Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa
File: PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa (raw, json)
Hash identifier: M4698F1pGrbgP6S//HBwAHD8jz/cn5NjY1ncpneTdfY=
Subject key identifier: 3E:D4:0F:0F:44:DC:58:61:A5:AC:7A:D3:2A:D1:5A:82:15:06:23:C4
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019424456681AFC5A46A9B957F6C6008D9CB
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209535
IP address blocks: 147.78.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:66:81:af:c5:a4:6a:9b:95:7f:6c:60:08:d9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed40f0f44dc5861a5ac7ad32ad15a82150623c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:e6:70:bc:28:e3:f4:7f:29:70:d3:99:ba:
57:c2:0a:9c:ee:f5:e4:af:f1:25:25:df:d2:ea:52:
58:53:ee:f9:5d:47:45:b4:60:9e:63:96:47:8d:bb:
b7:5e:1e:81:f2:1b:34:31:1d:fb:ab:d1:51:7e:ad:
12:52:a8:ec:15:92:51:4b:e2:5e:ec:f1:3f:68:b5:
97:36:28:72:23:80:aa:83:e7:5c:05:33:bc:e7:ab:
a8:91:30:8c:e0:14:c8:ad:10:8a:29:63:cf:51:be:
55:71:d4:12:bf:4d:6c:41:c4:4b:be:fd:d3:a7:1e:
f6:29:58:a8:cf:22:f6:d2:4c:63:f3:c1:b0:c7:06:
b6:33:29:27:11:7a:d1:fd:47:1b:f4:71:b6:21:85:
68:e1:83:98:64:61:4c:d0:d7:91:d1:0d:99:61:32:
3d:c5:69:e0:a0:fe:d9:ff:0f:a0:8a:b8:ff:08:09:
d8:1b:b5:03:3b:01:53:07:80:f3:6f:7c:9b:86:4a:
b6:6e:27:96:51:76:27:ac:6c:88:94:46:00:14:f9:
a8:1c:dd:c3:be:2f:ae:6c:d0:15:66:21:a2:91:d2:
87:43:cf:5d:49:04:2a:bb:70:aa:4f:8e:9b:6b:d5:
25:a3:54:ff:1d:60:a5:ce:3e:18:a4:48:27:28:4c:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D4:0F:0F:44:DC:58:61:A5:AC:7A:D3:2A:D1:5A:82:15:06:23:C4
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:78:b6:f8:79:71:9f:37:cb:b0:db:f2:2a:8e:4d:4e:1d:60:
1d:e7:86:2a:e5:ef:97:51:5a:a3:82:65:c1:41:31:fc:3a:5a:
68:e5:ef:a4:d7:6d:ba:ca:bb:c8:95:78:82:93:af:ef:4d:ba:
e7:b5:8b:5a:5d:cd:56:8e:7b:ad:4a:22:a1:05:08:f3:fc:bb:
f4:1a:ec:d3:1e:eb:ae:ec:1a:66:6e:e9:90:19:1b:de:ce:83:
f0:5f:86:bb:d4:22:92:38:13:fd:e9:33:1d:3a:20:f3:a9:0b:
44:c4:ac:62:b4:b1:cc:e5:77:eb:ff:3d:6f:2b:b7:4d:aa:22:
f2:ea:7a:d2:b9:a0:f6:85:e2:07:7f:9b:8d:ac:c4:99:3c:76:
43:55:33:69:ed:6d:86:97:de:86:1e:c6:e4:80:48:4c:35:94:
52:f5:69:a3:0d:b2:fd:6b:28:85:87:d3:6d:d3:2d:e9:14:ab:
d5:e5:b4:da:24:7f:57:42:db:d6:ba:43:67:f2:db:d4:fd:59:
f7:0b:84:ac:db:4f:24:3f:41:6c:41:b2:6d:86:86:a0:4b:aa:
33:01:6f:12:77:04:92:27:de:03:6a:00:18:b4:33:13:a2:c7:
9d:dd:ff:07:2a:e5:05:36:a9:3c:3e:b7:30:46:38:4f:ea:31:
24:11:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:53:03 2025 by rpki-client