Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/PJg6i8bSTOaaHuAf64uU7RgQ9X0.roa
File: PJg6i8bSTOaaHuAf64uU7RgQ9X0.roa (raw, json)
Hash identifier: yqj+o3D869BdUEpdNxfbAfsWgWZ/Cc+Y5gzfpaAYQRA=
Subject key identifier: 3C:98:3A:8B:C6:D2:4C:E6:9A:1E:E0:1F:EB:8B:94:ED:18:10:F5:7D
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 0194CC12F0E59B651B4299F1947CA1AF36D7
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/PJg6i8bSTOaaHuAf64uU7RgQ9X0.roa
Signing time: Mon 03 Feb 2025 13:49:40 +0000
ROA not before: Mon 03 Feb 2025 13:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 92.242.167.0/24 maxlen: 24
164.138.0.0/22 maxlen: 24
164.138.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:12:f0:e5:9b:65:1b:42:99:f1:94:7c:a1:af:36:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Feb 3 13:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c983a8bc6d24ce69a1ee01feb8b94ed1810f57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:89:30:4a:7d:44:12:c7:98:eb:a1:78:16:
b1:ab:d5:da:b0:f9:c1:05:3c:b0:8d:90:c7:d3:2a:
4e:a9:30:1b:6d:21:42:0c:b9:49:fd:0a:6e:03:4e:
d4:b5:c4:28:4e:eb:a9:b8:bc:44:c3:03:01:5f:24:
da:20:1c:33:03:44:28:a9:85:90:f2:ec:9a:ad:12:
6d:58:0f:fb:15:de:63:11:8d:1a:df:ce:d5:2f:c3:
2a:c6:cd:c7:29:0c:ee:a7:d7:6d:11:67:6a:68:b5:
2a:3b:ae:3c:c6:bd:da:ec:b6:fb:8a:52:1e:1b:5a:
4e:53:93:d0:2e:5a:94:03:a9:6e:15:73:dd:8e:1c:
a1:99:c8:ac:ce:3c:13:87:2e:16:fc:e4:82:8a:36:
f9:23:b0:a2:57:1f:59:26:5b:0b:0c:2b:55:ab:b2:
8e:4f:20:70:7e:ef:bc:7a:5f:cb:fb:46:bc:6f:f5:
c6:6f:2a:2e:4e:21:03:1b:e8:3a:87:5f:ff:be:65:
1b:17:8b:b0:88:9c:58:72:1a:a6:e8:12:dc:bf:2b:
e3:db:a3:98:98:b1:fc:1d:2b:c7:6f:72:1b:85:bf:
88:12:85:d3:c9:f2:1d:50:84:98:09:9a:8a:a5:e7:
07:f7:44:e4:50:9f:a9:14:a4:16:93:42:61:ff:1c:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:98:3A:8B:C6:D2:4C:E6:9A:1E:E0:1F:EB:8B:94:ED:18:10:F5:7D
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/PJg6i8bSTOaaHuAf64uU7RgQ9X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.167.0/24
164.138.0.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:2b:e6:11:47:73:32:76:16:77:79:ed:ef:e7:22:0a:c9:32:
92:f6:ae:32:96:60:f0:0e:b0:5d:71:a0:68:54:7f:bd:0f:31:
6f:6e:2d:0b:8e:aa:56:c9:55:0a:83:14:34:32:19:b8:d0:e2:
b4:15:45:29:26:53:2b:2f:e4:29:fe:f9:fb:6c:48:d6:39:2d:
2c:56:63:ae:ea:6a:51:0b:85:5d:15:b3:d3:3f:2e:95:e5:7d:
16:a7:41:fe:21:e4:31:d9:5d:c1:1d:5c:cd:af:05:75:18:34:
52:ce:c0:65:e5:b8:70:fb:9a:d9:58:a3:65:a3:07:1f:0b:ff:
6c:42:16:d0:84:20:b1:f9:8d:29:85:e2:41:33:9a:f9:12:88:
ef:5b:41:e7:2f:cc:f9:31:be:0a:85:64:22:27:ec:8e:57:bb:
f7:26:9a:21:1c:0f:5f:6d:25:45:f0:1a:6a:0f:31:45:f1:5d:
00:a3:29:db:a6:77:1d:a4:11:5f:06:21:fc:05:b1:a5:02:e1:
94:f4:ce:2d:4f:96:63:c4:e1:87:9b:dc:3d:93:d1:8d:a7:a8:
ee:cc:67:c7:0a:72:ef:da:6f:db:d3:45:75:50:52:3e:35:59:
a1:2d:76:e7:81:5c:87:e3:b9:4d:c4:b2:52:96:d7:e1:3c:5c:
24:68:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:25:47 2025 by rpki-client