Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bJsmK4DvfGbkdZAY2wMAG37A7BE.roa
File: bJsmK4DvfGbkdZAY2wMAG37A7BE.roa (raw, json)
Hash identifier: Tt2fW4F90s/kJARHMy5bBL9nH+FmPMMvb+96Ut0KQgk=
Subject key identifier: 6C:9B:26:2B:80:EF:7C:66:E4:75:90:18:DB:03:00:1B:7E:C0:EC:11
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD366332C8E5E41F3B4DD96BF3EDF
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bJsmK4DvfGbkdZAY2wMAG37A7BE.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28732
IP address blocks: 77.65.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d3:66:33:2c:8e:5e:41:f3:b4:dd:96:bf:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9b262b80ef7c66e4759018db03001b7ec0ec11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:90:f8:f9:ca:65:5e:85:78:c3:1e:dc:bd:
45:29:1c:7e:7b:1b:db:e3:d8:89:c4:df:78:6b:ba:
52:8a:7b:b3:1f:88:66:15:93:ec:65:ad:99:84:86:
eb:d5:2a:84:35:a9:ac:3c:19:9b:8b:a9:16:ad:6a:
83:46:40:bc:48:30:43:27:ca:fa:b9:bf:40:3c:e1:
65:54:70:af:ab:47:7f:13:a8:b0:dd:0c:57:db:fa:
c6:77:5c:5d:2c:4a:e1:be:27:d4:6e:08:56:7d:f7:
00:51:0c:dd:7c:84:6d:c4:89:36:d1:1a:6e:c3:3a:
89:24:f8:cf:c4:d0:9a:dd:5a:dd:e2:60:00:f2:57:
49:6f:e8:0c:eb:1b:63:8d:4e:34:38:db:c6:b8:0b:
08:1d:d6:a9:4c:33:a3:02:57:af:04:5b:ce:44:e6:
b5:7b:27:4a:74:a7:00:1b:33:b8:3f:42:6c:df:51:
18:b9:53:a1:8c:f3:3e:56:92:c6:de:7d:44:b7:cc:
cc:74:5e:3e:c8:79:e0:65:7b:ff:e8:e5:a6:e0:57:
8c:8b:04:68:2a:18:de:e6:df:da:71:bf:05:8a:7b:
75:75:57:93:0d:2e:61:c0:e3:0b:7c:45:5f:35:f4:
ac:bb:11:23:b0:5c:33:7f:95:fb:15:33:53:4e:2b:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:26:2B:80:EF:7C:66:E4:75:90:18:DB:03:00:1B:7E:C0:EC:11
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bJsmK4DvfGbkdZAY2wMAG37A7BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ad:5c:df:a8:b5:26:71:62:9d:f3:45:9f:99:1e:9e:69:48:
18:74:97:6f:39:2e:c6:10:29:38:4a:67:55:5a:ea:d7:81:44:
3f:7c:87:17:d5:ce:87:72:13:e0:f4:20:57:57:99:45:d3:63:
aa:78:ad:4a:59:5d:69:54:e3:df:d8:f6:09:79:87:3c:14:a8:
bd:13:e3:9d:bd:b8:32:fd:81:1d:2a:f2:c9:12:8a:34:0d:2b:
16:a1:6c:85:4d:6f:ce:a6:7d:1d:0d:89:df:68:88:38:f1:2e:
90:a4:30:92:fc:e9:c9:8c:80:06:fe:ff:f7:93:59:f1:65:bc:
fd:d2:65:a1:93:28:e3:00:21:bf:76:28:6b:56:4e:a7:39:6f:
40:a4:7e:c4:7f:ae:5b:bc:e2:05:47:b9:d8:90:e2:42:8a:9c:
83:58:fa:ad:db:1b:a7:59:96:bb:ce:eb:ce:c7:64:79:22:15:
80:dd:b7:9c:20:14:27:a3:4b:ea:c0:c6:5f:67:14:17:51:2c:
e6:4c:7a:16:de:4f:44:9b:42:85:ee:d2:0d:b6:b8:33:8a:20:
d9:fa:47:99:65:22:c1:f2:23:94:74:6f:2d:c9:46:93:0d:e9:
06:e5:39:fa:7a:1d:72:91:e4:4e:73:27:fb:82:64:60:a4:92:
1c:39:e8:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma9NmMyyOXkHztN2Wvz7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzliMjYyYjgwZWY3YzY2ZTQ3NTkwMThkYjAzMDAxYjdlYzBlYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03iQ+PnKZV6FeMMe3L1FKRx+exvb
49iJxN94a7pSinuzH4hmFZPsZa2ZhIbr1SqENamsPBmbi6kWrWqDRkC8SDBDJ8r6
ub9APOFlVHCvq0d/E6iw3QxX2/rGd1xdLErhvifUbghWffcAUQzdfIRtxIk20Rpu
wzqJJPjPxNCa3Vrd4mAA8ldJb+gM6xtjjU40ONvGuAsIHdapTDOjAlevBFvOROa1
eydKdKcAGzO4P0Js31EYuVOhjPM+VpLG3n1Et8zMdF4+yHngZXv/6OWm4FeMiwRo
Khje5t/acb8Fint1dVeTDS5hwOMLfEVfNfSsuxEjsFwzf5X7FTNTTisN3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGybJiuA73xm5HWQGNsDABt+wOwRMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvYkpzbUs0RHZmR2JrZFpBWTJ3TUFHMzdBN0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUGZMA0G
CSqGSIb3DQEBCwUAA4IBAQB/rVzfqLUmcWKd80WfmR6eaUgYdJdvOS7GECk4SmdV
WurXgUQ/fIcX1c6HchPg9CBXV5lF02OqeK1KWV1pVOPf2PYJeYc8FKi9E+Odvbgy
/YEdKvLJEoo0DSsWoWyFTW/Opn0dDYnfaIg48S6QpDCS/OnJjIAG/v/3k1nxZbz9
0mWhkyjjACG/dihrVk6nOW9ApH7Ef65bvOIFR7nYkOJCipyDWPqt2xunWZa7zuvO
x2R5IhWA3becIBQno0vqwMZfZxQXUSzmTHoW3k9Em0KF7tINtrgziiDZ+keZZSLB
8iOUdG8tyUaTDekG5Tn6eh1ykeROcyf7gmRgpJIcOegU
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:49 2025 by rpki-client