Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/b2yocVZXIOpecOetC_ElRgzyl5M.roa
File: b2yocVZXIOpecOetC_ElRgzyl5M.roa (raw, json)
Hash identifier: 9zFvZ+ffs107FCXlayYlz0Ea4puh2yOZasKqOdWeHhI=
Subject key identifier: 6F:6C:A8:71:56:57:20:EA:5E:70:E7:AD:0B:F1:25:46:0C:F2:97:93
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBC76BA82FA744EF00B2150741E6BE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/b2yocVZXIOpecOetC_ElRgzyl5M.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215693
IP address blocks: 77.83.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c7:6b:a8:2f:a7:44:ef:00:b2:15:07:41:e6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f6ca871565720ea5e70e7ad0bf125460cf29793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:e2:93:c0:7a:52:9a:80:3a:5e:33:bc:28:
8e:6a:3d:4b:38:e2:b9:7b:a5:2b:b7:fd:76:be:86:
48:5d:40:11:38:d6:28:ac:b6:43:bc:ed:10:8e:25:
60:b3:59:49:51:33:2c:71:55:4c:24:da:62:de:8c:
18:d2:f0:1f:33:c3:80:79:d0:83:48:b7:cc:ac:93:
6a:ba:b2:99:4b:21:fc:18:51:f0:ab:cf:39:83:08:
67:94:66:3b:7c:5a:53:82:b5:53:76:a8:a7:dd:1d:
7a:2a:fa:61:d2:80:8e:32:28:ed:74:5c:e2:6f:87:
0e:b0:73:1b:86:dd:69:ab:39:67:47:1f:cf:07:94:
37:c4:88:85:f3:3b:b3:99:cd:8c:64:9f:51:01:8d:
e6:c9:6b:0c:7b:a3:0e:40:7a:6b:ea:6d:f2:06:bf:
ca:e9:98:6a:22:5b:dc:84:ce:e8:39:7e:11:a6:11:
b1:ff:ae:14:6a:9f:d5:1a:e7:b9:f3:5a:dc:c2:57:
11:7d:ad:a7:bf:c7:9e:31:10:1d:f7:3f:03:40:b0:
c6:d2:35:cf:a7:a0:00:be:b7:f4:62:66:b6:6c:bd:
f0:64:77:1f:6c:b2:54:d9:b1:39:10:82:a9:f2:cf:
b8:c0:42:6e:dd:70:1f:bc:3f:03:a7:a6:45:c5:8d:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:A8:71:56:57:20:EA:5E:70:E7:AD:0B:F1:25:46:0C:F2:97:93
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/b2yocVZXIOpecOetC_ElRgzyl5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7f:25:02:1e:11:f9:02:5d:8e:59:93:cf:80:60:c5:3b:b7:
81:9a:24:60:d9:e8:0e:03:77:2c:fa:60:bd:c0:e4:f5:04:e2:
f4:40:98:e3:45:65:0c:e7:d7:db:b5:31:87:8d:7e:6a:e6:c5:
66:10:5b:e7:2a:d4:d2:92:b7:06:51:63:80:d0:c9:c6:bc:23:
cd:e1:b4:4d:02:6f:d4:89:19:4f:0c:7e:ba:a3:39:06:7f:d2:
d5:55:3a:8d:e1:53:d0:d5:4f:bf:95:7a:a9:9c:10:06:58:33:
6c:98:16:cd:7a:c6:38:89:29:b3:c1:fa:a3:ac:07:87:20:c0:
7e:05:71:5b:b8:c2:85:60:e2:58:30:a9:11:21:cd:03:2f:37:
84:ec:99:2a:2c:c4:9f:28:39:4f:60:f6:d6:50:4b:05:92:34:
6b:8e:a7:e5:1a:51:7f:1b:7a:2c:e4:cd:c5:4b:89:14:ca:9c:
9a:80:d4:33:eb:8a:47:70:3d:7a:10:40:99:43:06:33:a7:6a:
2c:a0:7f:25:7c:71:d7:b1:b2:dc:33:22:58:59:fc:9d:d6:43:
94:c3:93:fc:96:8a:31:fa:d7:ff:1c:dd:82:dc:a4:7a:bf:c7:
9a:11:13:42:2e:fb:63:bb:5f:bf:c4:29:5a:fa:22:91:28:c0:
9a:5a:4e:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+8drqC+nRO8AshUHQea+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTAxMTc0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjZjYTg3MTU2NTcyMGVhNWU3MGU3YWQwYmYxMjU0NjBjZjI5NzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrLik8B6UpqAOl4zvCiOaj1LOOK5
e6Urt/12voZIXUARONYorLZDvO0QjiVgs1lJUTMscVVMJNpi3owY0vAfM8OAedCD
SLfMrJNqurKZSyH8GFHwq885gwhnlGY7fFpTgrVTdqin3R16Kvph0oCOMijtdFzi
b4cOsHMbht1pqzlnRx/PB5Q3xIiF8zuzmc2MZJ9RAY3myWsMe6MOQHpr6m3yBr/K
6ZhqIlvchM7oOX4RphGx/64Uap/VGue581rcwlcRfa2nv8eeMRAd9z8DQLDG0jXP
p6AAvrf0Yma2bL3wZHcfbLJU2bE5EIKp8s+4wEJu3XAfvD8Dp6ZFxY2XwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9sqHFWVyDqXnDnrQvxJUYM8peTMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvYjJ5b2NWWlhJT3BlY09ldENfRWxSZ3p5bDVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVMnMA0G
CSqGSIb3DQEBCwUAA4IBAQAQfyUCHhH5Al2OWZPPgGDFO7eBmiRg2egOA3cs+mC9
wOT1BOL0QJjjRWUM59fbtTGHjX5q5sVmEFvnKtTSkrcGUWOA0MnGvCPN4bRNAm/U
iRlPDH66ozkGf9LVVTqN4VPQ1U+/lXqpnBAGWDNsmBbNesY4iSmzwfqjrAeHIMB+
BXFbuMKFYOJYMKkRIc0DLzeE7JkqLMSfKDlPYPbWUEsFkjRrjqflGlF/G3os5M3F
S4kUypyagNQz64pHcD16EECZQwYzp2osoH8lfHHXsbLcMyJYWfyd1kOUw5P8loox
+tf/HN2C3KR6v8eaERNCLvtju1+/xCla+iKRKMCaWk4F
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:34 2025 by rpki-client