Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/9z07Ep8X99T8A7LpSlZHJcRnI2I.roa
File: 9z07Ep8X99T8A7LpSlZHJcRnI2I.roa (raw, json)
Hash identifier: 7LBUT0v/DK8eTfhuPoECCdcdeNcWHCd2c1LGsoO43SE=
Subject key identifier: F7:3D:3B:12:9F:17:F7:D4:FC:03:B2:E9:4A:56:47:25:C4:67:23:62
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCAA61ED0DBE01D813719A497438D3
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/9z07Ep8X99T8A7LpSlZHJcRnI2I.roa
Signing time: Thu 02 Jan 2025 07:48:23 +0000
ROA not before: Thu 02 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34342
IP address blocks: 77.79.225.0/25 maxlen: 25
77.79.244.0/22 maxlen: 22
85.232.248.0/24 maxlen: 24
128.204.220.0/23 maxlen: 23
185.2.112.0/22 maxlen: 22
195.167.156.0/24 maxlen: 24
195.167.157.0/24 maxlen: 24
2001:1a68:19:400::/54 maxlen: 54
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:aa:61:ed:0d:be:01:d8:13:71:9a:49:74:38:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f73d3b129f17f7d4fc03b2e94a564725c4672362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:4a:61:50:db:dd:49:65:07:35:f3:96:ea:
07:cf:0f:23:e7:12:45:b2:ef:b0:1a:0f:bf:18:fb:
10:a1:5c:f9:87:84:ee:8a:7a:f3:89:7c:67:67:fd:
00:5e:b8:47:10:8b:ad:be:2c:f0:bd:e5:67:78:04:
b1:1c:74:6d:4e:3b:e0:23:3b:fd:82:58:94:59:ec:
91:4d:33:4c:99:7e:95:c1:7d:7d:cd:58:6a:1f:0b:
d4:9e:dc:2d:8e:ec:f2:3b:6b:e3:94:f1:a6:5e:25:
eb:fb:7b:e9:e9:c5:80:07:dd:c3:89:6b:14:80:b6:
5a:64:cc:a6:2c:a1:1c:33:5d:b0:9d:ac:41:77:34:
bf:e0:1e:79:89:a3:9e:c4:1b:01:da:b5:8f:f1:d3:
95:e5:4b:0f:c8:70:59:a5:81:90:a1:52:84:30:7d:
91:aa:c3:95:33:6f:25:ff:40:79:b4:2e:7c:fa:09:
a8:15:f7:3c:9b:52:2e:ad:6a:31:3f:bd:74:a5:2b:
7a:22:24:24:ce:2d:c4:32:b9:a5:58:93:ff:d6:3d:
98:3a:10:9e:e6:6e:11:f7:03:fc:84:63:95:af:f3:
2c:b4:57:24:12:85:dc:58:f6:d6:49:a0:6a:a9:60:
f6:5a:ae:33:80:46:bc:5f:9e:ab:2c:0c:97:28:6a:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3D:3B:12:9F:17:F7:D4:FC:03:B2:E9:4A:56:47:25:C4:67:23:62
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/9z07Ep8X99T8A7LpSlZHJcRnI2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.225.0/25
77.79.244.0/22
85.232.248.0/24
128.204.220.0/23
185.2.112.0/22
195.167.156.0/23
IPv6:
2001:1a68:19:400::/54
Signature Algorithm: sha256WithRSAEncryption
c3:b4:29:59:52:0a:e1:8f:b1:2c:40:88:57:e1:f4:ad:c6:d2:
8b:37:60:df:73:2f:20:6d:6c:59:a5:b5:c3:45:db:ba:f9:28:
8f:d9:e1:21:b7:29:d3:92:a0:3b:e0:dd:5a:ac:ed:9c:95:97:
08:ea:0c:d8:32:ef:6c:9b:37:0d:c6:6a:7d:ab:e0:e2:4d:b5:
db:5c:4f:08:77:ea:c1:7d:6d:40:da:72:6d:51:c8:86:f1:a0:
56:14:26:62:52:15:eb:51:8d:12:6f:c7:6d:9c:c9:dc:c7:a8:
60:f3:99:f5:be:9e:8a:94:bc:a0:0b:8e:d0:e7:ef:d7:8c:07:
3c:de:7f:3c:0a:ba:72:d0:ab:e3:81:1d:83:f2:fd:68:10:25:
86:30:bb:5c:d6:82:5a:f1:04:5a:03:07:fd:ae:d1:55:8a:78:
e9:5b:10:60:97:2b:68:25:99:d7:4b:fe:80:1c:43:f9:a8:2c:
87:7d:cb:2b:f1:5c:22:82:cb:b9:36:5a:bf:48:6b:4b:25:bb:
bc:61:a6:b3:d1:34:9e:5d:c8:b3:f2:35:fe:4d:b1:26:cf:09:
27:8e:bd:4a:10:29:90:b6:88:75:18:fd:d3:d9:c6:0d:9a:5a:
e3:0e:7d:eb:8a:b1:ed:f0:86:02:ab:53:a6:a4:b1:f7:dd:cc:
f3:f9:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:29 2025 by rpki-client