Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DroWw08Us_fsBYNHo_xca9YyNL0.roa
File: DroWw08Us_fsBYNHo_xca9YyNL0.roa (raw, json)
Hash identifier: kcHWZ3nvV9sFD2BJSy575ZbrIPkl+0SPWhTRV5yna4c=
Subject key identifier: 0E:BA:16:C3:4F:14:B3:F7:EC:05:83:47:A3:FC:5C:6B:D6:32:34:BD
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE5F7C78C2D4DD547F35F167230EF
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DroWw08Us_fsBYNHo_xca9YyNL0.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199896
IP address blocks: 77.65.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e5:f7:c7:8c:2d:4d:d5:47:f3:5f:16:72:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eba16c34f14b3f7ec058347a3fc5c6bd63234bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:8e:c5:e3:9e:7e:2c:85:45:bc:35:87:4f:
40:73:d0:55:56:e7:b0:57:42:15:9e:ee:c7:4d:83:
2c:4d:09:21:36:2c:4e:00:8f:2a:d7:ae:2f:ae:a9:
e2:02:f4:53:17:fd:98:c2:43:91:c3:ec:a3:5f:e8:
ca:83:b6:b0:83:8c:56:39:17:b8:bb:1e:8f:aa:7a:
93:e1:44:13:03:0c:5a:c6:7a:89:53:77:12:12:d1:
64:43:f4:03:f0:69:38:05:1e:09:f5:b9:39:65:63:
56:b5:e8:7f:88:b1:40:35:26:cb:93:ab:9f:01:0c:
8f:59:c8:46:51:61:f1:0e:be:08:52:a8:92:bb:c7:
36:76:1e:a2:53:c7:26:74:80:77:b7:64:df:84:a8:
e0:9d:7e:84:3f:2b:ae:24:44:42:4f:06:7a:5a:a3:
6a:98:fb:b7:1c:4b:c1:1d:ec:89:c5:47:c4:5f:8d:
99:0d:d4:66:db:f5:8c:d2:93:d7:93:d0:03:f0:c5:
83:13:b9:ce:79:8d:6a:fd:57:94:39:a7:da:aa:3b:
6a:01:f0:50:93:a8:96:1c:c5:b4:07:4e:3f:e8:b4:
44:ec:97:be:44:08:ec:89:e1:35:0f:2d:0a:75:0d:
61:da:79:fa:58:10:c6:79:f4:a6:1c:a8:95:06:4e:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BA:16:C3:4F:14:B3:F7:EC:05:83:47:A3:FC:5C:6B:D6:32:34:BD
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DroWw08Us_fsBYNHo_xca9YyNL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.135.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2c:2d:8f:53:90:e5:74:ef:da:66:21:7f:14:1a:11:f6:9f:
c3:1b:b8:4b:f4:64:5a:4d:ae:81:0e:4d:6b:ed:7b:15:05:e1:
ab:5b:7b:d3:ea:d8:bc:5d:7f:ca:c6:52:df:2b:d2:b7:80:35:
b8:08:79:3f:22:42:e4:5d:ca:f4:51:75:70:47:32:2d:fb:52:
5d:1d:20:d8:53:76:14:de:fb:f1:d3:e0:b0:e8:a6:04:66:86:
7e:6c:4a:08:9e:e3:b9:88:73:1c:5c:d4:b5:fa:0a:12:5e:4f:
bb:69:0c:4c:c4:39:55:e8:23:d4:52:99:fa:08:29:12:ef:bd:
f2:41:29:09:69:d7:d4:0b:77:3e:b7:83:1c:b9:84:b9:ae:4f:
e2:ce:f5:17:a8:3f:e7:f4:f1:21:82:4e:f9:9e:5f:b5:27:7e:
80:68:97:18:ba:7c:6d:28:d5:f4:3d:57:e3:7b:c0:29:e4:5e:
17:de:23:22:bd:c8:79:c5:cd:da:72:f5:5e:74:d3:8c:80:91:
f2:ae:f3:76:2f:65:49:9b:34:e6:2d:6a:d7:cd:5d:62:0d:92:
e7:50:62:83:04:71:79:d9:91:15:fa:cf:0d:4c:5d:44:fd:f8:
87:39:49:f9:80:b3:9e:9e:4e:27:38:a2:7c:c4:46:a7:7a:da:
a4:09:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:41 2025 by rpki-client