Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/dl3PAMO_cjTEN-X9xexRuh-Chb4.roa
File: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (raw, json)
Hash identifier: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=
Subject key identifier: 76:5D:CF:00:C3:BF:72:34:C4:37:E5:FD:C5:EC:51:BA:1F:82:85:BE
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019427480E7EEE9881E205874AAB9A908E24
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/dl3PAMO_cjTEN-X9xexRuh-Chb4.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39135
IP address blocks: 77.238.64.0/19 maxlen: 19
185.73.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0e:7e:ee:98:81:e2:05:87:4a:ab:9a:90:8e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=765dcf00c3bf7234c437e5fdc5ec51ba1f8285be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:0d:89:a1:c7:bf:34:c0:cd:4b:3d:c4:bf:
5e:6a:2f:07:5f:0b:93:15:33:c2:77:4e:9f:66:d6:
08:fa:a0:e1:37:b5:75:fe:3d:2e:a1:98:56:bf:09:
5a:19:1f:ae:b1:a1:f1:af:15:df:ef:16:45:64:58:
1f:63:8c:b2:e7:7d:c6:fc:19:20:22:43:9f:5f:f9:
b4:d2:45:09:4f:62:c0:64:41:0a:5e:d7:c5:47:f2:
67:94:f8:76:ad:0e:d0:70:76:a9:c8:d6:72:7d:c8:
ee:9a:d5:95:81:db:d2:4b:f8:2a:89:c0:22:c3:88:
12:bc:ee:ae:b8:f5:79:e5:99:e6:9d:13:70:87:6a:
6d:a6:f6:28:d0:f7:ee:81:5e:34:45:2e:df:e8:88:
21:b4:59:84:0b:14:89:25:b7:69:8c:0c:b5:75:c3:
d8:77:78:1a:e8:64:94:2e:7d:ed:fb:47:ba:79:6e:
be:3c:8a:89:ef:61:db:4f:b8:1d:ff:30:a4:bc:24:
bd:4a:e3:ce:15:47:b4:85:b8:0f:d8:6f:28:cb:0f:
a1:f8:af:07:0d:aa:63:23:b0:1c:60:79:62:73:cf:
30:ac:61:76:28:20:71:76:40:c4:8b:07:85:b5:e9:
7e:3f:e2:2b:67:91:ae:1e:24:da:89:51:9a:1a:11:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5D:CF:00:C3:BF:72:34:C4:37:E5:FD:C5:EC:51:BA:1F:82:85:BE
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/dl3PAMO_cjTEN-X9xexRuh-Chb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.238.64.0/19
185.73.56.0/22
Signature Algorithm: sha256WithRSAEncryption
97:48:1e:da:cb:d9:b2:28:1a:a0:a9:c3:87:26:8e:9c:74:be:
03:c2:05:ca:51:ae:bb:00:aa:a4:be:0b:d2:4e:f9:68:fe:c6:
48:3e:6c:b8:e3:ec:e6:83:e6:52:58:3a:03:62:93:f6:28:03:
be:30:65:16:77:a5:2b:27:b8:b6:ce:f1:90:5f:bd:80:c8:5a:
54:66:7b:61:ab:a9:82:1c:fd:88:53:bc:83:85:78:ce:f5:29:
c2:c3:0b:48:02:20:76:fb:b4:43:89:37:df:58:3a:15:be:53:
95:e6:1e:ad:6f:62:32:ba:05:cb:ae:85:b8:18:29:a1:81:bb:
4a:ac:e4:ff:ad:4d:3a:4f:97:3a:6e:14:bf:65:66:53:53:22:
89:ae:f1:2a:2d:ec:81:5b:e2:12:d2:ac:dc:96:c7:59:35:1d:
10:39:c9:86:d5:84:8c:a5:a6:5b:18:3f:f7:49:84:4a:f4:55:
23:cb:fc:e0:1f:78:f2:fb:44:dd:f7:13:f0:b6:55:d2:e4:05:
28:00:11:a4:f5:bf:43:5a:3e:e2:0b:8a:94:b0:3a:76:1b:e0:
4e:16:de:15:c0:3a:df:ba:f1:25:ab:4e:8f:6a:6a:d0:04:96:
42:1d:cd:48:03:ae:0e:69:db:58:12:bc:36:d9:7f:db:14:8b:
f2:e7:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:32 2025 by rpki-client