Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/x8qy1V86ggKXIYJ47lPp7-bEQ08.roa
File: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (raw, json)
Hash identifier: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=
Subject key identifier: C7:CA:B2:D5:5F:3A:82:02:97:21:82:78:EE:53:E9:EF:E6:C4:43:4F
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 01941F8C9D3482A6B48B75CF3B71F575834A
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/x8qy1V86ggKXIYJ47lPp7-bEQ08.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 185.77.1.0/24 maxlen: 24
185.77.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9d:34:82:a6:b4:8b:75:cf:3b:71:f5:75:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7cab2d55f3a820297218278ee53e9efe6c4434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:a8:a9:62:ad:0a:e3:94:26:f1:67:0e:b9:
23:86:27:c7:b6:7c:4e:19:fd:92:56:d0:80:cb:3c:
86:25:21:20:6f:49:69:1c:bb:07:ec:88:ff:27:1f:
19:c6:cb:44:9a:3f:52:27:a2:f2:31:dc:17:a4:11:
d4:45:76:a2:fd:e8:e1:b3:3a:eb:22:d7:94:f3:e5:
0b:82:e6:9b:73:a0:1f:7c:b2:c9:67:a2:47:4f:b4:
f8:61:90:76:fd:0a:63:3a:77:e4:35:fd:8b:51:f1:
a7:3f:f0:2a:53:8e:b4:f5:37:35:c7:c9:ac:07:92:
bc:94:49:52:e6:50:93:19:c5:95:ea:36:01:13:78:
cc:ae:cc:91:6b:42:22:c6:0d:0a:13:04:f8:39:dd:
0e:0f:e3:d2:92:5c:51:0e:ca:05:93:38:b3:4a:5a:
e9:5c:42:e1:43:cb:36:2a:bb:3f:c1:b8:b4:9e:81:
41:95:68:1a:61:07:f0:39:2a:98:dc:3b:9a:5d:bd:
4a:78:1c:1d:dc:76:d9:56:b6:67:09:a7:4a:1d:8b:
3f:1c:0e:3c:70:61:07:18:7c:bb:87:78:9f:c1:6b:
11:8d:7a:15:05:e7:84:b2:cd:16:49:7a:ac:f2:c3:
58:40:a3:7a:2b:f3:8f:a5:7d:89:15:e8:7d:f1:40:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:B2:D5:5F:3A:82:02:97:21:82:78:EE:53:E9:EF:E6:C4:43:4F
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/x8qy1V86ggKXIYJ47lPp7-bEQ08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.1.0-185.77.2.255
Signature Algorithm: sha256WithRSAEncryption
85:9f:50:e6:5b:13:b9:66:67:81:c4:94:67:c6:ca:ab:d7:89:
e3:a6:91:87:0f:fe:78:57:4f:b3:38:6f:d1:44:81:19:66:d7:
f8:dd:e3:39:93:8b:f6:e8:3c:6d:cc:87:f4:41:b5:ba:67:15:
7e:8a:bf:6a:7c:0e:9d:ed:d0:6e:5b:d1:64:e8:4c:1a:e6:d1:
f0:2d:5c:e3:24:9c:2a:e0:89:1b:74:b7:5a:1d:47:87:d7:76:
55:26:3f:dc:44:67:89:6f:fe:7c:51:ec:c5:11:29:6f:bc:92:
87:a4:4b:17:6d:15:a6:f9:8f:0b:1b:32:e0:f5:ed:fd:e5:4f:
1d:64:a8:ab:8f:ed:80:90:96:b7:e1:74:db:d2:b1:88:2a:06:
8a:f4:1d:d7:fb:24:49:75:05:3d:58:54:94:83:84:b6:aa:d0:
55:0b:f7:c5:8d:a9:1c:2f:69:d1:fa:c9:27:6e:79:d8:7c:97:
0f:51:14:be:51:71:b1:83:83:50:fb:0d:84:8b:52:ca:3b:c5:
7b:58:20:96:d9:8e:5d:1a:6e:68:7c:59:a4:35:c0:e0:d2:3e:
98:31:95:a4:d4:5b:40:93:a8:36:f6:c5:eb:a2:f8:0a:9f:36:
2c:34:47:4b:75:ae:bc:1f:66:69:a8:c1:56:a3:72:ad:98:aa:
c1:bf:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:19:23 2025 by rpki-client