Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dat1P8EK-U6psVpJJsi5wpEdVdw.roa
File: Dat1P8EK-U6psVpJJsi5wpEdVdw.roa (raw, json)
Hash identifier: Gx/2jNTqPY90ulK6zZN16Hi485P18R0KrrIdHjcFwiY=
Subject key identifier: 0D:AB:75:3F:C1:0A:F9:4E:A9:B1:5A:49:26:C8:B9:C2:91:1D:55:DC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D926BEC3E48532BC845BCAA95B8B6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dat1P8EK-U6psVpJJsi5wpEdVdw.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20940
IP address blocks: 77.67.85.0/24 maxlen: 24
77.67.126.0/24 maxlen: 24
2001:668:108::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:92:6b:ec:3e:48:53:2b:c8:45:bc:aa:95:b8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dab753fc10af94ea9b15a4926c8b9c2911d55dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:e4:93:e6:25:04:a4:9a:d1:6e:ab:7b:45:
9b:f2:6a:99:53:ec:e6:f3:f8:f3:f4:85:be:b2:40:
75:8d:d5:57:9e:39:89:b0:94:91:48:45:cb:2c:ee:
13:c6:4a:f4:e9:e8:7c:21:03:4f:d8:8e:68:8f:4c:
9f:80:f4:20:65:23:82:ff:ee:4e:25:1d:84:2b:bb:
4c:ba:6a:da:44:db:46:80:b1:d9:51:41:ad:8f:f9:
e0:4f:f7:eb:b2:cc:57:10:a8:da:69:82:e6:cb:03:
85:74:44:6f:ae:34:8c:51:e5:bf:b9:d9:7f:c4:45:
28:72:92:0f:b1:ad:27:77:78:cd:eb:b9:bd:4f:b6:
cc:3a:bb:fd:6b:79:90:24:ec:5c:46:ba:c1:e9:f7:
7d:78:69:f9:ff:89:8a:e2:cc:e2:dd:cb:07:b4:44:
e7:df:fe:39:19:51:64:70:bf:59:69:ea:3f:cb:00:
7d:41:d2:4c:ff:46:21:5e:2a:2f:b8:7c:fd:5a:b5:
50:36:15:d9:7e:f8:07:b8:e5:33:34:4c:64:5a:b5:
dc:8c:89:ea:fc:09:6f:e1:8b:8d:90:47:43:44:ad:
69:74:e9:f0:ac:c6:dc:12:70:33:b6:1d:07:e0:e8:
1d:1a:8e:fc:4c:08:0e:4f:4f:ae:73:40:86:fe:df:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AB:75:3F:C1:0A:F9:4E:A9:B1:5A:49:26:C8:B9:C2:91:1D:55:DC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dat1P8EK-U6psVpJJsi5wpEdVdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.85.0/24
77.67.126.0/24
IPv6:
2001:668:108::/48
Signature Algorithm: sha256WithRSAEncryption
8d:3d:08:b6:5d:9e:e8:64:81:26:ab:16:c2:86:78:7d:87:d5:
c6:44:59:48:dc:36:90:ae:0e:65:fc:db:fb:99:c6:73:98:9a:
72:0e:07:19:e4:48:dc:6f:e8:07:fe:69:e0:5e:36:63:48:14:
35:94:ed:49:47:c8:1a:e8:54:77:ad:ba:aa:dd:4d:27:16:c8:
cd:82:fb:ab:c7:28:87:75:1b:83:c1:b1:bd:b7:76:7b:9c:9f:
26:28:e8:95:24:65:10:a8:19:2a:e6:d6:06:00:e1:b6:33:b5:
c5:3c:79:97:fe:06:20:81:36:b8:ec:d7:9c:c9:b0:7b:bc:19:
1b:22:1d:44:84:1c:06:0d:02:a6:0f:6e:1a:02:e4:9a:b6:9b:
a8:10:b6:c5:08:8b:b6:44:48:e1:d9:54:a5:4c:23:da:2c:5f:
c4:ef:a2:26:cf:9c:4e:d5:07:7c:fd:3e:e2:27:37:d0:1d:99:
81:fe:46:3e:3a:bd:64:de:ef:19:a4:e0:b0:05:4c:b2:7a:50:
c7:bd:d9:8b:84:35:6d:27:dd:c3:86:d1:14:71:fa:6e:09:fd:
0a:09:f8:7e:69:0a:4f:0d:61:e1:28:78:e9:e7:2d:77:50:3d:
6c:6e:0b:4e:67:e1:b8:b8:7d:e0:25:47:87:08:8d:12:03:ec:
8f:fc:c5:93
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQijZJr7D5IUyvIRbyqlbi2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwMTAxMTU0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGFiNzUzZmMxMGFmOTRlYTliMTVhNDkyNmM4YjljMjkxMWQ1NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbPkk+YlBKSa0W6re0Wb8mqZU+zm
8/jz9IW+skB1jdVXnjmJsJSRSEXLLO4Txkr06eh8IQNP2I5oj0yfgPQgZSOC/+5O
JR2EK7tMumraRNtGgLHZUUGtj/ngT/frssxXEKjaaYLmywOFdERvrjSMUeW/udl/
xEUocpIPsa0nd3jN67m9T7bMOrv9a3mQJOxcRrrB6fd9eGn5/4mK4szi3csHtETn
3/45GVFkcL9Zaeo/ywB9QdJM/0YhXiovuHz9WrVQNhXZfvgHuOUzNExkWrXcjInq
/Alv4YuNkEdDRK1pdOnwrMbcEnAzth0H4OgdGo78TAgOT0+uc0CG/t94lQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFA2rdT/BCvlOqbFaSSbIucKRHVXcMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvRGF0MVA4RUstVTZwc1ZwSkpzaTV3cEVkVmR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQATUNVAwQA
TUN+MA8EAgACMAkDBwAgAQZoAQgwDQYJKoZIhvcNAQELBQADggEBAI09CLZdnuhk
gSarFsKGeH2H1cZEWUjcNpCuDmX82/uZxnOYmnIOBxnkSNxv6Af+aeBeNmNIFDWU
7UlHyBroVHetuqrdTScWyM2C+6vHKId1G4PBsb23dnucnyYo6JUkZRCoGSrm1gYA
4bYztcU8eZf+BiCBNrjs15zJsHu8GRsiHUSEHAYNAqYPbhoC5Jq2m6gQtsUIi7ZE
SOHZVKVMI9osX8TvoibPnE7VB3z9PuInN9AdmYH+Rj46vWTe7xmk4LAFTLJ6UMe9
2YuENW0n3cOG0RRx+m4J/QoJ+H5pCk8NYeEoeOnnLXdQPWxuC05n4bi4feAlR4cI
jRID7I/8xZM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:52 2025 by rpki-client