Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/77oIKxIggLvEt0p9QsxiJYQB5eM.roa
File: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (raw, json)
Hash identifier: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=
Subject key identifier: EF:BA:08:2B:12:20:80:BB:C4:B7:4A:7D:42:CC:62:25:84:01:E5:E3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 019427B5A3F95B6FC65DEB08C415D75912AE
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/77oIKxIggLvEt0p9QsxiJYQB5eM.roa
Signing time: Thu 02 Jan 2025 15:50:02 +0000
ROA not before: Thu 02 Jan 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60243
IP address blocks: 185.34.48.0/24 maxlen: 24
185.34.49.0/24 maxlen: 24
185.34.50.0/24 maxlen: 24
185.34.51.0/24 maxlen: 24
2a04:5e80::/32 maxlen: 32
2a04:5e81::/32 maxlen: 32
2a04:5e82::/32 maxlen: 32
2a04:5e83::/32 maxlen: 32
2a04:5e84::/32 maxlen: 32
2a04:5e85::/32 maxlen: 32
2a04:5e86::/32 maxlen: 32
2a04:5e87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a3:f9:5b:6f:c6:5d:eb:08:c4:15:d7:59:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efba082b122080bbc4b74a7d42cc62258401e5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:39:ad:ec:ab:2c:29:92:07:79:5f:d5:58:
92:43:4c:83:6c:90:82:22:40:5a:2a:dd:70:c0:ef:
37:8c:4f:b9:c2:3f:8c:5b:15:22:d0:c4:e4:f1:ff:
17:40:53:84:81:94:30:e9:a3:be:78:91:bf:b1:02:
5f:ad:9c:36:89:3f:dc:28:cb:43:c5:48:1c:f7:6a:
39:b8:7e:f2:7f:4b:b3:b8:7e:f7:59:9a:bb:3a:9a:
2d:3f:f3:f8:15:77:c1:dd:80:92:94:f8:ec:4a:fc:
60:f1:6e:3b:96:d8:fc:b9:61:15:85:36:96:5a:10:
bb:0a:3d:0f:a0:53:e1:39:f8:b0:6b:a5:b5:66:3f:
e1:0e:ea:cf:a3:02:87:80:63:15:25:f7:24:26:78:
a8:f4:35:24:c5:e2:12:4f:b8:b9:c6:bc:be:4a:bc:
20:d1:8e:72:51:6d:40:14:2a:40:60:07:e3:22:90:
0e:05:8d:4e:d9:78:b5:33:b8:34:3b:2b:fe:0e:02:
5b:10:96:bd:a6:0f:b6:d6:de:1e:a5:cc:46:76:a8:
62:aa:09:2a:ae:22:4f:25:3f:9e:81:43:7a:74:5c:
1b:17:a4:e6:83:c0:53:87:c1:d7:e0:64:24:cb:63:
61:52:77:26:91:70:b7:20:1a:af:de:af:83:05:ac:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BA:08:2B:12:20:80:BB:C4:B7:4A:7D:42:CC:62:25:84:01:E5:E3
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/77oIKxIggLvEt0p9QsxiJYQB5eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.48.0/22
IPv6:
2a04:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
39:a7:a1:68:ff:73:ec:5a:a8:90:3d:78:e1:7d:26:e6:13:fa:
8c:f9:bb:9a:32:b7:98:b6:23:78:79:83:36:09:e4:26:3c:c6:
74:3a:6a:3c:70:5d:7e:a7:26:41:a4:f4:00:a6:16:38:e8:3b:
47:c2:26:70:af:6d:d0:05:b1:e9:08:fd:c6:ad:a0:ca:c1:eb:
6d:6e:89:87:8c:83:e5:49:d6:2e:70:51:46:e1:5a:8e:ea:66:
91:0f:d3:68:44:63:27:1e:01:8a:6d:cb:65:33:35:eb:b9:74:
8a:25:02:c2:78:fb:fe:45:ee:ce:46:c4:ee:e9:f9:6f:a5:b5:
22:8e:25:dd:09:30:11:42:9c:36:ba:66:d4:47:ad:d6:d9:a4:
bd:ea:df:20:61:cc:3c:34:e4:a1:88:0f:62:af:ba:85:d2:04:
80:43:ec:7f:3e:85:03:64:cd:93:29:b7:f8:1e:2e:2c:5c:87:
7b:16:19:10:3d:84:5a:61:b7:9a:a7:5b:c6:b4:11:a6:68:b4:
b9:05:f9:46:91:1b:40:d7:80:7c:76:21:26:83:1c:13:da:82:
15:55:e2:b8:63:3d:b1:ff:8c:6c:26:8e:c5:1d:45:3a:c3:3e:
62:02:2e:95:4a:c1:8a:5f:2e:bc:02:5c:69:57:e3:b5:15:f3:
3f:bf:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:24:05 2025 by rpki-client