Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/1-PRouHcN36iLzwy9uNqLaIiV2X0.roa
File: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (raw, json)
Hash identifier: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=
Subject key identifier: F8:F4:68:B8:77:0D:DF:A8:8B:CF:0C:BD:B8:DA:8B:68:88:95:D9:7D
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019426D9CB2105450BE4AAE610D506DEA944
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/1-PRouHcN36iLzwy9uNqLaIiV2X0.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216442
IP address blocks: 185.51.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cb:21:05:45:0b:e4:aa:e6:10:d5:06:de:a9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8f468b8770ddfa88bcf0cbdb8da8b688895d97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:3b:96:2f:79:24:59:4e:f3:41:52:b8:13:
a4:b9:30:9c:d0:18:c1:68:23:da:84:e6:a1:81:83:
ba:ff:9e:30:9d:97:fd:49:48:55:bf:14:38:77:70:
7d:9d:1b:b3:8c:9f:9f:bb:38:f6:d0:14:04:f4:33:
d6:aa:b9:00:b8:54:2e:3e:29:09:13:e7:85:dd:4b:
17:da:67:a4:b9:db:26:43:31:eb:83:02:b6:bf:fc:
a9:19:72:29:fc:21:aa:b4:db:3f:40:71:9e:3c:0a:
cb:cd:16:fd:8f:f7:95:97:4b:d8:54:bf:8f:e0:0a:
59:58:46:0f:c1:b3:8a:a7:fd:18:b3:a4:f9:e1:e3:
e3:85:95:3e:2c:04:49:2f:af:7b:fa:e6:41:2a:0a:
b3:13:65:ad:14:90:55:34:1f:f7:2a:10:8d:19:3c:
c9:f6:05:fb:2d:dc:f1:1a:33:7a:ae:90:a7:70:45:
a5:92:45:bb:31:14:70:70:6d:c4:10:7f:30:21:15:
cf:22:d6:d5:d3:55:17:53:8e:88:4a:46:c5:ff:4a:
e9:ac:b6:05:8e:7d:4e:17:2c:bb:3c:46:61:77:7d:
ed:c1:65:ba:c4:47:8a:f4:8b:8c:fc:4a:a1:ba:03:
80:bb:4c:c0:ba:94:43:94:a5:ff:62:76:f3:eb:b8:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F4:68:B8:77:0D:DF:A8:8B:CF:0C:BD:B8:DA:8B:68:88:95:D9:7D
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/1-PRouHcN36iLzwy9uNqLaIiV2X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.172.0/22
Signature Algorithm: sha256WithRSAEncryption
99:8a:0b:a2:3d:24:30:84:d1:c2:4c:08:77:2d:2e:f3:8e:a4:
49:dd:26:d5:41:b2:05:1c:1c:b4:97:5e:07:f3:fe:f4:63:ee:
0c:4b:c0:af:e4:f1:49:30:61:4c:dc:b5:c5:ed:bc:ae:10:65:
fe:24:05:b1:5b:13:f7:3d:2a:ff:49:3e:fe:18:be:fb:bf:24:
8e:6d:23:df:30:d0:63:57:1a:15:68:5d:f9:01:97:59:30:a8:
25:78:22:3a:13:9e:95:16:31:14:39:b9:2c:e7:06:82:65:46:
20:be:00:64:53:0e:94:12:73:b9:64:64:f0:31:30:e7:bf:94:
a1:d4:6a:41:6c:68:75:54:a4:e8:ba:07:b4:af:30:82:c4:60:
4c:b9:f6:60:10:7f:9a:2d:7d:76:c9:62:38:b1:24:c2:6c:db:
a2:87:a0:15:73:a2:dd:6a:25:68:8e:c0:66:e8:5c:72:5d:6c:
00:fe:04:3a:fa:80:e3:3f:49:02:5a:48:e1:95:3a:94:04:08:
a1:9e:40:de:eb:44:08:77:56:cc:91:4b:9f:e5:43:b1:a1:b7:
af:19:a1:f8:7e:01:5c:7e:14:f2:a5:7e:9b:b9:42:d9:08:53:
f4:5d:50:b2:9a:55:53:09:27:0b:4c:73:42:f7:17:c4:b8:41:
33:9f:97:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:46 2025 by rpki-client