Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/Ptk1juvR6AU_vl6lr4RswBAQK74.roa
File: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (raw, json)
Hash identifier: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=
Subject key identifier: 3E:D9:35:8E:EB:D1:E8:05:3F:BE:5E:A5:AF:84:6C:C0:10:10:2B:BE
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 01941F8C95B670F0545438DF9B16B23F6007
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/Ptk1juvR6AU_vl6lr4RswBAQK74.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42244
IP address blocks: 80.77.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:95:b6:70:f0:54:54:38:df:9b:16:b2:3f:60:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed9358eebd1e8053fbe5ea5af846cc010102bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:b6:c7:1d:5d:38:4a:d0:78:db:c5:18:86:
9c:16:d0:1e:e8:8b:b1:26:30:5c:c9:48:c6:6c:07:
15:a6:c6:bc:35:8b:29:dd:75:fa:b5:f7:82:0f:f7:
25:2a:85:11:9f:6f:70:1d:21:1f:16:99:39:d0:22:
c5:73:8b:9b:2b:38:30:17:09:22:06:fa:b8:8c:0e:
35:20:10:ed:e2:c4:00:03:df:5c:b0:3a:7f:aa:db:
8c:b2:e6:c2:30:3c:0b:c0:75:cc:88:0c:fd:99:87:
f2:2f:57:21:1a:aa:00:fa:39:02:ea:ac:38:37:da:
dc:54:34:f4:97:12:1b:5d:6a:81:a7:53:47:de:fb:
03:34:48:7a:9b:ee:a8:fd:de:c7:d3:6a:ce:df:27:
9d:6f:b2:94:9e:4a:7d:f5:05:66:85:e4:0a:58:9a:
08:20:69:80:e8:af:91:d1:5b:ec:0f:18:c4:28:57:
30:d8:2d:70:d7:04:75:2f:2b:eb:c4:b2:05:7d:f7:
43:ff:8d:2a:48:a8:9d:58:bd:f2:37:19:c3:fc:e4:
50:62:af:bd:23:0b:80:49:28:79:80:d2:91:eb:65:
60:42:a2:19:0e:65:c4:bf:b0:74:f4:51:5c:5d:e4:
76:f5:67:25:64:27:02:32:f6:87:e1:cb:c6:ee:33:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:35:8E:EB:D1:E8:05:3F:BE:5E:A5:AF:84:6C:C0:10:10:2B:BE
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/Ptk1juvR6AU_vl6lr4RswBAQK74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.168.0/24
Signature Algorithm: sha256WithRSAEncryption
15:87:09:40:2c:b1:f4:52:f0:c3:67:36:60:e9:43:ee:31:df:
5b:a1:bf:4a:41:10:db:78:76:4d:65:42:89:e9:93:85:98:9d:
e7:0d:4b:69:04:71:41:6b:2e:7b:46:8a:c0:01:0f:30:b7:17:
e6:40:32:8c:86:35:78:31:22:ec:1e:bc:14:a8:24:cf:a5:e6:
08:b3:ba:d6:cf:7d:5b:ed:f5:3e:5a:01:db:cb:38:e3:3d:9b:
9d:20:80:e9:9d:8f:be:9f:9d:3a:b3:09:e4:e9:66:b9:5c:b0:
52:52:23:7a:f1:7f:07:0d:70:03:a7:70:d9:c3:2f:2b:1e:67:
2f:6e:20:2a:90:f0:e7:9a:78:e3:42:56:04:83:70:9c:2c:65:
93:51:91:19:dd:b5:13:28:7b:2c:d3:74:e4:ac:c3:8b:d4:a5:
f3:c4:99:d7:76:a7:e0:07:6c:2c:ba:20:1f:89:87:bb:a1:35:
21:6a:15:27:23:66:d0:13:d1:24:89:76:34:6f:80:a5:16:d3:
e0:e4:66:ed:3a:b9:bc:08:ff:6a:cc:a2:dc:ae:b5:e1:b2:55:
a7:e7:9a:ca:3e:78:2c:43:8a:7f:56:c6:1f:3b:fe:66:24:4f:
4f:74:d9:7f:f9:4b:0c:4d:5a:a8:d0:d7:d2:6f:bb:5a:4d:11:
ad:b1:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:32:37 2025 by rpki-client