Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dirYEpjpwTEZhzX5zGzrPrDq-c0.roa
File: dirYEpjpwTEZhzX5zGzrPrDq-c0.roa (raw, json)
Hash identifier: ZJVossTWwTWL3dyFSh6fpsFvhkvK/ICUlp66TS3pkCo=
Subject key identifier: 76:2A:D8:12:98:E9:C1:31:19:87:35:F9:CC:6C:EB:3E:B0:EA:F9:CD
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214410CF02DCD2E4800E432B8E6EB638
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dirYEpjpwTEZhzX5zGzrPrDq-c0.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196695
IP address blocks: 77.83.150.0/24 maxlen: 24
217.28.132.0/24 maxlen: 24
217.28.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:10:cf:02:dc:d2:e4:80:0e:43:2b:8e:6e:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=762ad81298e9c131198735f9cc6ceb3eb0eaf9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:f5:21:7c:a9:47:55:24:a5:68:04:9e:be:
07:a3:96:e5:fb:24:6d:88:af:ce:03:86:0e:0d:55:
24:ec:37:cd:ee:96:5c:36:0e:19:7d:a7:ed:76:b3:
18:fc:9c:ce:dc:2a:f7:a0:8e:d6:a0:98:01:88:a2:
08:74:a8:07:c8:e9:a5:6e:5c:40:2b:74:94:df:0f:
71:1a:48:0f:99:c2:8f:40:04:2c:8a:01:b4:07:40:
ad:59:f1:cd:80:e3:96:cb:5a:93:fc:3a:c5:d4:1c:
2d:e1:88:4b:43:9e:7f:50:68:06:1d:71:e1:61:07:
50:9e:b1:1c:b9:40:34:89:bf:75:db:f9:5e:7a:3b:
02:9e:18:5c:c0:64:08:f6:19:93:f9:57:c1:d4:98:
c4:e4:6b:e0:11:d7:ca:6d:5d:aa:36:5f:64:55:1f:
68:7c:cf:c6:20:95:e3:5d:75:e4:e3:e7:d1:bf:1a:
b7:f6:95:b3:e1:41:fc:e6:47:41:e7:c4:f5:e2:88:
a5:21:ab:45:0b:99:07:c2:0b:0e:2b:3d:c4:f5:83:
8c:2a:93:78:8e:5d:32:f5:bb:2c:b6:99:d2:ce:56:
25:c5:b7:0a:da:aa:96:ee:da:5d:ea:fb:e8:7a:0e:
34:9f:71:cc:06:02:52:6d:f7:00:2b:1e:d3:57:40:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2A:D8:12:98:E9:C1:31:19:87:35:F9:CC:6C:EB:3E:B0:EA:F9:CD
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dirYEpjpwTEZhzX5zGzrPrDq-c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.150.0/24
217.28.132.0/24
217.28.141.0/24
Signature Algorithm: sha256WithRSAEncryption
96:81:18:13:dd:56:41:64:cc:df:16:ae:16:09:7d:77:cc:9f:
b4:f6:22:2f:f0:87:3c:76:4e:38:aa:79:da:94:91:1c:a2:0e:
d4:20:ad:b3:d4:76:11:7f:e7:c1:17:fd:4a:31:bb:8e:99:52:
d2:aa:68:cc:a1:24:ca:1d:ce:e6:48:76:42:c0:c4:36:94:63:
cd:3e:1c:e8:a2:c2:03:0c:b9:8b:de:5e:0f:8c:f9:42:a6:5e:
84:39:8d:f8:8d:42:58:6d:6b:d7:41:35:f1:47:fd:68:b3:af:
26:4c:b5:62:55:48:95:a9:d7:01:57:ec:1b:46:ea:65:e1:ff:
50:e5:e4:f8:b3:6d:e9:76:d8:d3:e5:6e:f4:1b:ff:a8:78:b3:
9f:7f:15:6e:09:0f:ba:24:ab:a2:c9:b8:c9:2e:15:d6:05:e1:
a4:a1:80:6b:53:14:c0:c2:89:78:70:cc:2a:3f:47:34:ad:ad:
30:67:b9:36:c1:ee:6c:6d:7b:10:95:67:63:c0:dd:2a:3c:1d:
72:a5:3a:9c:ce:21:46:ef:c9:28:cf:90:37:20:ea:75:24:8b:
3b:4d:f1:28:a3:87:c0:45:48:3a:3c:46:cc:03:43:1d:4b:39:
c0:de:cf:3a:d9:2c:cb:b2:6f:77:d6:b2:66:4e:b2:6c:66:89:
97:2d:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:31 2025 by rpki-client