Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa
File: 5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa (raw, json)
Hash identifier: 3M5MqZOHY6IgU/oY5PEX9Quago5F235Gft3ZQVLU+EE=
Subject key identifier: E6:C2:32:65:45:31:50:AA:88:01:65:60:52:4C:79:78:11:94:E4:DD
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 01961AC8D692F524BDD37656BEA53301A043
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa
Signing time: Wed 09 Apr 2025 13:41:31 +0000
ROA not before: Wed 09 Apr 2025 13:41:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197876
IP address blocks: 77.73.80.0/21 maxlen: 24
2a03:ab80::/32 maxlen: 32
2a03:ab80:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:c8:d6:92:f5:24:bd:d3:76:56:be:a5:33:01:a0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Apr 9 13:41:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6c23265453150aa88016560524c79781194e4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:0d:3a:b8:9e:89:a1:2d:d1:f1:18:92:35:
e9:c3:17:69:da:ea:a6:30:54:61:49:c3:d5:b0:f9:
88:20:94:73:0e:73:b5:55:d8:d3:d0:a1:af:6a:6e:
33:0c:9a:20:37:e1:72:6d:c1:a1:d0:9a:ee:4b:6a:
75:a8:1f:88:60:19:68:2e:3b:a3:e1:4c:7c:a2:68:
47:ff:44:41:85:b7:e3:88:10:89:09:71:45:10:64:
3b:5b:4f:ca:30:57:39:86:2f:75:a4:c8:bd:0d:87:
a7:4b:77:bc:77:f1:4d:81:d8:87:b1:30:cf:81:f0:
03:23:ac:1b:6f:4b:92:c4:af:7e:85:a9:6b:50:32:
0e:dc:28:80:06:32:27:1e:91:fc:59:79:11:9a:f7:
4c:69:e4:26:59:4b:d9:02:50:e7:dd:cd:af:90:81:
eb:15:ef:fe:ce:eb:4b:73:24:6a:5c:dc:da:ad:e8:
bd:4c:3d:05:60:65:60:17:c6:e0:ce:16:19:51:a7:
53:d9:48:61:c1:5f:15:a4:48:37:d6:cf:6f:96:85:
22:18:dc:f8:01:f5:12:7d:53:0c:5c:cf:ae:c9:1a:
7b:e6:10:d2:58:b0:9f:7f:11:4e:5d:de:3c:b3:f8:
e6:45:01:0f:c1:9b:c1:eb:d4:d6:ff:62:fd:36:33:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:32:65:45:31:50:AA:88:01:65:60:52:4C:79:78:11:94:E4:DD
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.80.0/21
IPv6:
2a03:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
65:ff:4f:f1:71:3b:18:dd:cb:98:20:46:27:fa:af:c1:a1:cf:
71:ed:4b:ac:f5:f0:37:e1:18:f1:49:19:01:9a:25:e1:44:32:
95:47:8e:5b:e2:43:41:3a:0a:6f:11:b3:07:a3:e0:c5:43:c2:
40:f8:f6:66:e0:42:0a:25:04:ed:16:5f:a2:62:fb:27:2e:da:
ba:67:e6:0e:a0:f2:df:bb:d9:e1:c2:ce:d5:4d:66:5d:d4:f2:
87:99:a5:6b:dd:a5:f3:99:75:07:32:37:02:ae:0e:a8:a4:74:
37:aa:17:38:ef:c0:a2:3f:84:1d:70:15:f2:49:28:6e:b0:26:
8e:0a:5d:c5:20:51:8d:84:c4:95:39:9f:fb:d1:47:f4:cf:a4:
9c:eb:01:c8:c2:91:d3:3e:12:71:95:f3:c9:81:86:30:05:ab:
b5:3d:51:bc:34:9b:13:cd:33:47:69:55:7f:ff:97:e7:b3:bc:
e5:c3:eb:05:8b:89:ce:6d:b4:62:55:b6:31:ce:c2:ee:fb:49:
c1:1a:6d:f3:3c:e9:b1:8e:57:c9:11:90:19:9f:ec:64:54:27:
74:3e:ff:37:a7:0f:69:b8:81:dd:01:1e:09:60:3d:38:83:61:
3a:2c:06:97:da:69:b3:7c:12:6e:f8:49:d8:f7:a8:25:f5:bb:
99:ef:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:55:11 2025 by rpki-client