Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/KjyhUoUeuc685PJ3Cydi0XS_e4w.roa
File: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (raw, json)
Hash identifier: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=
Subject key identifier: 2A:3C:A1:52:85:1E:B9:CE:BC:E4:F2:77:0B:27:62:D1:74:BF:7B:8C
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 01953BD92A1C531738A7682D5A38FED0B8BE
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/KjyhUoUeuc685PJ3Cydi0XS_e4w.roa
Signing time: Tue 25 Feb 2025 06:44:02 +0000
ROA not before: Tue 25 Feb 2025 06:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11404
IP address blocks: 77.95.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3b:d9:2a:1c:53:17:38:a7:68:2d:5a:38:fe:d0:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Feb 25 06:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a3ca152851eb9cebce4f2770b2762d174bf7b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:92:8c:11:e9:8b:ea:96:b9:df:1d:77:6a:
6c:6e:70:81:b7:e6:e7:35:88:23:d1:85:c1:2c:32:
91:bb:83:17:0d:8e:9b:cf:d6:3b:88:50:a4:cf:f1:
15:c7:46:60:a4:f3:d6:59:07:56:43:d6:74:30:f4:
6c:37:88:47:9d:ab:07:b9:a2:76:11:b8:cf:e6:07:
d8:08:7b:8f:b2:8d:35:b5:a3:2e:62:98:c3:92:01:
4e:02:5b:41:59:f8:af:04:94:e6:9b:34:fc:cc:0c:
14:40:e9:02:2b:66:dc:1b:a8:a1:f0:66:bb:f2:2f:
f6:bb:aa:69:ae:71:77:f4:3f:d6:fa:f4:ca:64:46:
8b:87:28:9e:b0:cd:98:96:da:61:08:11:b6:4f:c7:
73:d9:35:8b:60:9d:70:c3:81:99:da:75:ae:b8:18:
ba:99:ab:fb:ce:b5:8a:d1:24:fe:2e:c7:8c:10:3b:
43:63:17:6e:8e:9a:89:47:ea:62:7a:33:f8:9e:22:
33:34:2e:92:99:37:ea:4d:9d:5f:bc:aa:b8:cc:86:
46:3f:73:01:09:26:63:ab:b2:74:81:85:46:40:60:
76:14:71:92:d4:98:4e:2d:fe:56:24:7b:4c:81:88:
10:25:a2:ca:f9:ec:76:5d:d5:c3:58:fd:fa:89:0b:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:A1:52:85:1E:B9:CE:BC:E4:F2:77:0B:27:62:D1:74:BF:7B:8C
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/KjyhUoUeuc685PJ3Cydi0XS_e4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.221.0/24
Signature Algorithm: sha256WithRSAEncryption
98:37:36:17:c8:56:51:11:ee:14:10:52:da:6a:88:a2:71:56:
31:dd:ed:b8:f3:2a:a1:28:13:58:4f:e1:bc:1f:01:0f:03:c5:
ba:14:a0:a2:5e:73:c4:ba:7a:ab:a3:8b:42:58:0c:de:e1:c2:
18:cf:c8:e6:f2:98:a5:d2:15:3b:86:c5:82:f1:30:30:2a:26:
ff:4d:d1:dd:43:6a:07:e4:bd:b9:b2:cc:75:4d:ae:f9:c2:8b:
04:59:4d:30:02:7e:ab:55:e5:d9:a3:5a:0c:d8:ef:e5:69:fb:
2b:73:df:66:5e:b8:89:d2:91:08:51:49:2d:bf:85:da:80:d3:
c9:50:ad:6c:69:53:04:0e:c2:3f:ac:a8:b6:7c:d6:42:95:56:
3d:45:9e:21:34:54:6e:7f:2c:4a:9e:61:da:0e:85:44:77:5b:
06:7e:6d:7e:2a:14:50:84:7c:17:47:71:5a:6e:9e:17:3a:03:
0c:ff:54:ac:a9:1a:cb:cc:26:b1:e5:65:4b:7a:0b:bf:13:4d:
e7:50:32:07:2d:40:87:20:c8:cc:bf:5f:40:b5:b6:d6:a4:1f:
1b:fc:68:18:6e:89:14:58:5b:c6:c1:a6:5e:41:26:fe:35:7e:
33:43:4f:be:4a:22:c1:67:e5:bd:ad:ca:32:e4:ff:4a:94:4f:
c9:3c:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:41:12 2025 by rpki-client