Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/wcLYGabE-zOcD9Q5odcWZScc_jk.roa
File: wcLYGabE-zOcD9Q5odcWZScc_jk.roa (raw, json)
Hash identifier: 9+Hqoci1uf8xn/4lBSwKgEFDstdOcDCd4NLR9GEiHDY=
Subject key identifier: C1:C2:D8:19:A6:C4:FB:33:9C:0F:D4:39:A1:D7:16:65:27:1C:FE:39
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BECF964BC7D2A5137C14A386B49E2
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/wcLYGabE-zOcD9Q5odcWZScc_jk.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202050
IP address blocks: 77.65.142.0/23 maxlen: 23
77.65.194.0/23 maxlen: 23
77.65.223.0/24 maxlen: 24
193.192.176.0/22 maxlen: 22
193.192.176.0/23 maxlen: 24
193.192.178.0/23 maxlen: 24
193.192.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:f9:64:bc:7d:2a:51:37:c1:4a:38:6b:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c2d819a6c4fb339c0fd439a1d71665271cfe39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:cb:07:f1:4a:ee:af:b9:10:da:87:66:6b:
29:71:d4:11:64:50:0d:05:2c:7a:5d:6a:97:0b:0d:
2a:4e:88:7a:cc:c5:c6:ac:93:c0:48:db:e8:d2:b8:
b4:e3:ea:1b:50:69:32:5c:51:d2:b3:43:a9:6a:59:
ce:f0:19:5e:96:94:1b:93:32:cb:13:81:68:d0:5e:
62:73:45:0f:8a:00:f9:aa:c9:e2:72:cd:3a:63:f7:
ac:cb:84:2e:34:85:06:63:b9:14:da:6e:c5:93:72:
66:59:07:14:88:71:12:29:26:9f:fc:05:34:40:a5:
36:7b:7d:29:b5:6f:5f:ea:7d:7b:82:51:5e:66:b5:
00:29:20:3e:f8:23:ff:2c:b4:5f:e7:e0:81:24:23:
9e:b3:b1:4a:ee:87:72:c6:5c:93:51:0d:70:7f:a5:
a0:09:21:1f:85:9e:53:1b:a4:5e:28:67:82:c5:9d:
27:7b:50:27:fd:af:93:1f:df:fe:4c:7a:82:72:4f:
2d:fc:71:fa:0e:48:2f:16:28:23:59:d7:4b:f3:67:
bd:03:fc:1e:1e:9e:de:cb:27:ec:6f:5a:a3:08:24:
4d:13:af:62:17:bd:e1:49:60:87:2f:79:a8:0f:42:
1c:9e:30:b3:30:55:3a:28:c1:d9:ed:c9:7f:d5:43:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:D8:19:A6:C4:FB:33:9C:0F:D4:39:A1:D7:16:65:27:1C:FE:39
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/wcLYGabE-zOcD9Q5odcWZScc_jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.142.0/23
77.65.194.0/23
77.65.223.0/24
193.192.176.0-193.192.180.255
Signature Algorithm: sha256WithRSAEncryption
6d:8b:4e:3c:dc:2b:ce:9d:5d:e3:86:85:c2:ab:ce:e3:ac:43:
6b:aa:88:ee:47:17:87:1e:39:d1:a4:dc:74:12:cd:13:71:a1:
42:6a:a0:aa:2d:ec:46:bf:b9:b0:d0:d6:53:b2:8c:67:83:74:
1d:62:52:e9:da:20:5f:c2:e1:a8:1d:4a:9f:a7:fb:f7:6f:b2:
0c:ba:8a:0a:0d:46:d3:30:79:c8:25:0d:34:ba:9b:d8:24:76:
0d:bf:66:92:18:ae:ec:07:bb:cf:f8:b1:2d:b2:80:6b:f9:83:
97:73:b2:4e:78:09:3f:49:9a:64:f3:6a:d3:82:ed:e6:51:61:
d8:ff:d0:ac:2f:51:5a:50:d8:4e:06:50:40:19:b2:d0:74:65:
89:ce:a4:41:71:f1:ad:4f:9b:5f:d9:75:fc:e5:04:c3:84:61:
45:5b:2f:d0:62:24:f2:d6:74:ae:7c:c6:46:3c:3d:5c:73:31:
5a:98:ec:3e:35:6d:d0:86:aa:09:0b:dc:46:1e:b5:4d:33:d1:
00:8c:2b:79:3c:ce:ba:69:b4:2f:09:45:b4:ef:57:22:1f:57:
14:e2:9f:31:e8:8e:fe:90:38:5c:3b:ca:1b:a6:00:60:90:cd:
f3:fc:b8:df:b2:5d:28:f4:98:77:01:ec:93:88:b1:6a:7e:f6:
cc:90:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:36:19 2025 by rpki-client