Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lHGDG0rPq0ajg508TBfFR3w1grU.roa
File: lHGDG0rPq0ajg508TBfFR3w1grU.roa (raw, json)
Hash identifier: HhcU1qQk+DtndIL9nBhk9p/XSDNi8PmNPRRKH82ImvU=
Subject key identifier: 94:71:83:1B:4A:CF:AB:46:A3:83:9D:3C:4C:17:C5:47:7C:35:82:B5
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266C03D8FD43CB27A43B040CD86AF527
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lHGDG0rPq0ajg508TBfFR3w1grU.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213310
IP address blocks: 77.65.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:03:d8:fd:43:cb:27:a4:3b:04:0c:d8:6a:f5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9471831b4acfab46a3839d3c4c17c5477c3582b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:08:2d:4e:1b:c7:2d:e7:8b:8a:0b:25:b5:
fa:2c:1f:aa:ad:20:a3:bd:f1:0d:38:5e:b0:78:9e:
84:a2:c7:2f:57:7d:78:49:44:b7:e6:c1:01:a5:d4:
5c:99:05:ad:66:46:f9:f8:28:95:c5:31:35:17:b3:
e9:74:dc:67:cb:49:b2:6c:4f:e7:9a:ab:f9:50:00:
45:a2:32:8b:c4:74:ea:e6:1f:b8:3a:ad:8a:e1:eb:
78:1e:b9:60:3c:3d:98:f9:e1:08:74:38:8d:02:3d:
36:fa:e6:d1:3e:be:c5:ee:9e:0d:21:d3:b3:93:66:
9a:32:5b:d1:68:1f:48:0b:58:ac:72:a0:91:22:9b:
05:19:ea:21:e1:06:64:63:cd:02:02:df:04:c9:9b:
30:57:5b:b4:bf:81:d4:67:ab:47:c7:6e:22:6f:06:
ed:4e:e3:0e:76:a0:9a:75:f1:6d:e0:7b:4a:c7:22:
0e:3d:9b:e4:0e:52:6a:a4:2c:50:45:3d:bc:ad:8c:
89:8a:a3:15:b1:c0:88:fe:4d:ab:48:c7:39:b6:bb:
57:87:1a:d7:32:df:d0:ea:c3:58:5a:1f:ab:63:7c:
f0:e8:73:45:31:b4:4e:67:84:52:c3:f3:b9:b0:66:
cf:13:78:ed:e9:5f:46:7e:b2:d4:4c:88:47:9b:63:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:71:83:1B:4A:CF:AB:46:A3:83:9D:3C:4C:17:C5:47:7C:35:82:B5
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lHGDG0rPq0ajg508TBfFR3w1grU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.192.0/24
Signature Algorithm: sha256WithRSAEncryption
31:42:bd:37:1d:15:86:78:1e:d8:b3:9a:86:78:bf:6e:3b:32:
f5:02:49:5e:b4:d4:2e:c4:0c:78:ad:76:81:21:e5:05:c6:6b:
01:99:bc:f5:69:96:67:b7:d5:7d:08:51:8e:54:2a:2c:05:0c:
62:5d:83:6e:5d:2b:7e:60:14:66:1b:c3:7f:d5:4a:12:18:f7:
6e:e6:c5:bc:d0:42:ac:68:e0:ef:ad:de:86:7e:bb:4b:d2:08:
d4:42:94:32:05:87:1d:53:49:f9:17:34:09:3e:35:95:9f:16:
09:80:96:81:17:94:29:ca:b7:3f:d7:e3:66:19:b3:7e:25:df:
4d:ee:ce:45:71:21:1e:7a:1b:5b:4c:6d:45:5c:84:c5:22:d3:
78:11:72:7a:dc:0b:fe:68:79:9a:98:26:02:e8:0d:97:4b:be:
3e:f1:82:83:b2:e7:ea:db:0f:cf:99:ba:e1:d7:2c:74:9b:5d:
f5:f4:ff:89:b3:b4:92:60:43:b7:38:5f:46:78:d9:35:6e:6b:
2d:da:37:5f:34:b0:7f:da:37:9b:86:d1:e8:6b:c1:3d:14:99:
f4:9a:a8:c3:67:c7:b6:2a:05:99:65:30:98:be:cb:27:a8:f8:
2d:e2:75:6d:42:b1:01:ce:d4:1d:53:2f:0c:21:27:18:1c:9b:
ca:92:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:16 2025 by rpki-client