhYTEwMDY5YjU1MTVhOWNiM2MxNDliODg1Yjdh
MTI4MzQwHhcNMjUwMTAyMDM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTE3NzY3MTYzOGFhMzU0ZDA5MTVkOTg4ZGNlN2M2OWE4YzlhNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPzTmr7gr/WehnTgvkKwuoRzsLHB
BQmaWKH2p3hou4aO6RlejVh+UK9sYgN0lBL15fkiElYYBPv8fWXOj2q9PVk69gDz
oexQ4U9th7g1YvCiTx7JEQ5mXMHYdxCgJHDeluhIPlEWtIaz9kBo70xb91e+xI5T
BAEJvRFRxBOXwwvA/BxHrAAVhEVRGQFo46bmzkYRLH8qILtjUY/ylxz4ZasA9lCg
UEbcN8a+ohE/zycqWL7k5pLQgVh47if6jdkHXr/pTkkHpcGwyj9l3QL+m6T0ljQB
5ws06yYgyLTJ3J1yssNkI9T1HKuOiUnQUIJVi1KnFJ4iVeSxQdWNoS8e0QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFN4XdnFjiqNU0JFdmI3OfGmoyaeNMB8GA1UdIwQY
MBaAFPeotwqhAGm1UVqcs8FJuIW3oSg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEt
OWQwNzQzMzcwNDk1LzEvM2hkMmNXT0tvMVRRa1YyWWpjNThhYWpKcDQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEtOWQwNzQzMzcwNDk1
LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBTigWMA4E
AgACMAgDBgQqB0JHMDANBgkqhkiG9w0BAQsFAAOCAQEAcQOO/+IcPgkQAOugYHES
N3KF4heAeJq4nz/Y4jCGmQVJhle4gDiYNaXsC93sL0Y+BIzZCiuoEEMlR4QV3s1B
FK1DUMnOXRCHYWj8KH7FxdjzdiVKM6iQlWNslSsTLeAirs08N34Gxf6P1Ps5YzRF
Y5Hih4twoOzU3gSknQMRkeyK68IoJVW8PSROVEy1bgjFmyy6MYqjkoQn66i0zwFF
tkxqOQGjYeM5+NOw0dkr1EaqQnHbj6p8eXN32Zk4U7Yyy+pHqhyfFOHX/k33Kne3
q8Q0480T+cOvztEG+5bWBJbvylSfQGDeO189/0h34BbkXkhqNcl0Bf6TdXTFbd7a
Gg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:13 2025 by rpki-client