Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0PtdBDpxqBiamf3Wy5UzRY5Npb0.roa
File: 0PtdBDpxqBiamf3Wy5UzRY5Npb0.roa (raw, json)
Hash identifier: wq7MtI2Ozj/uprsyy9THpirTm2G1oDvb15eM2HzfNgM=
Subject key identifier: D0:FB:5D:04:3A:71:A8:18:9A:99:FD:D6:CB:95:33:45:8E:4D:A5:BD
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F7F253FBB139184842CDC89AF8155
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0PtdBDpxqBiamf3Wy5UzRY5Npb0.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 77.47.180.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
212.111.211.0/24 maxlen: 24
212.111.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7f:25:3f:bb:13:91:84:84:2c:dc:89:af:81:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0fb5d043a71a8189a99fdd6cb9533458e4da5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:3f:f3:f2:6f:09:86:5b:f3:00:7f:d8:ac:
67:12:35:8d:1d:83:f3:d3:de:77:26:0d:cf:61:b9:
3a:cc:3b:a0:6d:0b:0b:46:80:2a:ef:8c:d7:d5:09:
7e:d5:6e:70:11:98:e5:e7:f1:0c:04:4e:8a:f7:a4:
5b:61:50:d9:8f:47:9f:d3:71:0b:a2:e6:05:14:fe:
e7:63:23:7c:57:a8:32:a1:9a:56:72:88:e7:e4:0a:
72:17:cb:b1:d4:bc:da:26:bd:d2:1c:a4:14:8b:17:
cd:a2:14:c7:21:a1:97:bf:65:38:d4:ea:d6:52:f4:
d8:b2:e2:ea:ae:9c:50:39:2b:7e:9a:08:d6:62:2b:
f1:96:d4:d0:72:86:77:30:0b:c5:65:51:43:f9:2b:
df:67:3d:eb:2a:18:3f:3b:18:87:2e:85:96:56:68:
be:fc:93:0b:09:20:97:d7:05:df:c1:4d:ce:17:82:
f3:2b:85:bc:39:d1:fc:73:b1:64:4e:38:72:ad:1b:
fb:a7:c1:9c:04:8c:90:0f:2c:6c:b6:10:d5:e1:b0:
13:65:a7:37:21:af:38:18:0e:0a:2f:4f:87:89:ec:
66:ce:56:18:78:dd:ba:b2:38:39:c8:e4:54:a0:9a:
2a:5a:91:9e:91:19:fb:4a:5e:3c:9d:73:f8:42:ad:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FB:5D:04:3A:71:A8:18:9A:99:FD:D6:CB:95:33:45:8E:4D:A5:BD
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0PtdBDpxqBiamf3Wy5UzRY5Npb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
77.47.248.0/21
195.178.128.0/22
212.111.211.0/24
212.111.218.0/23
Signature Algorithm: sha256WithRSAEncryption
28:7d:14:76:a1:d4:c3:f7:8a:e8:22:5a:b7:64:9e:8d:ef:d3:
7a:ca:13:e0:74:ea:eb:00:ed:eb:5a:70:57:6c:1d:5a:e3:0e:
05:a7:b1:d0:d7:2f:60:ee:d6:e4:c4:6c:7f:73:e9:19:9a:7b:
a1:94:33:8e:b9:2e:b2:d9:b3:7c:ca:90:9a:0f:72:f5:ce:90:
95:ce:26:bb:5b:09:b9:a7:1f:48:ce:39:c8:07:2e:c0:19:ad:
d3:24:4c:6a:97:2c:35:4f:53:59:26:70:41:cf:ec:bc:d8:82:
44:0b:81:1e:f9:ae:f2:8c:29:79:89:44:31:87:0b:bc:0f:8e:
23:d7:7c:9c:4c:88:c8:d9:63:a7:91:91:b3:73:56:a2:8b:73:
00:6b:4d:73:ef:94:cb:5c:d7:7c:6f:a0:e7:8d:9b:af:ff:6c:
4c:ac:b3:97:07:bb:08:88:14:ed:d0:86:50:76:ee:8f:1f:3e:
fa:3a:4f:32:48:83:61:fd:3b:ab:e2:62:e8:9a:68:6a:df:16:
de:63:27:55:aa:e9:62:81:5f:d7:2e:d5:b7:fb:f7:a9:de:fa:
93:f5:b9:d6:88:5d:e7:bd:b8:1c:1c:c1:21:79:85:39:84:f8:
55:3e:a9:28:3b:8f:e3:20:e7:f9:47:de:cc:b1:73:13:12:2b:
b0:ff:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:58 2025 by rpki-client