Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/s-tAnvfIFJM-jzZ_8aiu7TnosuQ.roa
File: s-tAnvfIFJM-jzZ_8aiu7TnosuQ.roa (raw, json)
Hash identifier: d/ChYSopLKoY5bubxK5dhq8tHDGlkd35G7FUlv5iINs=
Subject key identifier: B3:EB:40:9E:F7:C8:14:93:3E:8F:36:7F:F1:A8:AE:ED:39:E8:B2:E4
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D8CD4D08E3625C1A81E9A537D7344
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/s-tAnvfIFJM-jzZ_8aiu7TnosuQ.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8866
IP address blocks: 77.77.164.0/22 maxlen: 22
77.77.167.0/24 maxlen: 24
87.119.64.0/21 maxlen: 21
87.119.100.0/22 maxlen: 22
87.119.104.0/23 maxlen: 23
87.119.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8c:d4:d0:8e:36:25:c1:a8:1e:9a:53:7d:73:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3eb409ef7c814933e8f367ff1a8aeed39e8b2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:ec:6a:7d:14:71:c0:1f:60:f0:fe:c3:a3:
28:62:40:32:d1:bd:52:c9:99:bf:be:b7:16:69:a6:
52:37:f4:e2:6a:fb:6b:f0:0c:93:3e:74:4c:98:42:
37:9d:9c:d7:17:8d:92:b1:ff:17:cf:e7:65:7e:10:
bb:66:cf:06:f7:f8:9e:b8:07:4b:74:38:fb:8d:a6:
a9:b4:85:c6:b0:80:12:e4:a5:85:6b:83:24:81:50:
63:24:ea:32:ab:8a:f3:32:d6:04:cf:0d:92:e7:71:
d2:e5:02:63:6e:15:d2:ab:77:a3:88:db:e8:38:11:
d0:c6:ac:19:b2:60:a9:f2:95:19:38:7c:99:99:bf:
ca:0b:3e:28:33:ca:c3:4c:23:48:d1:e5:87:e7:3a:
1e:9b:9d:67:3e:0f:41:51:74:6d:9c:d0:89:cd:60:
00:89:53:32:0f:55:06:6c:d3:46:a3:af:88:59:62:
87:39:e0:c5:e4:de:00:79:a6:c1:5e:78:e2:ca:62:
ca:72:46:07:a7:c2:3c:01:36:5b:38:08:65:5d:97:
43:48:2b:e9:a0:db:0d:d1:b9:a1:fe:a2:f9:54:be:
47:ca:74:4f:e3:b4:e9:80:92:1f:df:a6:4a:7f:2e:
7b:86:04:e3:af:58:8d:95:2d:34:e3:b1:f8:4f:2d:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:40:9E:F7:C8:14:93:3E:8F:36:7F:F1:A8:AE:ED:39:E8:B2:E4
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/s-tAnvfIFJM-jzZ_8aiu7TnosuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.164.0/22
87.119.64.0/21
87.119.100.0-87.119.105.255
87.119.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9a:1b:aa:e6:cd:44:42:1f:83:84:02:7c:dd:bc:05:f9:05:
58:5c:1a:a2:80:12:b2:71:2e:d7:65:16:18:25:37:3c:3b:02:
2e:ca:99:83:a0:ed:a0:12:33:d8:5b:15:f9:9d:1a:30:e3:2c:
18:97:0a:48:ca:ca:2a:36:76:31:8c:f3:7c:17:43:46:a9:fb:
6f:91:68:87:48:5b:e2:22:1e:ec:23:fc:6f:a7:df:c8:59:d9:
1f:a2:2c:0a:9d:21:e4:ba:34:24:bd:4b:e9:93:c4:6e:46:b8:
a1:46:6f:3d:2d:d4:41:ad:b8:c0:d2:3c:06:66:b9:55:6d:3f:
7c:26:bc:3e:fb:0f:3e:84:b0:ee:ba:f4:60:85:87:44:f3:99:
52:8d:ad:b6:4e:ac:82:09:ad:a0:c6:89:03:a1:28:da:ef:6b:
48:dd:ad:fc:1a:ed:c8:ff:e5:5d:35:69:6c:28:27:d9:a4:67:
5f:a9:2a:f0:79:d2:bb:b9:5c:3d:76:12:85:78:e1:29:31:67:
33:e0:1b:99:a2:33:37:fe:e6:35:d9:d4:0d:f3:64:2a:b4:e2:
1a:26:54:ad:5e:7a:09:d1:ad:ff:a2:6c:87:bd:e5:d5:4e:17:
df:93:7e:60:58:12:2e:a4:66:eb:46:b9:a6:e1:68:7a:be:14:
d0:12:a5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:35 2025 by rpki-client