Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/j0duG-Ijddau9Fj9XQZGhj9d5E0.roa
File: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (raw, json)
Hash identifier: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=
Subject key identifier: 8F:47:6E:1B:E2:23:75:D6:AE:F4:58:FD:5D:06:46:86:3F:5D:E4:4D
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E25ED5A98D285EB546320DB361C76
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/j0duG-Ijddau9Fj9XQZGhj9d5E0.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9087
IP address blocks: 77.74.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:25:ed:5a:98:d2:85:eb:54:63:20:db:36:1c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f476e1be22375d6aef458fd5d0646863f5de44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:54:e2:f0:f4:58:db:f0:7a:ec:c2:8c:27:
6e:17:7b:21:ee:ba:8c:37:77:d2:ed:8f:a3:df:69:
6b:ba:ae:ee:09:75:62:bd:03:6b:94:02:c3:e9:e7:
1e:0b:23:b1:eb:10:31:ce:09:53:58:0b:3a:66:6d:
8e:32:20:89:d2:50:3d:0b:6d:b1:c8:36:16:36:00:
bf:b2:1d:52:be:0e:7d:17:4e:f6:a4:f1:5c:ab:94:
4b:73:c0:43:0d:03:8e:fb:5a:e1:7a:65:9c:f1:54:
66:0b:57:b5:2a:77:55:fa:7c:f4:fb:fe:2d:f5:23:
4e:6b:76:5a:a3:c0:d8:73:2d:7b:dc:7c:a4:61:16:
20:56:84:4c:2f:94:a0:b8:31:3d:f2:60:8d:bf:ec:
b2:e9:d5:ab:c0:32:f2:fe:a3:b4:0d:15:05:f5:13:
fa:cb:25:d4:32:10:b0:f8:7b:78:ab:49:c1:10:b3:
c1:4a:59:33:8c:12:f0:e3:5f:d5:4d:b4:72:b7:4e:
7d:e5:25:fb:98:15:b8:3a:92:fb:50:15:6a:9f:e9:
24:96:0e:0d:8a:b5:a1:1b:b0:fe:f7:6c:5c:0b:73:
4b:1e:64:5e:37:04:40:cd:af:fe:17:29:52:61:b0:
4d:49:9d:34:1b:88:d3:d6:92:d0:30:ed:0b:8f:5a:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:6E:1B:E2:23:75:D6:AE:F4:58:FD:5D:06:46:86:3F:5D:E4:4D
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/j0duG-Ijddau9Fj9XQZGhj9d5E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:db:3a:4a:23:99:73:b8:04:3a:b5:71:6a:26:08:f5:3f:a1:
44:f0:8e:d4:45:16:b1:9b:85:7f:0b:c8:c0:89:3d:cd:7d:48:
d7:ae:23:89:1a:f6:f0:df:6f:8e:00:b4:eb:a9:49:ed:0e:45:
33:b7:99:cf:5c:18:2e:40:52:ae:d0:2d:bf:44:e8:cf:c3:2d:
25:b0:cc:f5:1f:3e:aa:d1:43:2d:12:ca:ea:6d:58:97:ee:8d:
ca:77:32:71:5c:e8:a5:e8:cb:b0:0e:5a:9d:02:67:e5:e3:4f:
73:78:76:ac:72:32:83:01:9e:8f:f2:df:cb:68:85:c0:30:1b:
27:25:4e:b9:a5:50:5b:8d:aa:81:85:3c:68:61:54:e6:3f:a1:
fe:92:b4:ab:5c:5e:a9:84:cb:b3:32:3f:37:3b:2b:b4:af:b6:
ed:2f:aa:65:ea:51:b5:5a:e5:32:6b:28:4c:e3:d5:bb:f1:fa:
81:29:b8:04:a8:a2:c8:1e:3f:ca:59:b3:d0:1b:2c:77:03:b7:
d4:e7:61:2f:d7:8f:c8:cb:57:d3:a7:25:cc:7d:2c:46:7c:87:
52:ef:6e:1f:e8:98:95:48:b3:9c:5f:db:e5:93:a0:de:38:11:
e6:17:8c:c2:b1:6e:bd:85:42:05:f5:c8:87:ff:4f:d4:47:3a:
77:c0:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:48 2025 by rpki-client