Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1FBBlpUuY-Qcp6mGF6Tc-D-YyXc.roa
File: 1FBBlpUuY-Qcp6mGF6Tc-D-YyXc.roa (raw, json)
Hash identifier: qBOpn0GZfCCvSYHQgWaoYzjiyBzdBNdj+Zch7J5KH6Q=
Subject key identifier: D4:50:41:96:95:2E:63:E4:1C:A7:A9:86:17:A4:DC:F8:3F:98:C9:77
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01954DFDE7E7A800487E56F6B797B50FF8CA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1FBBlpUuY-Qcp6mGF6Tc-D-YyXc.roa
Signing time: Fri 28 Feb 2025 19:17:20 +0000
ROA not before: Fri 28 Feb 2025 19:17:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58087
IP address blocks: 77.90.59.0/24 maxlen: 24
89.144.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:fd:e7:e7:a8:00:48:7e:56:f6:b7:97:b5:0f:f8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 28 19:17:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4504196952e63e41ca7a98617a4dcf83f98c977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:48:e3:cc:40:04:36:a9:3c:13:0e:24:22:
25:21:14:68:78:b2:e2:df:65:c8:c6:31:e2:b4:02:
42:90:68:fe:ea:a3:1d:f1:b4:2f:42:48:f3:7f:b3:
10:ce:c6:3e:aa:e0:91:36:f3:40:c0:c8:12:5f:df:
e4:9f:87:ad:8f:5b:de:75:95:36:ff:e3:50:56:dc:
95:ef:0c:39:c1:8e:34:4d:9a:05:62:b7:42:56:f8:
56:d9:4b:0f:59:56:62:b0:f8:1e:f1:95:a4:eb:01:
74:31:34:f4:81:e0:61:76:3c:37:f1:fb:45:a7:55:
f9:81:db:e4:49:47:ae:b4:d5:6d:d5:0e:1e:21:87:
04:d6:c5:29:c2:7c:a5:d0:71:9f:b4:7e:1b:0c:ad:
ba:23:45:41:a1:c4:1d:20:dc:2b:3a:08:7d:78:85:
cf:b3:97:74:d7:a8:0b:39:c9:7e:33:60:ee:d0:54:
d2:c3:18:03:d7:40:9a:0d:4f:9d:f0:68:07:3a:1c:
e6:9b:c4:58:b2:63:55:25:cd:b7:cf:67:a4:ef:9d:
c6:2d:ac:5a:31:2e:f8:6b:ed:8f:79:ec:2a:14:8f:
b2:b4:3b:cc:f4:72:ac:ef:d5:4b:f9:40:d9:14:b2:
7f:3b:f1:14:11:8c:e4:ba:ca:75:7d:ea:77:61:ab:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:50:41:96:95:2E:63:E4:1C:A7:A9:86:17:A4:DC:F8:3F:98:C9:77
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1FBBlpUuY-Qcp6mGF6Tc-D-YyXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.59.0/24
89.144.37.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e1:59:83:ec:86:58:cd:a7:c0:a4:f6:91:3e:b2:2c:ff:71:
d9:28:41:4a:33:47:bf:4e:91:f4:85:5d:36:48:7d:f4:91:6d:
71:18:c5:68:8f:8a:4c:2a:a7:66:ba:55:4c:70:28:aa:86:7c:
5f:55:92:70:7e:0a:c1:eb:44:de:cf:cf:8a:d2:bd:af:e8:d7:
e0:a9:a5:63:7b:4a:45:b1:74:25:42:fa:8e:9a:c4:85:1b:ee:
67:ab:c5:3c:03:70:ec:26:86:38:45:eb:8b:11:30:f6:80:ef:
42:7c:e5:32:a1:54:e9:23:cb:30:58:f0:ef:2a:d8:74:c1:04:
dd:52:d3:96:1b:b7:46:4c:64:70:87:62:07:00:f0:cf:db:dd:
f3:fb:25:18:44:19:30:2f:fa:0e:61:22:f1:0a:ff:d6:9b:13:
a0:c8:3f:fa:2d:b3:cf:89:5b:a2:45:a8:04:a8:11:1e:32:cd:
67:56:30:11:dd:fb:94:76:ec:0b:6d:4e:06:77:33:c6:8a:ab:
57:f4:34:e8:72:4b:35:1e:cb:65:3d:9b:16:dd:20:81:fc:c0:
5c:1c:d8:22:74:b7:8a:33:fa:8a:6b:e6:00:ec:60:e0:d4:79:
68:e2:1c:80:94:85:21:bf:ce:ac:c3:ca:20:3e:a0:2c:27:b8:
51:c5:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:50:27 2025 by rpki-client