Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/p1JXjb2LczYltKrE1SbLNgCFh1Y.roa
File: p1JXjb2LczYltKrE1SbLNgCFh1Y.roa (raw, json)
Hash identifier: JZ2SLRHUBb7DNCppha0qhaA/9Yund2DleZbSFcq4A2U=
Subject key identifier: A7:52:57:8D:BD:8B:73:36:25:B4:AA:C4:D5:26:CB:36:00:85:87:56
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 01942143B9F6E48F3405A1718755CBEB5A07
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/p1JXjb2LczYltKrE1SbLNgCFh1Y.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 77.232.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b9:f6:e4:8f:34:05:a1:71:87:55:cb:eb:5a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a752578dbd8b733625b4aac4d526cb3600858756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:47:9e:c4:54:f9:86:14:79:e6:a2:0a:4b:
92:6e:52:9c:0b:eb:74:cc:7b:dd:1e:e0:a2:e3:a5:
5c:1f:dc:04:51:55:d0:c1:07:f5:f5:b4:fa:96:97:
b2:e8:50:bd:6b:dd:69:a1:15:c8:b5:71:a1:ed:70:
00:35:78:a9:8b:f8:54:05:75:96:aa:e7:7c:5b:94:
a7:04:4e:d6:b4:52:cf:0c:9b:bf:cf:c5:ec:dd:da:
f1:32:dc:b3:20:44:d1:5d:4a:43:84:5b:d7:0c:d4:
fe:bf:fc:fa:4a:fd:56:b8:77:8c:08:96:5a:a2:44:
05:dd:b3:af:cb:91:92:2b:01:8b:d0:77:bc:4f:b4:
8e:01:33:3d:c7:eb:d4:17:00:62:84:0b:a8:91:fc:
28:17:c6:59:67:ff:4f:16:b6:9a:5d:5a:ef:35:2b:
02:1e:e2:85:18:6e:07:e8:df:c3:2f:01:1d:60:2e:
40:af:d3:6e:ff:f8:04:b6:d1:54:be:ff:8b:f8:4b:
84:0e:c0:de:0b:6c:9f:d3:6e:85:bc:f1:cc:9e:d2:
3c:92:5c:76:9a:2c:ed:58:da:54:7d:84:38:a3:d8:
80:78:0a:e4:bd:38:3a:b8:61:98:77:c7:f3:dd:05:
05:d6:24:a1:d0:dc:3a:f1:1a:52:3e:64:d1:52:a4:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:57:8D:BD:8B:73:36:25:B4:AA:C4:D5:26:CB:36:00:85:87:56
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/p1JXjb2LczYltKrE1SbLNgCFh1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.97.0/24
Signature Algorithm: sha256WithRSAEncryption
74:80:a6:14:40:35:00:c8:2c:61:d8:bf:9d:a1:07:ff:1d:ad:
0a:43:a8:cf:ea:8c:a4:e4:54:bd:59:70:34:67:9b:4f:5f:39:
8b:a5:6e:39:11:b4:ce:ee:d8:8b:bf:8c:e2:30:96:6e:5e:43:
07:4b:5a:54:02:53:1a:54:54:32:df:46:df:4b:95:79:ad:17:
3a:ea:2f:db:3c:e1:02:cf:ea:2a:4b:8e:e9:16:bc:2d:ff:0d:
6e:a4:8a:e6:f8:2f:c7:74:e9:c6:29:91:3c:61:fa:dc:3f:04:
6a:73:03:ce:d6:87:a8:df:2e:cf:50:b0:b4:08:1b:ad:23:1a:
2d:83:38:34:30:a4:88:44:33:6f:4f:97:5d:46:58:dd:0c:8e:
37:68:d8:1b:33:68:e9:2c:7b:32:3f:6f:e0:91:0a:92:0a:11:
b4:72:ba:3a:58:fb:7b:52:88:cf:b2:21:cd:60:ad:35:d3:63:
1c:4e:1c:64:3f:b4:bc:93:b0:54:d3:c3:aa:58:e1:1d:1a:60:
5f:f4:1c:88:55:6f:19:60:b5:ee:d5:e8:5b:80:3f:8b:f3:72:
ae:8b:5c:fc:38:18:83:16:63:87:ca:f9:f4:5f:e7:05:c7:1a:
f7:c3:a5:0a:85:4f:ee:a1:11:88:e1:51:71:8e:c3:36:bc:21:
8b:43:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:46:50 2025 by rpki-client