Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tyoendag4hM31GR1foggUULe9Lw.roa
File: tyoendag4hM31GR1foggUULe9Lw.roa (raw, json)
Hash identifier: butf9qWU7we6BOXdf/2JpWRKBZdyN9hMk1CKhURm3EY=
Subject key identifier: B7:2A:1E:9D:D6:A0:E2:13:37:D4:64:75:7E:88:20:51:42:DE:F4:BC
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BDA15AF2A88ABCE6ABD77A4A671A3
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tyoendag4hM31GR1foggUULe9Lw.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42503
IP address blocks: 77.65.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:da:15:af:2a:88:ab:ce:6a:bd:77:a4:a6:71:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b72a1e9dd6a0e21337d464757e88205142def4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:de:ba:4f:f9:0f:38:9f:ff:f9:89:60:69:09:
c1:4b:38:23:87:46:14:73:78:f7:7c:3d:9e:ed:84:
fe:70:1f:c8:13:04:89:15:48:f3:04:f6:39:51:52:
7c:0e:5b:97:40:a2:75:a7:6d:5d:10:7b:17:6d:40:
24:9e:41:fb:5f:dc:a2:80:b2:96:f2:b5:a4:9b:64:
7e:ba:0e:ff:42:eb:2a:0e:0f:96:04:03:8a:ef:f0:
06:01:02:97:88:95:fe:bc:72:4b:d4:e9:ea:ba:d4:
e7:ac:b9:d3:50:4f:0b:e7:1d:9a:64:bc:63:24:b6:
4c:d3:90:16:1b:3e:fa:79:c1:c4:9b:e9:53:ac:14:
db:be:ff:5d:8c:11:62:ee:a5:16:99:0b:86:bc:f6:
62:44:78:ed:dc:81:cc:d3:f0:04:7c:de:e8:d7:87:
30:c9:1b:41:94:e4:73:b2:af:11:2a:9c:ce:27:da:
4a:50:c7:c9:2c:c9:ed:12:31:47:f7:59:21:47:5f:
45:87:7d:0e:f2:fd:0c:a0:c9:97:9d:32:63:7d:17:
7d:b9:9f:13:96:6f:1e:ff:1a:39:6c:c3:ba:3d:1d:
ee:36:95:81:35:db:22:c7:c2:85:bc:cc:fc:2b:98:
29:ba:6a:4f:8f:12:c8:3c:80:c2:22:31:26:95:ca:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:1E:9D:D6:A0:E2:13:37:D4:64:75:7E:88:20:51:42:DE:F4:BC
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tyoendag4hM31GR1foggUULe9Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:17:ca:2f:d7:a2:d0:c1:41:0f:17:57:dc:38:d1:60:84:86:
69:dd:f4:ac:1d:18:7f:dd:33:9f:91:4c:9a:64:be:1b:e0:fd:
d0:c9:1f:7e:48:74:3f:c0:6f:5c:4f:0e:5f:be:93:54:40:1a:
16:7c:56:cf:f4:e0:82:07:10:67:6c:ca:f2:f7:f0:da:13:40:
5f:e4:bb:52:04:f1:49:f0:2b:c3:ce:c6:48:52:25:eb:25:5c:
32:a0:d2:c2:3b:37:ff:5a:b7:62:8b:ae:a3:ce:00:db:b8:d8:
e1:98:e2:02:fd:95:3b:ad:4c:e3:c2:4b:4e:e4:9a:a8:aa:7e:
2d:db:f9:10:c7:46:6b:36:06:20:d3:07:d3:e3:e4:e7:c7:a5:
69:66:28:fa:04:65:a0:f2:46:cd:33:3e:74:6c:92:39:e4:93:
02:c1:b6:5b:c4:51:ea:89:5e:db:69:e0:17:06:08:24:41:a2:
f5:94:86:f7:a4:38:24:10:bc:b5:4b:b9:dd:8f:a3:af:6d:0b:
cf:98:a4:5c:e1:b0:42:91:ab:e6:9b:ca:e1:c3:35:26:61:ef:
b2:24:0b:da:f5:f1:30:d5:41:71:4a:c3:ff:7a:50:13:b1:e0:
be:69:b6:7f:82:02:92:60:f2:d7:c9:1b:cd:1b:6e:cd:1d:7f:
ff:ce:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:33 2025 by rpki-client