Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/UfHhhtI05mBJabZ-hLmNIxHX8ug.roa
File: UfHhhtI05mBJabZ-hLmNIxHX8ug.roa (raw, json)
Hash identifier: E4kcCskG284NOpULkH3nCUBGoPB5JKBTg+hvJO3hTjc=
Subject key identifier: 51:F1:E1:86:D2:34:E6:60:49:69:B6:7E:84:B9:8D:23:11:D7:F2:E8
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0194AD0EF6E8AE0C1558A7A1EFF02219E143
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/UfHhhtI05mBJabZ-hLmNIxHX8ug.roa
Signing time: Tue 28 Jan 2025 13:17:06 +0000
ROA not before: Tue 28 Jan 2025 13:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.145.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:0e:f6:e8:ae:0c:15:58:a7:a1:ef:f0:22:19:e1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 28 13:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51f1e186d234e6604969b67e84b98d2311d7f2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:1b:cf:8e:7f:f5:a5:90:11:1b:1a:fe:f8:
b3:fa:a7:7b:33:91:ae:63:ff:27:1f:06:39:28:40:
68:45:0e:7a:1e:eb:fa:fd:8c:a2:c4:ed:2b:1c:9b:
22:e8:94:1f:89:0b:69:c9:58:08:72:20:f7:5d:33:
12:00:96:6c:b3:d4:fb:84:c2:63:fc:05:e4:10:25:
a9:da:4c:2d:42:98:bb:46:00:c4:03:ea:41:f8:d5:
fd:a3:0d:84:e7:71:64:f3:1a:13:cd:c7:7d:da:74:
fa:65:7a:69:fa:f6:06:e5:40:86:3a:3c:ca:94:fc:
82:eb:0c:9d:66:df:3e:38:3c:0e:48:d3:0c:9d:65:
9e:aa:7c:52:38:67:52:ef:1c:06:3d:d8:9e:04:c0:
9a:5e:8c:c0:ef:25:69:56:6e:8a:37:fb:a4:67:1d:
8e:90:2f:4b:1d:f0:bb:fc:6b:ea:c4:4e:74:31:01:
bd:4a:66:93:0a:c2:f0:6a:7f:31:39:fc:7d:6c:60:
d9:62:37:22:17:80:f1:c8:67:92:97:da:88:15:95:
27:a0:2e:c2:9a:1d:04:3c:95:a3:2e:19:7e:84:39:
bd:85:4f:c6:47:54:37:4e:6a:a8:5e:61:1b:26:36:
8d:0f:7f:ff:ff:15:93:3d:d4:d1:1c:9f:7b:03:ee:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F1:E1:86:D2:34:E6:60:49:69:B6:7E:84:B9:8D:23:11:D7:F2:E8
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/UfHhhtI05mBJabZ-hLmNIxHX8ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.188.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:02:e7:cc:76:a6:46:cf:b6:17:b9:6d:bb:ce:81:1c:0f:aa:
c1:3c:c5:e5:18:23:d0:b1:f7:cd:28:3c:fa:23:72:ee:8e:9a:
ea:f5:c6:d3:3d:05:6f:8d:3d:d4:79:ef:a1:ff:8d:aa:43:0c:
72:2b:7e:af:f8:ea:8a:3c:16:9c:e7:99:a8:1f:e1:27:07:77:
58:04:05:c4:53:5f:6a:1c:82:17:81:ce:02:20:c5:a3:c3:15:
37:84:ac:9b:86:2e:c8:ed:d7:a8:53:29:1f:3b:f1:fa:f2:93:
b3:36:3c:47:21:72:f8:37:9b:7a:68:52:27:a8:35:f8:20:84:
51:ad:ec:ea:fd:fb:6a:73:5d:73:59:1f:96:67:34:87:52:9b:
a8:72:dd:dd:ce:08:6d:61:67:fa:24:c8:b8:c9:dc:9f:1e:ae:
bb:25:ae:e3:b2:7f:c9:6b:e4:bd:46:29:56:3d:67:fc:23:ad:
da:1f:f8:8e:4e:30:4c:a9:ae:fc:4b:f8:19:ca:fe:83:c5:f8:
d2:20:93:f6:30:27:d3:fe:f9:b1:f6:b7:53:7c:b8:78:fa:94:
f3:99:6a:d2:17:e9:ba:91:3c:d1:03:4f:e6:33:a4:55:e9:a1:
ed:5d:49:59:2c:dd:35:06:6f:78:aa:4b:cc:45:1a:cb:b5:79:
21:fd:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:36 2025 by rpki-client