Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/dd8av2mxTwjOvzgQCyuc1wPNBmI.roa
File: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (raw, json)
Hash identifier: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=
Subject key identifier: 75:DF:1A:BF:69:B1:4F:08:CE:BF:38:10:0B:2B:9C:D7:03:CD:06:62
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 019425FBFFD24F30E203396F0C4E91644F56
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/dd8av2mxTwjOvzgQCyuc1wPNBmI.roa
Signing time: Thu 02 Jan 2025 07:47:39 +0000
ROA not before: Thu 02 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20799
IP address blocks: 77.241.176.0/20 maxlen: 24
80.68.32.0/19 maxlen: 24
185.115.68.0/22 maxlen: 24
2a02:df8::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:ff:d2:4f:30:e2:03:39:6f:0c:4e:91:64:4f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Jan 2 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75df1abf69b14f08cebf38100b2b9cd703cd0662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:6c:b7:1f:4f:fb:97:ab:17:6a:5a:2c:4b:
f5:0e:ca:c8:a0:fc:90:9a:35:d1:44:8d:0a:6c:08:
4e:4f:1c:d7:5e:7b:46:be:0c:12:7a:57:6f:e2:8a:
a9:00:92:ce:65:ff:9e:d8:8e:98:a9:e3:dc:57:9b:
d0:48:a9:88:29:d8:68:ee:2b:9d:06:c8:25:01:14:
4e:9e:2e:bd:e3:6e:1f:22:f6:26:96:2e:90:7a:1b:
d8:cb:11:2e:31:b2:d7:67:81:fc:86:86:e8:dd:cc:
4b:3d:4b:c5:8e:55:5b:5a:ed:e3:95:25:1c:8b:0f:
70:1d:d4:50:70:d8:3c:da:c2:da:d0:c4:76:be:15:
47:98:2f:d1:0b:fd:39:a7:2b:62:0d:b1:b7:23:cf:
db:59:99:ea:fb:d5:cf:d2:a3:8c:37:ca:d6:59:a0:
df:d5:18:42:12:10:4b:1d:51:8d:2c:ab:c6:83:1e:
c0:04:51:a0:93:c2:90:aa:cd:e2:2f:e0:5c:c8:60:
7f:14:22:77:66:9a:f6:04:41:98:38:dc:38:2b:c8:
97:74:4e:1b:b2:8a:83:2e:d4:c8:20:b5:c0:f7:f2:
f7:fe:db:e7:5f:e4:b0:3e:76:c2:bf:48:bd:fa:50:
76:10:32:82:43:38:08:8f:7f:27:31:f8:91:86:33:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:1A:BF:69:B1:4F:08:CE:BF:38:10:0B:2B:9C:D7:03:CD:06:62
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/dd8av2mxTwjOvzgQCyuc1wPNBmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.176.0/20
80.68.32.0/19
185.115.68.0/22
IPv6:
2a02:df8::/29
Signature Algorithm: sha256WithRSAEncryption
78:56:2f:68:47:12:1f:9d:7f:22:77:8e:e7:93:a3:ae:11:ab:
e4:9c:ea:8e:07:79:e5:06:c9:2d:05:5c:49:e1:9b:5d:60:9c:
f4:60:94:27:a8:81:7d:52:b2:b8:bc:d8:dc:d1:2a:fb:44:19:
af:50:23:03:5a:86:dc:eb:7b:b8:61:75:a0:01:9f:9f:88:26:
c1:d8:3f:94:9d:9f:46:dd:70:f9:db:53:e3:f8:19:19:5f:9a:
4c:0f:9b:97:8c:9d:32:9b:d2:b7:e2:d8:46:0e:2b:77:e9:c4:
a8:ab:0c:ca:47:fc:cd:d0:fd:26:65:5f:e0:e7:0e:30:34:db:
58:4e:85:5a:e5:9d:4c:73:c2:b6:18:3e:07:76:52:f3:40:87:
f9:7f:13:1d:db:6c:a5:b2:69:09:94:19:ae:8c:d4:87:8a:f5:
3b:fe:96:a7:fe:78:81:06:a5:03:e3:19:56:5b:60:41:13:ef:
1f:24:50:ca:8b:a4:18:15:99:a8:9e:96:e5:a4:95:be:02:20:
e0:fb:94:4c:c8:f3:3d:92:b8:a6:91:d3:4c:51:7f:2e:3e:77:
fd:a7:45:74:41:a2:c4:35:b3:8d:1b:a3:45:ba:f9:07:3e:69:
c8:fc:cf:e7:da:a7:f5:b2:88:20:99:15:78:d7:e6:a7:48:85:
9a:e0:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:15:08 2025 by rpki-client