Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/EeRJfPRF7a3wwh-vbetINiCYobw.roa
File: EeRJfPRF7a3wwh-vbetINiCYobw.roa (raw, json)
Hash identifier: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=
Subject key identifier: 11:E4:49:7C:F4:45:ED:AD:F0:C2:1F:AF:6D:EB:48:36:20:98:A1:BC
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 0194282707DBD567E30BA07BA0A8A7988DDF
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/EeRJfPRF7a3wwh-vbetINiCYobw.roa
Signing time: Thu 02 Jan 2025 17:53:54 +0000
ROA not before: Thu 02 Jan 2025 17:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.91.70.0/24 maxlen: 24
77.91.76.0/24 maxlen: 24
77.91.77.0/24 maxlen: 24
77.91.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:07:db:d5:67:e3:0b:a0:7b:a0:a8:a7:98:8d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e4497cf445edadf0c21faf6deb48362098a1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:dc:6c:64:ab:41:51:29:a3:94:ac:84:87:
d4:91:87:21:ac:2a:74:7c:f3:26:7f:a3:12:91:5c:
15:3a:b5:de:09:05:e0:48:b6:87:a8:57:22:95:33:
7a:20:6c:cc:ec:f5:df:de:f7:5a:02:36:75:02:21:
1c:5d:81:3b:e8:9a:93:48:a0:96:65:28:a7:13:3f:
df:b6:58:34:02:71:fd:a8:bf:b8:15:06:60:af:47:
2d:26:34:1d:2a:70:2d:8b:db:44:dd:de:63:ae:a2:
f6:42:cc:fa:d8:71:0c:fd:0e:4d:2e:e3:e2:a4:c2:
1e:ce:99:7a:f4:56:00:53:72:58:8a:97:77:84:9e:
bc:db:ec:bd:ac:40:52:36:4a:cb:91:eb:95:6f:0e:
d2:51:8b:77:ae:80:ff:46:67:e0:8c:25:53:d8:28:
71:a4:19:5d:30:4a:e8:33:5a:44:80:98:93:58:60:
a7:54:72:b4:be:8a:45:18:8f:f8:78:9f:a0:cb:ad:
34:48:79:06:69:88:c8:d2:99:cf:0c:33:35:82:d7:
2d:b7:05:d1:11:f4:3b:64:c0:16:dd:e7:41:44:b7:
81:69:4a:6d:5c:52:63:88:08:3f:1b:ff:1e:1a:0b:
e6:43:92:88:d4:07:76:55:48:b7:d2:68:b5:8a:8b:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E4:49:7C:F4:45:ED:AD:F0:C2:1F:AF:6D:EB:48:36:20:98:A1:BC
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/EeRJfPRF7a3wwh-vbetINiCYobw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.70.0/24
77.91.76.0-77.91.78.255
Signature Algorithm: sha256WithRSAEncryption
3e:0f:73:84:32:86:93:94:fa:a2:2b:01:3d:5d:be:9a:af:7d:
16:ed:c5:f6:ee:bc:a7:c9:c7:93:97:68:bd:a5:dc:0c:16:dc:
15:1a:09:b2:5b:cb:8d:3f:cb:4a:28:a4:4b:d1:9a:ee:26:69:
e2:a6:3e:11:a8:a4:9f:c3:12:d3:85:62:0e:14:a3:da:2c:e1:
5b:7f:eb:ab:3e:e5:a6:69:8a:44:4e:23:4b:9f:0f:0f:60:e7:
9f:df:e0:78:ee:5a:f9:6e:67:37:70:43:35:76:0e:67:bb:c6:
91:19:9d:6d:ce:dd:65:2d:65:56:0a:c7:ea:29:9c:12:a2:03:
2d:09:46:79:c0:7a:4f:c2:08:a2:2a:a0:f2:b7:68:fa:8f:72:
20:d5:e3:0f:55:3f:39:9c:51:84:95:d5:8f:f3:db:ca:1f:f0:
4a:65:bc:79:88:80:5c:26:8e:09:8a:d5:45:fc:9d:18:4f:84:
1d:1f:d1:b6:04:44:68:a4:3a:1f:9e:79:29:b1:f2:17:8d:dc:
c3:86:fc:41:5f:09:92:e8:31:f4:63:da:05:65:cf:ac:4c:b7:
69:90:3b:c5:2a:9f:94:c2:dc:6f:82:cb:b7:61:91:50:fa:bb:
1b:a8:47:2c:b0:03:68:63:a0:d9:dd:51:12:35:70:82:fd:91:
1c:02:0c:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:29:57 2025 by rpki-client