Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/L-zAQKQylAwMOWOD8KogBSnuStI.roa
File: L-zAQKQylAwMOWOD8KogBSnuStI.roa (raw, json)
Hash identifier: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=
Subject key identifier: 2F:EC:C0:40:A4:32:94:0C:0C:39:63:83:F0:AA:20:05:29:EE:4A:D2
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 0194282709D85153CB00B82C6AC9C164950A
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/L-zAQKQylAwMOWOD8KogBSnuStI.roa
Signing time: Thu 02 Jan 2025 17:53:54 +0000
ROA not before: Thu 02 Jan 2025 17:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 77.91.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:09:d8:51:53:cb:00:b8:2c:6a:c9:c1:64:95:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fecc040a432940c0c396383f0aa200529ee4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:84:82:e9:30:7b:22:d2:f5:16:07:2a:37:
50:21:8d:91:f9:35:0f:c9:1f:b2:86:93:f2:a3:e6:
df:5b:d3:dd:44:1d:80:e2:01:3d:7a:7b:16:ed:a6:
fa:63:b2:11:6e:a1:f3:fb:50:d8:81:36:08:4c:88:
a7:44:8c:f5:15:16:e9:2c:c4:20:73:ac:16:99:bd:
f1:45:f3:eb:93:32:5f:9d:24:cb:6d:8f:ce:ff:33:
68:5a:e0:00:c5:a4:ca:a6:87:8d:9a:af:f1:71:5e:
67:a7:a9:3f:dd:77:f0:85:de:97:06:90:1f:a9:da:
38:75:78:0d:75:a9:84:36:03:a6:3e:a1:f0:85:94:
95:3e:de:23:3d:57:a6:b1:7c:e4:f6:4a:99:c0:96:
a5:0c:d9:31:89:33:8b:9a:23:45:d5:c9:d2:7e:1a:
5d:01:31:f9:54:f5:09:f8:d6:d9:91:cd:e2:7e:e6:
6a:7b:d4:7f:11:ba:db:2a:55:61:3c:b4:c2:6b:6d:
2e:c2:c3:83:bf:7e:77:9b:7c:77:17:8e:a8:21:cb:
e4:b7:38:f3:69:a3:56:18:b5:e1:f1:28:65:a3:45:
b3:6f:14:a6:3d:ec:3d:11:47:30:74:db:c4:df:fb:
a5:e0:e6:14:ff:f9:d7:c9:f1:15:de:fb:9f:e6:24:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:C0:40:A4:32:94:0C:0C:39:63:83:F0:AA:20:05:29:EE:4A:D2
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/L-zAQKQylAwMOWOD8KogBSnuStI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:db:1a:0c:45:42:84:ec:ef:0a:ab:53:2b:f6:45:a1:77:ec:
f3:1f:67:cb:a5:c8:cd:23:ab:02:ab:c8:26:28:a4:cb:4d:6a:
96:1d:ca:b4:20:13:01:7b:9a:2e:46:45:b3:71:09:e3:bf:ab:
93:90:03:eb:b4:2a:11:af:ae:3a:26:59:74:57:7e:f2:8a:12:
14:ee:75:80:2b:b7:62:f5:b5:96:96:ee:97:2c:cb:6f:b8:57:
df:f9:d4:7a:31:8b:aa:3d:4b:bf:fd:42:5e:c2:c6:f3:3a:bd:
c0:bc:a9:86:97:c6:21:47:25:5e:ad:67:4c:cd:53:b4:1c:b3:
1c:98:84:f6:86:e4:f0:2d:85:8c:dd:97:53:a2:69:e8:6b:41:
2f:5d:c2:d4:08:53:0d:15:be:c1:a2:be:45:aa:d4:81:4c:83:
7b:2a:4f:5e:0c:ca:be:be:35:75:f0:9c:78:18:73:2a:00:85:
78:e7:f2:1d:96:e0:45:97:4b:09:aa:2d:42:24:8c:ab:76:2d:
3f:cb:5d:05:6f:c8:c7:06:a3:b8:b9:8a:c7:be:e9:91:7b:35:
36:06:50:1d:4a:e3:48:26:79:30:01:94:b0:d8:f4:b2:32:d3:
7a:dd:35:77:8e:6c:b7:c5:47:40:93:ed:f4:39:7b:43:46:d8:
76:1e:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:53 2025 by rpki-client