Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa
File: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (raw, json)
Hash identifier: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=
Subject key identifier: 3E:A8:3F:D8:AD:72:39:3D:02:48:7F:C2:33:73:F2:D3:FF:80:47:0A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8CFD5317866773A95CFD5594CEB9
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216314
IP address blocks: 77.47.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8c:fd:53:17:86:67:73:a9:5c:fd:55:94:ce:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ea83fd8ad72393d02487fc23373f2d3ff80470a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:e0:a2:f9:9a:17:69:ec:c2:eb:6e:4b:a8:
01:c4:37:41:dc:3f:f5:7d:39:f5:19:c9:a6:54:5b:
1c:bf:24:3d:5c:d5:7c:0e:48:10:46:b9:92:ee:35:
95:31:ce:0c:24:60:d3:4b:ef:aa:65:0b:0c:d6:9d:
d0:fb:af:9c:a7:b8:b9:2f:9b:68:e0:05:2a:98:62:
af:35:7f:7c:71:77:66:3d:60:c7:2b:88:ec:33:32:
09:8d:b4:a8:92:14:43:31:a7:2b:3e:ea:7e:c7:1d:
30:10:e0:15:cc:92:3b:64:5e:69:0c:3f:0a:74:ba:
12:0a:a4:31:8d:79:91:33:f8:b2:51:13:13:72:72:
f5:c5:e5:c6:4a:b0:2e:df:56:af:9e:05:a4:51:e4:
4b:ae:a1:c3:56:aa:a3:7f:73:25:82:b3:9b:50:a8:
96:c3:be:a6:aa:bf:70:b3:5b:40:42:ef:74:c9:4a:
47:ab:ec:44:c4:3c:a8:62:9c:c0:0e:49:7e:a5:5a:
fe:a6:4c:67:a7:7d:27:e1:c9:6e:f6:a9:3d:1f:6a:
e1:8a:b0:94:b5:3d:89:43:c4:71:65:c4:15:d9:19:
a9:b9:76:16:1d:94:eb:10:08:a4:37:dc:42:be:cd:
79:f8:65:98:4f:0e:6e:39:d8:e8:af:c2:4c:32:a2:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:3F:D8:AD:72:39:3D:02:48:7F:C2:33:73:F2:D3:FF:80:47:0A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.179.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2e:93:31:3e:35:4f:7b:a4:3d:b8:26:e5:ad:9b:43:1d:27:
e4:3f:15:fa:bc:74:5e:72:1e:8c:05:cb:7c:d9:7a:6d:3c:3f:
6e:c1:92:d1:c7:39:f4:61:be:a0:41:38:1e:30:52:e6:68:ee:
29:a2:3e:d3:70:5f:bf:ba:d8:c8:f6:95:ec:31:c9:24:d7:ae:
6a:24:05:cd:76:a6:57:33:b5:8f:44:db:37:f3:b9:62:73:b9:
70:57:08:ac:ad:9a:69:b3:24:1d:51:61:a6:07:8f:45:69:79:
42:71:38:26:47:d3:2d:e1:4d:75:6d:d1:0e:4d:35:7d:1a:41:
20:63:60:80:56:64:61:b6:df:76:14:27:b1:24:7d:f4:64:9c:
d2:b7:85:15:70:4d:b1:e4:0d:3e:ef:8e:67:bb:30:85:69:3c:
63:23:fb:03:c1:9e:c4:60:da:d0:14:ab:89:f5:68:70:78:16:
15:6b:5f:09:d1:7a:33:a0:49:68:93:51:9f:9e:eb:74:dd:77:
9e:61:e9:73:3d:ae:e0:5e:d6:6b:d3:2d:23:7c:29:fd:69:66:
f9:25:b8:c5:70:ea:ff:c8:7e:6c:57:d7:b8:f1:bd:1d:77:c4:
ee:92:5a:37:c6:5c:be:5d:4a:2b:41:d9:b7:5b:c5:c1:b8:d3:
20:c8:9a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:47 2025 by rpki-client