Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/_NRuiaH4rITcKDBvJBfsltXgb0k.roa
File: _NRuiaH4rITcKDBvJBfsltXgb0k.roa (raw, json)
Hash identifier: AZ8OzcR8BWD5gBfN+FKNavAS3ygzUESf9YOcCuXRnn4=
Subject key identifier: FC:D4:6E:89:A1:F8:AC:84:DC:28:30:6F:24:17:EC:96:D5:E0:6F:49
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 0194F9A142B84105E906B8B030C6005BBBEC
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/_NRuiaH4rITcKDBvJBfsltXgb0k.roa
Signing time: Wed 12 Feb 2025 10:08:02 +0000
ROA not before: Wed 12 Feb 2025 10:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39582
IP address blocks: 37.77.0.0/19 maxlen: 24
37.77.1.0/24 maxlen: 24
37.77.2.0/24 maxlen: 24
37.77.3.0/24 maxlen: 24
37.77.4.0/24 maxlen: 24
37.77.5.0/24 maxlen: 24
37.77.6.0/24 maxlen: 24
37.77.7.0/24 maxlen: 24
37.77.8.0/24 maxlen: 24
37.77.9.0/24 maxlen: 24
37.77.10.0/24 maxlen: 24
37.77.12.0/24 maxlen: 24
37.77.13.0/24 maxlen: 24
37.77.14.0/24 maxlen: 24
37.77.15.0/24 maxlen: 24
37.77.16.0/24 maxlen: 24
37.77.17.0/24 maxlen: 24
37.77.18.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.30.0/24 maxlen: 24
37.77.31.0/24 maxlen: 24
2a02:4300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:a1:42:b8:41:05:e9:06:b8:b0:30:c6:00:5b:bb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Feb 12 10:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcd46e89a1f8ac84dc28306f2417ec96d5e06f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:54:87:88:10:10:b0:30:6b:24:b1:04:51:
73:23:13:e9:01:8a:d9:4c:92:fe:16:e1:f3:64:20:
12:b3:c7:c9:c2:b4:65:d9:81:75:c0:a3:79:48:78:
26:fe:fb:bd:87:f5:ad:d1:36:eb:3b:37:57:e1:3f:
08:9f:97:e9:0b:e2:dc:16:14:a9:98:0d:fb:34:d7:
cc:d2:33:83:dd:ee:cc:0d:ad:2c:93:58:76:4d:84:
37:31:6f:ac:b9:68:08:f6:53:d9:79:42:b9:e1:44:
de:39:c9:6a:01:7b:97:65:bd:e3:4a:fa:b8:a6:b8:
9a:ed:6d:2b:52:f1:18:55:36:0f:c6:93:6a:85:29:
25:32:83:04:bd:f3:3f:ce:33:f8:b9:91:16:e7:5a:
02:01:e9:04:74:eb:a8:1b:80:45:f3:5d:91:32:57:
48:3f:a9:87:ea:9a:14:e5:1c:86:4e:45:28:c9:e9:
6b:4d:fe:03:27:0d:9a:c3:b8:5e:6d:7a:21:36:58:
75:e1:1d:c6:90:5a:b1:20:09:12:65:e3:70:32:58:
47:1c:5c:b2:f3:17:ab:a5:b6:a4:8a:6d:e2:b2:f3:
bf:be:28:39:72:26:b7:31:b8:b5:be:f1:ec:bc:85:
65:a9:d6:3f:30:d8:bc:f6:bd:ff:1a:f6:01:52:ff:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D4:6E:89:A1:F8:AC:84:DC:28:30:6F:24:17:EC:96:D5:E0:6F:49
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/_NRuiaH4rITcKDBvJBfsltXgb0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.0.0/19
IPv6:
2a02:4300::/32
Signature Algorithm: sha256WithRSAEncryption
2b:7c:2c:22:77:2b:fd:40:0a:d1:6d:e1:c6:ca:fa:c1:35:7b:
b6:83:4a:61:88:6f:db:73:68:22:a0:db:4e:98:d5:ca:37:a4:
8d:26:53:c8:96:14:28:cd:6f:7d:34:f1:fd:53:d3:2d:f1:7b:
de:57:2a:95:c5:50:f0:30:2e:95:fc:a6:c8:d2:8e:40:cc:e9:
3d:6b:a4:f3:17:9b:be:64:61:f6:7e:db:98:8d:c5:aa:e2:5f:
5f:a7:63:e1:25:67:04:6d:9f:05:de:2a:34:71:1f:ae:f9:18:
52:91:09:9d:5a:39:b6:34:95:31:57:4c:a1:2a:88:ea:59:c0:
04:c9:f0:9d:7d:3d:c6:d9:26:c4:13:2c:05:d3:0a:55:b1:a0:
73:50:8a:ab:6e:c6:3c:ef:ce:fd:e8:fa:69:da:89:e8:0b:4c:
ae:6f:08:c4:9e:cc:fc:4b:92:93:be:a4:5a:03:48:db:ab:22:
fc:ff:36:4a:d7:bf:33:d3:c7:76:a9:64:d7:a2:cc:19:14:9c:
27:82:86:7a:ac:27:44:a6:21:56:24:69:c6:11:1e:3a:c9:68:
c9:3b:4e:9e:fc:4d:55:32:27:5f:c6:68:b4:10:2d:7d:cb:28:
3b:4c:72:8e:b8:96:a0:be:49:71:63:f7:1a:fb:bc:fe:57:19:
54:d8:b0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:42 2025 by rpki-client