Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9Lep1iOPD-5AqIhKkqPz097Spk.roa
File: H9Lep1iOPD-5AqIhKkqPz097Spk.roa (raw, json)
Hash identifier: ldVSiVxAFChxs9f+XEhXOOZ3MA4vJ1fr+NH75+9ob2s=
Subject key identifier: 1F:D2:DE:A7:58:8E:3C:3F:B9:02:A2:21:2A:4A:8F:CF:4F:7B:4A:99
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D97B22E65AD1AA8C8806AE4793685
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9Lep1iOPD-5AqIhKkqPz097Spk.roa
Signing time: Wed 01 Jan 2025 15:48:12 +0000
ROA not before: Wed 01 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47874
IP address blocks: 77.77.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:97:b2:2e:65:ad:1a:a8:c8:80:6a:e4:79:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd2dea7588e3c3fb902a2212a4a8fcf4f7b4a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:ac:96:37:8a:c9:ad:13:8d:e1:f8:15:56:
a7:5c:59:68:d4:18:be:9e:70:1e:c4:28:81:a6:eb:
79:72:e9:6a:06:7d:8f:32:d0:00:c3:ae:39:0c:ce:
15:61:f7:0a:95:03:60:81:77:fa:39:17:cb:22:66:
c1:c0:33:b9:bf:1e:8c:e1:0f:db:43:85:0e:7a:c2:
52:0e:41:39:1d:95:87:39:13:2c:6f:71:11:b0:16:
f4:03:f5:e1:36:09:15:94:47:2e:06:95:7b:3d:16:
87:58:fb:84:19:87:bd:7f:bc:75:85:fc:3d:79:9b:
b4:b1:e9:35:d2:ef:eb:ef:b7:4f:19:f4:5c:94:20:
2c:bc:ab:ad:4a:62:f3:d0:91:4a:df:54:71:e3:c1:
49:65:12:5c:f2:03:3f:8e:99:72:03:f7:11:b4:1d:
13:1f:4b:cf:73:64:d4:52:41:01:32:b0:c6:f5:03:
0a:38:b4:de:8e:cd:05:58:35:43:f4:fc:a9:16:84:
d4:98:c3:80:0d:84:40:87:4e:6d:af:b6:af:99:da:
e6:f4:fd:70:8c:e4:eb:84:76:73:54:56:65:33:99:
8f:dd:a7:6e:27:f2:2f:0c:91:b9:94:7c:a7:ca:04:
90:bf:27:19:ee:30:6d:ff:dd:69:93:1f:ea:b5:aa:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:DE:A7:58:8E:3C:3F:B9:02:A2:21:2A:4A:8F:CF:4F:7B:4A:99
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9Lep1iOPD-5AqIhKkqPz097Spk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e1:b8:2f:55:17:1f:ef:5a:ac:31:3b:16:a9:0e:70:5b:e2:
23:6a:6f:05:36:b2:8b:fc:2e:3d:04:5a:0f:98:3a:67:eb:f2:
4b:d7:0d:2d:c3:89:f8:2a:c1:53:4c:2e:56:fa:b9:17:07:5f:
c4:45:78:c9:60:18:11:06:eb:42:ed:79:cf:7f:35:80:c7:0c:
06:b6:74:93:21:1a:2e:63:aa:4e:a1:cc:35:99:35:70:57:be:
df:ae:1c:97:c2:a6:2c:17:12:0d:40:6d:42:c1:04:1b:72:40:
e8:48:83:0d:22:45:5a:f8:ed:01:56:24:3a:a3:c5:a7:1c:6d:
a1:f9:43:41:7e:b4:46:f1:9d:47:68:03:aa:4a:b9:49:74:92:
d7:26:e1:af:8b:33:4c:47:88:87:4d:9a:ff:3a:c6:fb:e6:4a:
e3:4c:3d:34:3d:00:e0:59:1a:b1:4e:af:05:35:16:6b:d4:21:
24:2f:50:ea:a6:2c:9b:f0:e5:05:fa:f9:96:58:26:78:fe:1f:
cd:ec:45:a6:05:e5:f1:b8:1a:c5:02:84:3f:0c:2a:d0:49:f7:
2a:fc:75:ec:dd:c5:d8:8e:01:a3:0c:83:a9:13:7b:07:b6:0a:
fb:6f:ca:50:43:93:74:95:55:03:a6:92:f2:ae:fc:96:17:54:
d3:f4:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:05 2025 by rpki-client