Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/3CQxn1cSbk5ujQfHhnxDasY3W9c.roa
File: 3CQxn1cSbk5ujQfHhnxDasY3W9c.roa (raw, json)
Hash identifier: HqrPej2qRyrHdaMDDGVqhxR/wvBPWopVDgOrRj62buk=
Subject key identifier: DC:24:31:9F:57:12:6E:4E:6E:8D:07:C7:86:7C:43:6A:C6:37:5B:D7
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8C52E165395442CAF7F2083546F2
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/3CQxn1cSbk5ujQfHhnxDasY3W9c.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214648
IP address blocks: 77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8c:52:e1:65:39:54:42:ca:f7:f2:08:35:46:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc24319f57126e4e6e8d07c7867c436ac6375bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:f4:45:b1:86:b1:ff:90:f5:1d:9a:ad:81:
fc:14:4e:e6:9f:d7:cb:d2:a9:91:92:79:5f:68:ae:
f9:b3:df:05:d7:6d:e8:19:cb:d8:38:d6:f7:79:99:
70:21:18:9c:32:2e:46:a1:8b:a9:5b:46:6c:2f:3c:
13:88:04:1b:e2:44:f4:64:10:6d:cf:c8:31:e0:8a:
6c:ad:3a:fb:25:62:19:12:92:87:f8:c6:39:1d:b0:
92:c1:a6:26:bf:ee:b5:b7:b1:6a:2e:ee:8c:4a:e5:
74:64:77:6b:c4:b6:48:7a:6e:20:33:6f:49:f8:a8:
d9:60:04:67:10:96:27:42:0f:2a:62:8d:4d:74:1c:
91:b5:d7:ad:2a:c5:78:d4:da:4f:5e:57:5a:40:d7:
51:7b:eb:b3:99:1d:d4:41:56:d2:a3:b5:13:97:6a:
b6:d9:8f:a3:df:00:d1:56:91:ed:9a:d4:92:d2:98:
75:1c:65:d9:84:9b:a2:93:24:0b:02:54:47:77:5f:
01:d1:8d:47:e0:9e:9d:a9:d7:ea:27:03:2c:29:0a:
f5:bb:b3:5a:23:84:56:ac:ad:4b:9a:ed:ac:6c:b5:
f5:07:81:04:0a:ff:9a:06:4b:73:bc:e4:f7:da:8e:
82:63:e7:5c:0f:42:04:59:d8:f1:8f:40:96:b8:cb:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:31:9F:57:12:6E:4E:6E:8D:07:C7:86:7C:43:6A:C6:37:5B:D7
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/3CQxn1cSbk5ujQfHhnxDasY3W9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
17:1b:e7:be:ee:99:d9:9d:ba:57:53:47:2e:97:ba:4d:28:42:
02:f1:52:3d:33:44:3b:44:1a:da:6c:df:05:d5:be:a5:c9:d4:
e4:8e:63:4a:29:06:ea:78:a1:90:75:2a:ea:06:90:7e:39:79:
8d:08:f4:c6:ec:9a:5d:5c:1d:e3:e0:77:d7:bf:72:8e:6d:6f:
29:4a:7b:f9:ed:d4:cc:4c:3d:43:73:6d:06:31:ab:fa:8f:aa:
15:9d:d8:67:0e:42:79:33:42:cb:da:fa:f4:a3:d8:0d:95:32:
7b:47:e7:a2:0a:af:35:c9:ce:ff:61:f7:d9:38:c5:af:20:66:
8d:1c:35:eb:04:f3:69:c9:c8:5b:31:08:cd:6d:fd:1e:6a:72:
f0:6f:0b:40:62:d4:07:01:3a:8d:c0:24:b1:2f:9d:58:c8:39:
4d:08:73:8c:1b:84:f2:fc:c3:5a:ff:de:6a:29:75:8d:e8:6c:
0f:12:e9:38:d7:ce:26:4c:9c:7d:83:8e:af:c3:b9:85:d0:18:
06:7f:c9:76:31:fb:f6:da:83:b6:87:37:09:1a:3f:b1:54:53:
78:50:2c:ed:a9:6d:58:bb:88:b3:55:c0:7e:19:f8:14:1e:f4:
08:04:7a:0d:e7:11:99:9c:d1:45:38:03:cf:fe:db:54:16:6c:
af:fd:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:43:57 2025 by rpki-client