Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PqyNHcmLJdPWxXV1ritb4BmJxi4.roa
File: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (raw, json)
Hash identifier: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=
Subject key identifier: 3E:AC:8D:1D:C9:8B:25:D3:D6:C5:75:75:AE:2B:5B:E0:19:89:C6:2E
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747AB0513FE32375A6D60EB3DA24EDF
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PqyNHcmLJdPWxXV1ritb4BmJxi4.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 77.90.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ab:05:13:fe:32:37:5a:6d:60:eb:3d:a2:4e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eac8d1dc98b25d3d6c57575ae2b5be01989c62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:8e:e4:08:c9:56:83:c2:2e:f2:3e:1f:ba:
b6:ad:25:9b:13:b0:1f:06:d1:a9:0c:0c:d9:b2:94:
de:9b:c4:02:66:e9:fa:03:a5:54:39:ee:69:78:1e:
dc:a0:2f:49:35:23:73:38:d3:47:4e:64:a0:44:cb:
f7:42:22:25:44:fb:dd:2e:91:17:2a:12:e2:26:d8:
38:c3:de:8a:c6:02:a1:07:51:72:f0:9c:0c:51:5d:
bd:f5:16:3b:88:77:81:a0:51:e2:0c:5f:60:3e:64:
c1:e5:03:20:3e:b3:21:22:69:1b:cc:fe:b2:43:fe:
74:00:43:b3:f8:ec:7c:9e:c8:2f:b8:ae:92:65:fe:
b2:a7:10:84:b7:90:89:e0:07:34:ba:27:e1:02:1f:
d7:85:73:a6:c1:46:df:69:6b:9f:52:71:98:b9:b2:
29:fd:bf:f8:9e:49:c3:c8:34:69:de:ba:7c:77:64:
50:a2:33:92:97:45:29:6b:ff:8f:60:76:fe:14:32:
5e:8d:92:01:ce:de:0a:4b:b6:28:9c:4e:f6:dd:52:
a7:0e:f5:85:5b:3b:ef:cf:42:24:39:73:de:9a:b3:
ca:dd:b4:92:5c:fe:c0:f9:7e:0e:83:0c:62:13:fe:
fb:ed:b0:81:92:83:35:80:9f:a6:bc:cd:da:f1:3c:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:8D:1D:C9:8B:25:D3:D6:C5:75:75:AE:2B:5B:E0:19:89:C6:2E
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PqyNHcmLJdPWxXV1ritb4BmJxi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.178.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2e:01:b1:e5:77:c7:46:4f:18:cc:1e:07:0a:8c:bb:c4:09:
64:78:79:68:1b:85:85:19:a0:1e:d6:c3:9e:3c:56:0b:67:06:
ac:a2:8f:ad:0e:ad:e8:39:1d:7b:e9:cc:79:6d:48:26:c3:e5:
75:2e:10:df:c0:28:78:27:e8:bf:84:88:13:c7:67:28:5f:ab:
8a:bc:30:ac:9b:20:07:8c:d6:2d:7b:67:0d:b4:d7:80:b9:01:
69:52:00:ec:20:09:ab:44:53:7f:7a:ea:7f:1f:9a:c1:0b:78:
fd:7a:01:c4:6d:87:db:8e:c3:31:3e:f7:f2:2e:5b:21:b2:90:
c6:42:5f:a6:7b:24:37:23:df:73:b9:fe:f2:28:50:c6:d9:27:
da:9d:ab:1d:ce:a4:cb:f5:bf:b2:1f:fe:7c:6b:19:10:b9:20:
a0:25:c0:d4:35:ae:7e:9d:7f:ac:67:7b:a4:ca:f6:6b:3c:54:
8b:be:f8:8e:cd:f7:32:ed:e9:a3:ae:56:48:cd:6b:00:ab:c3:
c2:ad:0d:fb:a7:b7:1b:97:67:0a:3f:bb:66:82:be:4d:cf:19:
46:41:86:bc:ac:aa:69:29:7b:7a:99:0c:91:b4:42:44:b9:e3:
69:39:31:05:97:72:c5:29:03:3d:3c:62:b0:10:9c:fa:8c:12:
22:53:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:13:27 2025 by rpki-client