Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/eONOPQ5n9JaZY7K4E7eT4n3N7wU.roa
File: eONOPQ5n9JaZY7K4E7eT4n3N7wU.roa (raw, json)
Hash identifier: ZCm89d0bFZWMMw8HJ3JqNzZcAFRBcFRa0dAA/NZScrg=
Subject key identifier: 78:E3:4E:3D:0E:67:F4:96:99:63:B2:B8:13:B7:93:E2:7D:CD:EF:05
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 01941FFA26E395801177497DE0EB8CC9507F
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/eONOPQ5n9JaZY7K4E7eT4n3N7wU.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 77.75.176.0/21 maxlen: 24
77.75.180.0/24 maxlen: 24
91.209.234.0/24 maxlen: 24
91.219.21.0/24 maxlen: 24
185.154.8.0/22 maxlen: 24
185.184.148.0/22 maxlen: 24
185.193.68.0/22 maxlen: 24
212.121.224.0/19 maxlen: 24
212.121.248.0/24 maxlen: 24
213.148.192.0/19 maxlen: 24
213.148.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:26:e3:95:80:11:77:49:7d:e0:eb:8c:c9:50:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78e34e3d0e67f4969963b2b813b793e27dcdef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:44:cf:c4:c2:b8:88:39:2c:d4:83:a8:b0:
74:42:f5:85:71:bc:eb:b3:fb:e5:30:fe:90:e7:6f:
02:b0:a2:81:63:f2:15:09:27:e3:83:b8:36:3d:ba:
1a:05:f7:b7:c3:8a:35:26:92:e9:72:0b:30:26:25:
07:16:f9:6b:1d:e4:08:92:f9:9e:28:7f:10:1e:b1:
bf:3a:10:63:f3:50:c9:89:f3:d6:65:6b:8d:f3:c1:
de:7d:41:df:cf:0f:ec:d7:7d:0f:c2:ef:3d:f9:e0:
50:da:cd:a6:4b:f2:34:cc:06:97:c1:5a:12:d6:1c:
aa:fa:f5:36:9a:19:1f:46:6e:16:96:57:54:21:e2:
91:fb:93:fc:d4:20:13:a0:0a:5e:8c:67:68:7e:45:
c5:03:9e:79:50:b5:ff:bc:f6:9a:6d:80:87:4f:64:
e3:11:67:09:0d:d6:af:b5:e6:45:29:7c:90:f7:64:
ee:bf:0b:28:28:4b:bf:c8:ce:fa:7e:3b:39:8b:81:
bb:23:cf:4c:09:39:5e:8c:9c:b2:3d:5c:ba:5b:73:
32:0b:5c:8e:2b:3a:91:31:51:e5:bf:cf:c0:ae:75:
78:bb:25:a3:bd:0a:f0:15:0f:09:d6:a6:63:3a:b4:
1b:55:93:3d:c3:d1:5a:20:7e:91:49:46:3d:24:7a:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:4E:3D:0E:67:F4:96:99:63:B2:B8:13:B7:93:E2:7D:CD:EF:05
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/eONOPQ5n9JaZY7K4E7eT4n3N7wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.176.0/21
91.209.234.0/24
91.219.21.0/24
185.154.8.0/22
185.184.148.0/22
185.193.68.0/22
212.121.224.0/19
213.148.192.0/19
Signature Algorithm: sha256WithRSAEncryption
53:1e:98:5c:88:0b:c3:e6:9e:ad:80:db:b6:80:0c:b8:f3:c8:
77:df:36:77:f8:b1:ed:5b:bb:18:9a:55:00:b2:b2:78:70:ff:
b1:ec:e5:db:7c:85:ec:1d:2f:72:91:cb:ac:75:a8:8c:31:d1:
52:63:1f:0a:24:9a:83:8f:1c:f0:44:cd:8d:3d:16:fd:4c:5d:
40:8b:16:ea:f3:22:89:6e:cc:26:ae:b5:8b:ff:d2:cc:3b:ca:
f3:c7:1d:80:69:3a:0a:e7:54:1c:d7:5a:25:e4:f0:d9:fc:15:
2b:c2:4c:a6:f8:4f:99:e1:ef:17:ff:57:67:1b:e1:61:b3:30:
50:17:b6:a3:49:5a:4d:5a:c3:a4:2f:7e:2e:ff:2a:38:7d:e2:
45:e8:75:ba:e4:5f:1b:95:99:93:9d:fc:8d:7b:7b:14:a1:38:
0d:5a:9e:86:14:c3:53:b6:65:1a:72:b9:25:73:93:48:75:a4:
bb:9f:85:5f:0b:12:a2:21:60:32:ba:94:61:29:f6:05:d4:ad:
f6:1c:c9:24:51:7e:ae:be:87:c6:ec:2f:b5:56:61:8d:34:65:
88:e6:d6:84:04:fc:8d:9e:9a:7f:7d:9b:5b:04:f0:81:34:90:
b5:cd:b1:66:3f:17:aa:37:1f:41:6f:d9:cb:84:b5:da:cc:ec:
1c:dd:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:40 2025 by rpki-client