Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/nya5VnmImUQCPczzWGzozyYmAoM.roa
File: nya5VnmImUQCPczzWGzozyYmAoM.roa (raw, json)
Hash identifier: qg+/w/vLW7M/opQjKzbc9S+ktTmX4UXhPUmqd4d4i7s=
Subject key identifier: 9F:26:B9:56:79:88:99:44:02:3D:CC:F3:58:6C:E8:CF:26:26:02:83
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 0194258FBDC9E93725D03D4DEF6B1EB6B18C
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/nya5VnmImUQCPczzWGzozyYmAoM.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 77.110.64.0/22 maxlen: 22
77.110.68.0/22 maxlen: 22
77.110.72.0/22 maxlen: 22
77.110.76.0/22 maxlen: 22
77.110.80.0/22 maxlen: 22
77.110.84.0/22 maxlen: 22
77.110.88.0/22 maxlen: 22
77.110.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bd:c9:e9:37:25:d0:3d:4d:ef:6b:1e:b6:b1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f26b95679889944023dccf3586ce8cf26260283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:80:33:d2:ef:7a:e9:ee:ba:e2:28:0f:d8:
6d:0a:6d:c7:8c:b3:11:1e:c7:38:3c:d8:d7:70:5a:
a6:fa:7e:fb:0c:64:06:11:ef:55:db:d8:73:58:21:
82:fb:3b:0a:4d:16:5c:cd:61:96:f9:f7:b7:68:4d:
a7:dd:f3:f0:d4:c3:60:94:2e:86:7c:28:be:1e:e3:
83:28:ac:fe:a9:68:9e:56:8d:f9:16:45:1c:a8:d6:
43:3a:4a:95:21:de:c1:75:58:ef:38:21:67:0c:c4:
c4:41:0c:72:c9:a0:90:43:a1:8c:ea:b0:84:ee:3c:
a7:42:48:69:90:d4:85:5a:bd:83:11:ab:a0:ea:28:
48:0d:8c:63:d7:a5:f9:a5:9e:99:95:c9:bd:c1:82:
cf:ae:13:8c:f9:41:37:4f:22:0d:0a:83:d1:e2:03:
63:3c:56:6d:6f:22:aa:52:2b:2f:ec:ed:84:59:ec:
49:e9:83:1c:ea:b4:22:10:14:7f:c7:37:f7:75:79:
e4:7d:d2:23:7f:3b:d2:0c:ee:49:2c:d8:55:0c:41:
33:0f:dd:43:62:b2:8c:d8:f7:d9:8d:4d:9b:02:00:
3e:03:70:46:a3:e6:27:71:7d:87:70:47:00:27:0f:
10:82:a2:06:8f:6a:de:51:ef:f8:f8:d1:fe:5b:fc:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:26:B9:56:79:88:99:44:02:3D:CC:F3:58:6C:E8:CF:26:26:02:83
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/nya5VnmImUQCPczzWGzozyYmAoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.64.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:ee:f3:d9:0b:ea:fd:26:39:26:0e:f1:b4:96:c7:31:30:9d:
66:fb:b1:fb:22:ba:c4:e9:83:08:5d:45:96:95:49:d7:35:89:
d7:a5:43:2f:f7:23:7c:5a:2e:77:98:c1:13:b3:99:25:28:7e:
96:ac:2d:98:da:e9:19:9f:78:e1:fd:c4:1f:a1:a9:0c:93:74:
88:a2:93:46:eb:15:46:3f:d9:c2:2f:ca:a6:fb:8f:fc:47:10:
d3:5a:11:aa:4e:42:db:bb:29:ef:e3:ec:40:13:09:ee:2b:a0:
89:6b:ab:26:87:59:16:72:9b:64:af:64:3d:8c:d7:f7:b5:52:
2d:58:4d:a9:3e:e5:8b:60:c2:ca:55:a6:f3:40:5d:20:9c:51:
cd:ba:5d:64:3e:f5:b1:20:d8:17:09:e1:e5:e4:e6:f2:92:a8:
6f:86:d3:10:47:07:36:d6:85:28:60:c3:27:ac:53:2c:87:0e:
99:db:a0:36:0e:33:1a:b3:94:7c:73:1a:43:02:68:b4:b1:5d:
bc:f8:e5:bd:d3:d6:06:e4:42:98:e1:ce:44:66:35:e0:13:b1:
72:75:b3:17:52:67:aa:22:eb:d6:7b:76:62:d7:6e:6e:9e:c6:
bb:56:b3:d5:92:bb:e5:27:4b:00:15:a8:c0:9a:78:a6:1c:af:
70:12:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:54 2025 by rpki-client