Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa
File: o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa (raw, json)
Hash identifier: zzahS3EyrX+jIVg6yGR2kDs1UzlqtPtkB9ukn8PHDT4=
Subject key identifier: A3:73:60:86:8C:AB:AB:45:54:FF:D2:C9:BA:80:91:EF:F5:61:7D:A5
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 0194221F64E5BEDC3E23AA90E56997F3AC48
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202247
IP address blocks: 77.73.33.0/24 maxlen: 24
93.95.25.0/24 maxlen: 24
2a05:9480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:64:e5:be:dc:3e:23:aa:90:e5:69:97:f3:ac:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a37360868cabab4554ffd2c9ba8091eff5617da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:e3:62:70:7d:7f:3c:6f:b7:fc:7b:17:7e:d6:
b2:e8:b2:2c:5c:50:4f:b2:56:e0:d2:a9:b7:3a:a7:
0e:f7:e8:c9:d3:17:7b:5d:dd:03:97:26:15:5a:c3:
06:1d:9d:76:d5:62:00:87:ea:6e:37:65:ac:8d:d3:
8e:df:19:15:5c:f2:e0:70:dc:3d:9d:47:7f:54:13:
e2:15:92:43:96:b4:e6:fe:73:b0:b8:e0:9a:ff:81:
ad:ab:fb:c1:5c:62:dd:11:75:b6:8b:7f:78:da:ab:
11:8b:11:73:db:ca:87:06:aa:e4:52:f3:bd:50:8a:
06:ee:56:40:b1:6a:0b:47:f0:ec:c2:74:6a:8d:66:
ac:e9:e9:34:04:13:5d:31:df:1f:a3:d2:32:60:a0:
ac:53:0d:7d:c2:b6:d4:b0:1f:d0:41:ec:23:6a:aa:
1a:31:d0:d9:a4:a0:2f:f0:52:d4:35:23:9d:7d:09:
32:a2:a3:3c:3d:bb:a3:48:66:bf:92:3f:2e:c7:c6:
35:5a:02:5c:46:b1:76:de:c8:dc:c9:d5:25:6d:08:
8a:fa:4f:d9:1f:d0:b4:62:09:64:95:cb:24:90:c9:
4f:b5:8a:09:9f:08:22:86:7c:46:fa:30:a9:ec:fa:
c6:06:f4:29:e4:97:5f:12:39:21:27:5c:3e:11:10:
fd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:60:86:8C:AB:AB:45:54:FF:D2:C9:BA:80:91:EF:F5:61:7D:A5
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.33.0/24
93.95.25.0/24
IPv6:
2a05:9480::/29
Signature Algorithm: sha256WithRSAEncryption
8d:3b:db:68:b2:ed:8b:d7:fc:78:e4:df:2a:55:8a:ce:e8:81:
3f:84:09:21:c7:00:81:d8:73:08:78:84:79:7a:22:09:68:b5:
54:03:3d:91:c5:7c:ff:0f:62:cf:74:a3:ce:9a:ac:46:ff:51:
2b:60:5a:33:c3:c1:0e:67:1b:5a:26:86:d1:ef:48:b9:01:1a:
58:9f:c3:02:c7:48:b0:cd:78:ad:20:19:4b:a7:ed:84:10:24:
47:5b:a1:44:d9:a2:3c:8b:a1:9a:34:16:df:17:42:ba:21:4e:
58:af:4d:5d:06:f3:8b:a5:0f:64:dd:63:8f:ee:e8:1d:3a:01:
73:35:e4:c1:10:b0:3e:f4:77:10:99:a8:6d:fd:18:f4:1f:c7:
a7:77:a2:21:39:f8:77:3d:6a:80:a0:e0:8a:a0:0f:3c:61:70:
ec:03:4c:6c:f8:3d:de:09:57:d0:19:4f:97:4e:ef:42:03:8d:
9c:e9:7e:24:81:95:c1:bb:e8:ae:19:4c:36:53:d1:0b:cb:8d:
cc:e8:65:b9:5e:b4:e1:e5:7f:9f:ee:59:02:cc:ba:e7:84:ec:
93:82:ab:2d:d2:79:d5:20:7e:ed:49:8d:9d:1a:39:f7:3c:90:
ca:49:50:68:06:30:ed:de:00:c0:96:ce:7b:26:03:c0:3b:0e:
38:26:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:43:22 2025 by rpki-client