Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa
File: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (raw, json)
Hash identifier: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=
Subject key identifier: 0B:EF:3E:88:C3:2C:C4:9E:AD:9F:09:7D:38:1A:8E:58:8C:1B:36:C5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747AEE1379F15C12082EF7FD575D139
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207710
IP address blocks: 77.90.177.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ae:e1:37:9f:15:c1:20:82:ef:7f:d5:75:d1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bef3e88c32cc49ead9f097d381a8e588c1b36c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:72:19:1c:e1:b1:1f:c3:f2:22:a5:8d:53:0c:
75:de:6a:1d:2d:84:68:c0:c0:4e:98:5a:4a:24:ae:
58:98:82:b6:c1:09:b2:2e:cc:be:c4:0e:48:f5:35:
ab:39:28:f0:6c:26:55:d2:aa:04:29:ca:2c:ff:64:
a9:ff:22:88:9b:e9:d6:7f:5e:b2:9a:5c:fd:94:d5:
66:31:8a:e3:b8:09:cc:d0:0b:c0:65:b0:3f:bb:47:
4c:a1:3e:c7:9c:6b:f3:b9:5c:fc:de:47:e1:a2:7f:
ce:ed:f5:5a:86:ac:6f:44:49:62:ce:4d:54:85:39:
c9:72:8c:17:f1:da:9c:08:ac:8f:a3:29:84:77:18:
86:25:51:85:c7:66:c3:97:ae:a8:1a:b5:94:b2:c2:
9c:1f:30:c8:83:7e:91:66:f8:e4:a9:c7:f4:1b:e6:
d7:70:ac:6d:73:39:e8:5d:ac:a2:fa:c4:43:16:8a:
90:72:70:15:64:12:75:31:1c:a2:80:1d:d3:dd:0c:
53:ba:52:df:6f:a8:ff:c2:7a:72:36:91:a7:a2:2f:
f8:87:20:3f:83:a7:13:9e:40:99:cf:85:a7:73:54:
e3:8e:64:47:04:50:1d:d8:46:61:be:c8:40:d6:d2:
bc:fd:44:9f:10:7c:e7:55:74:a3:a9:a9:4c:66:3b:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EF:3E:88:C3:2C:C4:9E:AD:9F:09:7D:38:1A:8E:58:8C:1B:36:C5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.177.0/24
77.90.186.0/24
213.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c0:82:60:d1:be:a8:e1:6b:9f:e4:fa:ea:05:d1:19:2c:a9:
23:25:77:e6:38:48:fa:b4:50:95:66:1b:f7:d2:dd:17:0a:49:
d2:ef:12:e2:91:86:95:7d:a7:26:33:14:41:68:4e:af:2c:5f:
a9:48:10:0e:af:89:5d:e2:bb:6c:bb:f5:e3:85:2e:50:e6:e1:
19:c3:c3:9b:f5:07:54:2d:25:86:ae:ab:8f:6f:a6:62:4c:6e:
82:11:32:b7:e6:72:38:4d:1f:e6:b8:2b:a1:43:cd:17:3a:8d:
ad:45:4e:f1:7f:53:04:75:f0:dd:13:a0:ad:d8:c2:5f:14:c2:
89:81:81:01:30:34:44:d8:2a:af:2b:14:50:f2:fd:b7:0f:33:
9f:09:47:29:71:54:70:bb:0b:2b:a1:16:56:42:78:ee:c8:cd:
07:93:90:1a:f9:0f:27:bd:dd:93:5c:67:17:c2:24:58:1e:db:
31:8f:ce:f2:8e:8f:37:ef:f6:9b:58:4c:89:f4:26:d6:e7:35:
1b:3d:2f:5c:2c:44:c0:51:6c:01:d6:ba:6f:e4:82:07:81:cf:
7b:30:05:7f:89:bb:7f:d7:c8:d6:39:81:8e:59:48:56:a3:66:
1e:e9:18:c8:2f:6b:91:f8:bf:f8:83:3b:05:04:b7:78:b6:6c:
9e:60:97:b4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnR67hN58VwSCC73/VddE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwMTAyMTM0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmVmM2U4OGMzMmNjNDllYWQ5ZjA5N2QzODFhOGU1ODhjMWIzNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXIZHOGxH8PyIqWNUwx13modLYRo
wMBOmFpKJK5YmIK2wQmyLsy+xA5I9TWrOSjwbCZV0qoEKcos/2Sp/yKIm+nWf16y
mlz9lNVmMYrjuAnM0AvAZbA/u0dMoT7HnGvzuVz83kfhon/O7fVahqxvRElizk1U
hTnJcowX8dqcCKyPoymEdxiGJVGFx2bDl66oGrWUssKcHzDIg36RZvjkqcf0G+bX
cKxtcznoXayi+sRDFoqQcnAVZBJ1MRyigB3T3QxTulLfb6j/wnpyNpGnoi/4hyA/
g6cTnkCZz4Wnc1TjjmRHBFAd2EZhvshA1tK8/USfEHznVXSjqalMZjs+qwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAvvPojDLMSerZ8JfTgajliMGzbFMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvQy04LWlNTXN4SjZ0bndsOU9CcU9XSXdiTnNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVqxAwQA
TVq6AwQA1dGDMA0GCSqGSIb3DQEBCwUAA4IBAQCuwIJg0b6o4Wuf5PrqBdEZLKkj
JXfmOEj6tFCVZhv30t0XCknS7xLikYaVfacmMxRBaE6vLF+pSBAOr4ld4rtsu/Xj
hS5Q5uEZw8Ob9QdULSWGrquPb6ZiTG6CETK35nI4TR/muCuhQ80XOo2tRU7xf1ME
dfDdE6Ct2MJfFMKJgYEBMDRE2CqvKxRQ8v23DzOfCUcpcVRwuwsroRZWQnjuyM0H
k5Aa+Q8nvd2TXGcXwiRYHtsxj87yjo837/abWEyJ9CbW5zUbPS9cLETAUWwB1rpv
5IIHgc97MAV/ibt/18jWOYGOWUhWo2Ye6RjIL2uR+L/4gzsFBLd4tmyeYJe0
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:29:19 2025 by rpki-client