Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa
File: PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa (raw, json)
Hash identifier: kW2DqnWjgsO28lEW1wrqQlb2aOCM46/dPtOZpgqTEW0=
Subject key identifier: 3C:93:29:42:6F:60:C2:78:18:F0:FD:FF:94:C2:A5:FB:B9:25:FC:9A
Certificate issuer: /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial: 0195F097B9A8142BC7512DD32AEEFE0647AE
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa
Signing time: Tue 01 Apr 2025 09:03:50 +0000
ROA not before: Tue 01 Apr 2025 09:03:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47592
IP address blocks: 78.40.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:97:b9:a8:14:2b:c7:51:2d:d3:2a:ee:fe:06:47:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Validity
Not Before: Apr 1 09:03:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c9329426f60c27818f0fdff94c2a5fbb925fc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:d5:fb:f9:6e:91:05:54:3e:73:26:2d:9c:
52:e6:75:bc:2a:4f:3e:c2:b4:1a:8d:ec:73:a5:15:
33:b8:2e:4d:dc:5d:d9:91:cf:e3:4e:50:49:ab:e9:
26:af:32:4a:b3:fa:d8:e7:a9:c3:e1:ce:64:1f:a3:
17:fb:b9:a5:b1:df:64:76:34:e5:5a:aa:59:8a:77:
66:6d:e9:a9:89:3e:21:e9:46:98:1b:14:b0:6d:41:
38:8d:cd:0f:6c:4d:db:c5:5d:24:00:6f:e8:8b:61:
90:d9:fd:d0:1a:3f:5f:74:d4:b4:4e:ef:8c:da:b3:
37:67:10:7b:3e:99:38:38:0f:1a:e1:33:14:6c:18:
5c:77:5b:b8:b1:ca:e2:1c:02:ac:97:6a:c9:08:d4:
50:2d:3b:97:44:73:5f:a3:d8:4b:eb:fa:14:dd:ab:
05:ae:c4:f1:be:21:24:89:f1:4e:d6:2c:70:6f:b3:
df:ad:8f:28:8d:9e:fc:46:f7:2d:c4:30:28:f9:6a:
07:ba:d0:ed:2b:b4:87:0d:43:e5:f8:0a:64:21:cb:
67:bc:01:ff:64:c4:c9:c8:7f:bf:ac:d0:fe:53:dd:
70:ca:bd:af:00:12:4f:27:7d:96:eb:a4:7c:5c:ed:
c0:ae:5e:cb:5f:42:db:1c:e8:dd:51:18:d2:f7:ba:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:93:29:42:6F:60:C2:78:18:F0:FD:FF:94:C2:A5:FB:B9:25:FC:9A
X509v3 Authority Key Identifier:
keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.214.0/23
Signature Algorithm: sha256WithRSAEncryption
10:d1:d8:94:55:d0:23:32:c9:5d:85:81:a0:d9:ef:28:e0:72:
16:6f:ad:3a:d0:89:aa:46:37:66:d7:06:dc:1a:37:1e:7e:35:
99:7f:0b:d4:4a:6f:aa:a2:26:f1:9e:1f:8a:c6:ee:a8:aa:2a:
e9:7e:10:be:d5:67:57:8c:02:de:7f:bc:c9:51:4a:13:79:7a:
39:a4:b9:51:c0:dc:a9:1f:72:f1:3c:1f:44:ea:d9:a9:55:9d:
46:c2:8d:ae:c6:c1:c0:cd:c6:22:85:a1:ec:7b:f9:29:f2:4a:
68:2a:d1:eb:ba:ae:81:bb:bc:d8:90:51:bf:62:bd:05:37:90:
8b:da:8f:db:32:e0:1a:1e:82:4a:e8:73:88:d2:b5:b6:c2:1c:
a6:16:60:a2:36:0c:e1:e5:8f:39:7c:de:35:37:c4:48:c9:e7:
e4:e7:6c:8b:40:fd:cc:4e:01:3b:e4:b7:c8:f9:1f:7e:a1:e3:
f0:40:37:2d:87:6d:b8:44:50:ef:e4:e4:e7:68:a4:58:d6:f5:
36:78:66:32:a9:1d:25:07:f8:b3:21:64:5a:88:34:1d:9f:6f:
e8:02:53:78:6c:71:bf:b9:ff:e9:58:9d:09:3c:ad:60:b9:16:
62:43:d0:ca:a1:b3:32:b6:61:46:cc:a2:50:55:5e:63:ef:9b:
7b:00:bc:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXwl7moFCvHUS3TKu7+BkeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDc1Yzg0ZjUyOWM4N2RkODVmZDRhZmVhNGUwOTM0MzY2
YWY1NGEwHhcNMjUwNDAxMDkwMzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzkzMjk0MjZmNjBjMjc4MThmMGZkZmY5NGMyYTVmYmI5MjVmYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/TV+/lukQVUPnMmLZxS5nW8Kk8+
wrQajexzpRUzuC5N3F3Zkc/jTlBJq+kmrzJKs/rY56nD4c5kH6MX+7mlsd9kdjTl
WqpZindmbempiT4h6UaYGxSwbUE4jc0PbE3bxV0kAG/oi2GQ2f3QGj9fdNS0Tu+M
2rM3ZxB7Ppk4OA8a4TMUbBhcd1u4scriHAKsl2rJCNRQLTuXRHNfo9hL6/oU3asF
rsTxviEkifFO1ixwb7PfrY8ojZ78RvctxDAo+WoHutDtK7SHDUPl+ApkIctnvAH/
ZMTJyH+/rND+U91wyr2vABJPJ32W66R8XO3Arl7LX0LbHOjdURjS97q51wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyTKUJvYMJ4GPD9/5TCpfu5JfyaMB8GA1UdIwQY
MBaAFNIHXIT1Kch92F/Ur+pOCTQ2avVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdkY2hQVXB5SDNZWDlTdjZrNEpORFpxOVVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZWZhNzItOGY0Yy00ODZjLWIwMTkt
YjRlYWEwNTYxZmM3LzEvUEpNcFFtOWd3bmdZOFAzX2xNS2wtN2tsX0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lZWZhNzItOGY0Yy00ODZjLWIwMTktYjRlYWEwNTYxZmM3
LzEvMGdkY2hQVXB5SDNZWDlTdjZrNEpORFpxOVVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTijWMA0G
CSqGSIb3DQEBCwUAA4IBAQAQ0diUVdAjMsldhYGg2e8o4HIWb6060ImqRjdm1wbc
GjcefjWZfwvUSm+qoibxnh+Kxu6oqirpfhC+1WdXjALef7zJUUoTeXo5pLlRwNyp
H3LxPB9E6tmpVZ1Gwo2uxsHAzcYihaHse/kp8kpoKtHruq6Bu7zYkFG/Yr0FN5CL
2o/bMuAaHoJK6HOI0rW2whymFmCiNgzh5Y85fN41N8RIyefk52yLQP3MTgE75LfI
+R9+oePwQDcth224RFDv5OTnaKRY1vU2eGYyqR0lB/izIWRaiDQdn2/oAlN4bHG/
uf/pWJ0JPK1guRZiQ9DKobMytmFGzKJQVV5j75t7ALwY
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:43:41 2025 by rpki-client