Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa
File: L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa (raw, json)
Hash identifier: RmMXdLfBhblx+m1KktkkN/nQ0YOW2Tp0s4LZY86DblA=
Subject key identifier: 2F:F5:E6:CF:0A:D8:BA:EF:B7:AD:16:3F:88:C4:4C:D3:24:07:22:0E
Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Certificate serial: 019423D6B7EE214E3BB95E08FE0542EC1B91
Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa
Signing time: Wed 01 Jan 2025 21:47:41 +0000
ROA not before: Wed 01 Jan 2025 21:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49719
IP address blocks: 77.87.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b7:ee:21:4e:3b:b9:5e:08:fe:05:42:ec:1b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Validity
Not Before: Jan 1 21:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff5e6cf0ad8baefb7ad163f88c44cd32407220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:5b:95:38:68:02:8c:e2:c7:8c:c2:ae:a0:
d5:36:43:4f:22:3b:62:55:28:24:70:5a:0c:ee:90:
8e:76:42:e0:87:87:ca:f5:87:4e:14:cd:f7:5f:84:
ec:0e:22:5b:52:93:e1:d0:ef:cc:bb:f8:c6:ff:eb:
8b:db:bb:ba:d8:f4:f8:03:42:37:36:8e:b1:88:8a:
7d:c2:a7:58:e8:a8:24:a8:09:6a:99:45:03:97:2d:
18:43:a1:cd:a7:5a:0c:a3:9a:4f:4b:c8:d8:6a:43:
0d:3c:bf:30:b5:b1:2c:87:43:59:bb:9a:e4:95:25:
71:b1:f5:66:a0:f5:7e:d2:a1:a2:3f:6d:01:67:fa:
14:d6:87:61:29:2d:a3:db:ca:0a:42:86:bf:8e:2f:
40:1c:5e:ca:58:66:73:c5:7f:23:d2:23:c9:dc:22:
34:69:a4:42:40:bf:5f:e5:0a:d5:7b:f5:69:72:2d:
c3:76:7c:87:40:7f:66:78:a2:f2:6e:cf:cf:2b:54:
a5:e3:72:0a:9d:00:07:fe:0a:34:a1:30:77:3f:79:
e0:dd:dd:2a:f6:1e:50:06:37:47:ee:70:33:ce:b2:
b7:94:96:9f:1c:8e:77:fa:a6:46:b6:89:ef:73:5c:
1f:04:89:62:74:80:4a:9f:45:f3:ed:93:14:37:9e:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:E6:CF:0A:D8:BA:EF:B7:AD:16:3F:88:C4:4C:D3:24:07:22:0E
X509v3 Authority Key Identifier:
keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.88.0/21
Signature Algorithm: sha256WithRSAEncryption
24:d5:b4:30:3f:aa:9f:1f:51:f6:95:e3:13:3e:04:c8:32:15:
23:9a:83:8a:4d:5e:07:24:f1:18:01:b8:bc:0d:88:54:a6:1f:
c4:46:6f:7a:9c:82:49:e5:7a:71:9a:56:c2:70:78:52:01:5f:
62:be:4d:de:0e:e1:ba:af:fa:f0:a6:05:33:38:53:61:5f:6f:
7c:b1:ae:9b:65:1d:ad:1e:b5:8c:4c:27:b3:bf:3b:6d:e3:c8:
05:33:fb:ba:02:ef:aa:48:a8:20:f4:da:3b:dd:83:13:e5:d4:
a4:43:84:36:92:72:45:b2:c6:e2:a0:84:ab:e6:c7:3b:9b:c8:
58:fd:3c:f0:3a:56:81:91:98:53:2f:b5:8f:7f:90:12:52:75:
5b:7c:10:82:75:bf:73:37:5c:34:2d:ba:01:89:77:bc:91:d0:
a0:d3:cd:86:98:2d:06:78:92:c3:1a:18:ae:1c:72:90:45:f8:
4b:34:51:ce:55:5e:a2:96:eb:92:6e:38:94:34:68:e2:cc:93:
46:b4:65:2f:4f:fb:6d:0d:62:96:57:5c:73:c6:3d:9b:8b:86:
c6:59:28:d4:51:7d:91:ef:20:58:e0:6a:0d:ea:8b:be:62:09:
d9:91:11:4d:b0:d9:05:10:5b:db:41:0c:37:82:68:11:33:f1:
96:16:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:27:07 2025 by rpki-client