Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Dfp2Ts5TY4FATus3sgQ5VxgffS0.roa
File: Dfp2Ts5TY4FATus3sgQ5VxgffS0.roa (raw, json)
Hash identifier: Mushjd6NNJKaPAGRHr/KYTSX4LsX1cCpnhG69JPinyA=
Subject key identifier: 0D:FA:76:4E:CE:53:63:81:40:4E:EB:37:B2:04:39:57:18:1F:7D:2D
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB3E40E1C9D81BB15293772B7C151
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Dfp2Ts5TY4FATus3sgQ5VxgffS0.roa
Signing time: Thu 02 Jan 2025 07:48:25 +0000
ROA not before: Thu 02 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200094
IP address blocks: 77.79.252.0/22 maxlen: 22
77.79.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b3:e4:0e:1c:9d:81:bb:15:29:37:72:b7:c1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dfa764ece536381404eeb37b2043957181f7d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:2c:45:fb:54:cc:0e:0c:8e:ce:3e:87:a1:
8d:d8:43:ee:6c:48:cb:04:c8:01:b4:0f:bc:60:c7:
c4:0b:fe:86:c8:b9:64:0a:e0:23:e6:f1:f4:94:82:
22:ae:98:5d:49:5e:4d:21:a6:e7:ce:7b:94:2e:88:
f0:e2:41:75:ca:41:ee:a9:1c:df:31:83:7f:8d:b1:
27:f9:4b:90:00:a7:ea:56:c1:c8:67:1a:11:97:7d:
84:e7:72:bb:a5:92:2b:e3:20:79:7e:3d:73:ac:86:
b9:82:cf:cf:c4:f1:a5:bc:b8:73:e9:99:1c:2b:fd:
0f:98:3b:f9:6d:64:78:d5:4d:ac:67:1d:3d:3b:64:
41:2a:00:90:03:cf:c8:3d:bb:05:35:10:9c:73:3e:
80:b2:07:18:3b:f1:af:49:f4:e1:11:03:a4:99:84:
34:0f:1e:c4:f1:93:98:6d:cf:e7:fe:39:d6:7e:b7:
e1:14:fe:ea:08:f9:f7:7e:b2:59:5a:ae:62:06:aa:
d5:45:b3:54:ec:58:fa:4e:72:8e:38:a1:f2:c8:c1:
99:c9:80:16:c7:32:e5:e9:dd:3b:36:9a:79:0c:7a:
ff:a6:42:bb:6b:fb:74:48:31:37:32:47:16:3d:04:
94:78:e6:bb:cd:10:7e:bd:05:5e:7b:22:5a:4f:8e:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FA:76:4E:CE:53:63:81:40:4E:EB:37:B2:04:39:57:18:1F:7D:2D
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Dfp2Ts5TY4FATus3sgQ5VxgffS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.252.0/22
Signature Algorithm: sha256WithRSAEncryption
41:be:ba:1c:5c:8f:c5:4a:c2:97:83:ae:4d:6a:c4:49:07:0b:
66:ee:40:88:b0:10:9d:85:e4:ce:2c:51:a1:0e:ca:87:00:25:
0b:7e:f2:ed:ec:f0:c2:37:5d:64:2e:45:d1:69:03:ed:73:1d:
59:3d:f4:32:1a:ef:f4:0b:cf:3f:c2:f8:a3:0f:38:ef:f3:b4:
11:34:18:7f:3c:55:33:62:d0:34:08:fb:4c:71:1d:e3:8d:fd:
92:2d:e4:c5:94:0d:70:a0:d2:49:11:ac:83:39:c2:24:c4:97:
f0:a8:61:5b:09:8c:7c:ed:d9:00:f0:b7:e2:27:72:78:9d:07:
46:60:af:37:95:d9:1f:54:7f:4e:ab:22:ed:9f:e5:18:75:61:
fb:d5:a7:e3:6c:c4:5a:69:a6:01:6c:1c:4e:fb:29:41:86:a9:
aa:e0:40:28:0b:a2:ab:1a:7a:29:cd:a2:95:af:3e:46:f2:3c:
8d:33:e0:45:0c:0b:e5:e6:a2:7c:b9:e8:35:f2:ec:15:f6:48:
15:d0:15:69:05:8e:4b:f5:da:63:8b:46:53:ec:f5:bc:14:19:
38:85:12:0c:2a:ef:60:11:71:eb:8c:f0:0c:69:86:2a:e7:fb:
2e:55:24:b6:69:af:8a:87:1c:7c:5b:e8:76:2e:e3:60:3d:e4:
07:44:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:18 2025 by rpki-client