Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dwD3cS9qOG9VSHuY1vqr9WYAPuk.roa
File: dwD3cS9qOG9VSHuY1vqr9WYAPuk.roa (raw, json)
Hash identifier: V+rwCJiljrNNciVn+fofvSsr8e9GZF4witZfgfiUxR8=
Subject key identifier: 77:00:F7:71:2F:6A:38:6F:55:48:7B:98:D6:FA:AB:F5:66:00:3E:E9
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281FB002A72A0E4E9B2D310C925307
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dwD3cS9qOG9VSHuY1vqr9WYAPuk.roa
Signing time: Thu 02 Jan 2025 17:55:05 +0000
ROA not before: Thu 02 Jan 2025 17:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60966
IP address blocks: 78.83.156.0/23 maxlen: 23
78.83.158.0/24 maxlen: 24
78.90.198.0/23 maxlen: 23
78.90.200.0/24 maxlen: 24
95.111.39.0/24 maxlen: 24
95.111.40.0/24 maxlen: 24
95.111.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1f:b0:02:a7:2a:0e:4e:9b:2d:31:0c:92:53:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7700f7712f6a386f55487b98d6faabf566003ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:f3:96:2f:24:7b:42:5a:30:01:03:f1:0e:
e4:18:ae:dd:1f:3d:f8:a0:17:8a:3a:bb:af:47:14:
36:60:23:31:e0:c9:20:92:de:33:95:f5:a7:69:51:
da:b8:b1:62:e4:fd:6e:ca:7a:38:d2:c0:f8:0c:91:
5a:f0:aa:32:b5:fd:98:e2:a6:1b:0b:3e:13:4c:7c:
87:27:22:80:9f:1b:56:56:7d:60:d1:fb:ad:8d:e9:
c5:e1:96:82:3d:ca:8e:88:9e:ff:cf:43:85:10:2e:
cc:4b:73:31:d1:41:2d:ac:11:39:a9:39:a7:0e:72:
6e:e5:cc:24:14:c3:b1:76:67:71:5f:f6:cf:5d:59:
77:25:b2:97:5c:a4:e5:99:23:cb:e5:5d:df:36:5d:
74:26:bc:e0:5e:03:8a:67:3d:e8:5a:71:78:74:5d:
cb:fa:da:b3:b0:11:40:72:76:cd:a9:af:6a:5c:d2:
49:f1:cb:dc:01:16:83:7c:06:55:e1:58:1e:a1:25:
3a:fb:a5:28:96:a3:1a:bf:ed:d4:d2:50:02:11:06:
62:16:84:8d:37:0b:2f:12:42:fe:85:b7:97:f2:03:
b0:87:07:c2:28:08:fb:09:41:c8:10:0f:d2:a2:8d:
36:1b:85:89:33:ed:81:2b:ac:e9:3f:32:2a:dd:6f:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:F7:71:2F:6A:38:6F:55:48:7B:98:D6:FA:AB:F5:66:00:3E:E9
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dwD3cS9qOG9VSHuY1vqr9WYAPuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.156.0-78.83.158.255
78.90.198.0-78.90.200.255
95.111.39.0-95.111.40.255
95.111.92.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bd:9d:0e:26:6e:36:c8:7f:76:5c:5c:40:ff:69:17:ce:ac:
64:41:a8:42:6a:a8:08:90:69:59:5f:b7:11:94:9a:4a:50:c7:
12:dc:47:22:36:6e:eb:33:c6:1a:28:73:1f:bb:53:c5:6a:8b:
bb:e6:bd:a9:a6:4c:0f:50:5c:d6:1e:af:11:46:bf:73:1a:89:
b8:a1:e5:9b:ff:42:a7:3a:d3:72:e8:ae:37:d8:cf:fd:10:a6:
32:55:22:ba:26:9b:c7:91:8a:d7:4e:a9:a6:f0:7f:5c:f7:06:
fb:b7:d6:4c:4f:2f:8e:c6:86:46:33:76:dc:98:42:8e:da:df:
9c:52:dc:ef:b2:ba:e9:e0:9a:e0:cc:ad:fb:f8:c9:c0:04:1d:
db:e5:81:77:c5:97:69:f3:71:6c:24:c3:f4:96:3a:ac:ec:f2:
0a:b3:1b:f1:53:46:b7:d8:76:61:f2:57:7e:12:32:4b:18:70:
71:bc:a1:5b:68:a6:9f:85:00:ce:bb:79:ab:ea:f6:63:cd:46:
8b:14:a2:88:05:73:7c:14:df:28:a0:d8:49:a3:ed:71:28:14:
1d:7c:6a:a8:22:dc:5d:82:b0:c0:e8:ad:d3:f1:da:b4:d1:36:
93:cf:99:80:b4:b6:69:a1:1b:0b:ea:17:0e:7b:ee:24:f0:2f:
9c:6a:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:42:44 2025 by rpki-client