Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/526untxz-mzv2dHnFDXL_1ptt60.roa
File: 526untxz-mzv2dHnFDXL_1ptt60.roa (raw, json)
Hash identifier: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=
Subject key identifier: E7:6E:AE:9E:DC:73:FA:6C:EF:D9:D1:E7:14:35:CB:FF:5A:6D:B7:AD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747A7CEC6C05579BF312FAC923825FE
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/526untxz-mzv2dHnFDXL_1ptt60.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41998
IP address blocks: 77.90.154.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a7:ce:c6:c0:55:79:bf:31:2f:ac:92:38:25:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e76eae9edc73fa6cefd9d1e71435cbff5a6db7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:bf:40:4d:f1:5e:fc:3d:6a:d2:c1:68:bf:
6f:eb:ff:13:61:ca:68:94:99:47:0a:0f:70:58:fe:
6f:67:33:ff:9a:40:9d:0d:9d:1e:78:55:9c:2e:3b:
a4:7d:f0:52:64:c9:e4:c4:ff:fd:a9:94:1c:dd:78:
86:80:31:5b:40:2d:28:ac:0b:14:5f:8c:98:38:ca:
6a:8c:d9:11:42:d3:50:22:9d:67:b7:62:0b:80:72:
6a:4f:e7:5f:5c:fb:aa:7f:18:28:c5:ea:e1:a3:31:
34:3f:04:0f:86:8b:28:f1:f2:7c:c6:e1:41:c5:cd:
4e:8a:23:29:29:15:d9:1d:53:88:a4:b0:84:7c:a0:
57:77:77:bc:7c:4b:81:6a:86:f0:3b:49:bf:e5:be:
10:d7:d3:18:11:11:81:6f:04:75:49:3b:4a:bf:af:
fb:87:61:c9:84:6c:49:52:3b:69:da:9c:b3:5c:1e:
23:e9:0a:9e:71:eb:f9:7c:76:19:47:39:3b:e2:be:
44:3f:db:94:76:32:75:61:8c:e5:c5:85:79:e3:b3:
04:04:d6:f4:dd:a8:81:75:5f:e2:c7:96:fa:b1:71:
f8:2b:a0:01:8c:ef:bc:8b:9c:7d:6c:76:96:e3:f8:
83:2e:11:fb:3e:ea:79:7a:5f:66:61:1a:87:fd:1e:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6E:AE:9E:DC:73:FA:6C:EF:D9:D1:E7:14:35:CB:FF:5A:6D:B7:AD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/526untxz-mzv2dHnFDXL_1ptt60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.154.0/24
185.230.14.0/24
Signature Algorithm: sha256WithRSAEncryption
20:4a:06:07:a4:c7:d1:96:26:39:b4:bf:89:b7:10:18:66:d5:
ef:b9:6d:5b:cb:39:7e:d9:44:d0:53:6e:2b:14:9c:90:fd:60:
ec:6c:18:e1:c2:d2:f5:91:8f:71:9c:7d:d7:5b:c1:b4:11:97:
c7:d3:c3:f6:77:c4:e0:f0:a1:ed:e4:6f:61:a0:86:4c:c5:57:
63:db:7e:27:3e:56:7c:34:05:91:2b:5b:60:03:eb:16:eb:ff:
f3:22:64:54:48:b0:fc:7a:f7:e2:22:95:49:d6:6b:48:dc:86:
06:3a:9a:73:77:16:54:1f:f2:6e:0b:a6:0f:d4:28:d2:f8:3b:
a9:8c:4a:89:ef:e2:21:98:0d:8f:2b:c7:a3:1c:6a:bb:67:3e:
43:58:3a:08:5f:0e:d9:7e:84:bc:bb:6d:5a:52:18:16:1c:b0:
89:a1:4f:a2:4e:42:4b:2a:05:00:c5:31:87:7a:96:92:29:bf:
3d:88:6a:02:4c:21:30:52:b1:23:cc:8d:87:59:eb:a2:77:79:
42:b0:4c:e3:65:ea:f8:a0:df:33:f0:95:09:f4:7d:47:1f:49:
c1:f5:db:da:8f:ef:bd:f7:d9:d7:67:eb:1e:af:07:8e:d6:c6:
ba:c6:bd:2b:32:43:94:7d:41:7c:2f:a4:00:cc:39:1b:45:b9:
91:80:f0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:29 2025 by rpki-client