Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/ppb7zwfGhsGHXV4qIGbEGzExlww.roa
File: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (raw, json)
Hash identifier: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=
Subject key identifier: A6:96:FB:CF:07:C6:86:C1:87:5D:5E:2A:20:66:C4:1B:31:31:97:0C
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 0194282708A047CAB3EA39EA90956BB4D254
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/ppb7zwfGhsGHXV4qIGbEGzExlww.roa
Signing time: Thu 02 Jan 2025 17:53:54 +0000
ROA not before: Thu 02 Jan 2025 17:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 77.91.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:08:a0:47:ca:b3:ea:39:ea:90:95:6b:b4:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a696fbcf07c686c1875d5e2a2066c41b3131970c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:4c:1e:44:b7:60:24:b1:5f:49:f6:e6:e2:
03:53:a5:9a:0c:52:57:23:8a:01:97:2a:97:3f:48:
07:fc:75:fa:aa:3b:11:72:bb:27:97:e6:4c:05:14:
94:22:ee:b3:21:8c:c8:f5:4b:62:b9:d0:5b:f3:db:
d9:b9:1c:bd:59:58:0c:e5:45:7e:5c:8f:1a:07:c6:
9f:93:0b:0f:50:c9:fd:55:11:fc:5a:33:a1:11:e6:
4a:8b:c3:5a:7b:4a:77:21:4d:ea:1a:33:be:7c:4e:
c8:9c:08:cf:32:fd:dd:ee:d5:a9:0a:de:41:0c:39:
20:a6:62:07:ae:44:4f:43:15:fd:cd:e1:b1:c8:02:
e0:ab:d0:73:0f:27:78:3f:0b:d0:59:e7:ba:58:bf:
8a:f2:a9:7c:04:af:26:3a:ec:05:03:2c:60:24:cc:
c9:9e:33:61:b7:75:2d:48:34:f8:5d:f3:bf:8d:ba:
45:67:22:a0:65:ad:77:fb:6a:8a:0a:69:6a:7b:3c:
7a:34:58:d1:68:02:ea:c4:73:7e:cc:bb:18:a4:e8:
81:db:bf:9f:cc:b9:9a:b4:66:08:f0:75:2b:15:c8:
f1:00:ed:f4:dd:9b:c7:40:cf:0c:73:0c:27:ee:58:
73:19:03:17:70:cc:22:ae:4c:7e:5a:3a:83:65:26:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:FB:CF:07:C6:86:C1:87:5D:5E:2A:20:66:C4:1B:31:31:97:0C
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/ppb7zwfGhsGHXV4qIGbEGzExlww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.66.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3c:2d:3b:db:0c:64:76:d1:19:4b:f9:88:62:d4:a6:d6:6e:
07:83:26:10:b4:f8:97:b8:cd:e1:47:c7:cb:16:3f:3e:8d:39:
cc:a8:fa:a8:d4:78:91:8e:c9:e6:8e:52:f4:42:21:73:16:0a:
ba:86:df:f3:67:1f:53:34:87:5d:ee:48:2f:e6:75:14:47:fa:
7d:57:a9:4d:ed:71:5e:53:a1:ed:58:5f:87:4c:85:90:27:df:
6e:21:3e:55:67:7b:4d:5c:16:30:aa:1b:61:7f:86:fb:62:d2:
17:56:16:fd:6a:15:e6:dd:ec:14:87:e8:47:d4:5f:5c:5e:78:
3f:4c:f7:00:67:dd:58:38:2e:5f:21:d4:d2:e1:8d:38:7d:ac:
f4:04:a5:0f:73:ae:b8:79:6b:c8:8e:fd:1a:1b:62:6d:df:e0:
5c:b0:54:11:b1:0a:e1:7a:ca:f2:c5:e1:db:35:91:92:4b:c0:
df:12:c5:44:c0:f6:e3:7a:19:5a:3d:81:a4:a8:17:0e:5b:2e:
72:b8:50:99:ee:34:7c:51:2e:84:00:e8:e3:a5:7c:00:f6:41:
93:07:f4:bd:c0:4f:91:c8:94:7c:8f:6a:01:9a:e0:0d:99:b0:
d3:21:35:74:5a:a0:9c:2b:cf:4a:be:7e:2f:53:da:3f:b1:a1:
24:1f:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:25 2025 by rpki-client