Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa
File: pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa (raw, json)
Hash identifier: GoC5K97gl9mRDyYEwiwyowaJojmTfgrX+bjBIRbHQpg=
Subject key identifier: A5:26:D7:F8:FC:81:6C:26:DB:EA:C2:E7:22:ED:63:01:66:17:E5:A9
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01942067F94EE39172D9E1E82EDE71FC9B07
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 77.91.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f9:4e:e3:91:72:d9:e1:e8:2e:de:71:fc:9b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a526d7f8fc816c26dbeac2e722ed63016617e5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:81:4e:6b:f8:4d:ed:35:da:58:6f:94:1e:
95:f1:52:50:e0:f8:c8:a5:68:b9:ff:1a:8b:f4:6a:
89:cf:c7:0a:62:24:76:19:6b:49:37:59:1b:00:62:
30:a0:79:d8:9b:c5:0c:0f:8e:39:a4:7b:29:19:cb:
16:c2:93:7d:1e:c5:1f:5e:7d:e5:66:25:b0:f7:d8:
25:28:2b:c2:b3:2a:eb:d8:57:ea:9e:55:75:a8:26:
1f:0e:f9:d7:4f:64:3a:03:72:2c:41:14:05:78:aa:
39:fd:3a:52:e3:2e:05:84:59:d0:82:4f:1d:94:20:
66:be:0b:c3:65:bc:eb:11:59:7d:2a:61:bd:c8:0b:
e7:0d:bf:43:c6:57:d8:01:0a:30:04:6c:d8:d7:d8:
98:0d:d4:95:52:7c:e2:1e:7d:09:39:44:4a:3d:a2:
aa:41:27:c6:fe:2a:06:f8:e3:ae:ce:cf:12:31:19:
d2:59:69:6b:e7:98:d8:a1:71:45:ba:ba:33:35:9b:
04:bf:ea:45:06:5c:5d:57:a7:dc:c3:8a:fe:fd:ac:
62:ab:6c:7d:e7:fb:1e:cc:6a:b1:9d:fd:b6:02:83:
74:0f:cc:6c:c2:a4:5d:56:ee:56:d6:a4:57:90:d2:
a8:75:df:b5:bb:07:5c:16:96:f5:37:92:e2:7b:81:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:26:D7:F8:FC:81:6C:26:DB:EA:C2:E7:22:ED:63:01:66:17:E5:A9
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.97.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a6:23:f1:69:98:40:f6:06:7e:0d:16:11:52:01:d1:c7:14:
f5:e1:7f:c2:f0:c3:37:1a:95:5a:0f:79:64:e0:62:a2:1c:f2:
e3:55:21:9a:57:5f:cb:0b:f9:a1:66:0b:0a:61:3b:0d:db:a7:
1b:81:ee:e0:e2:a4:12:a0:8c:ad:f5:31:bf:a5:1b:2b:5f:14:
6d:ff:65:05:3b:c1:cb:d3:d6:09:30:56:2b:d2:3a:52:a9:96:
3b:ea:99:8a:09:2c:a2:e2:61:22:6c:30:8a:32:0c:f9:6c:a9:
96:7b:0b:8c:59:1c:a7:91:4e:c7:25:06:06:cc:c2:5a:e2:1b:
0a:03:44:d9:d9:b3:5b:b2:0d:08:22:77:1b:0d:e9:6e:59:2c:
61:5d:0e:56:d9:e0:89:7d:b1:a1:7b:46:2a:74:c7:b5:6d:b4:
6b:aa:21:7a:d6:20:bd:6d:10:bf:dc:a1:b1:e6:ce:ff:36:f4:
2e:9f:56:e0:00:2c:9f:6f:26:ab:1f:d2:91:f2:73:44:84:8b:
10:83:d7:05:85:f9:ac:16:67:dc:a9:90:eb:d7:b9:90:16:4e:
65:1c:68:ca:13:1b:06:eb:5a:99:89:9c:70:de:c0:70:65:c0:
89:ee:98:13:1e:74:dd:d6:35:81:51:a6:35:75:35:46:11:03:
0c:6c:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:01 2025 by rpki-client