Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IEJUTZfseJ3UVBl5v0-Ia-KeB1o.roa
File: IEJUTZfseJ3UVBl5v0-Ia-KeB1o.roa (raw, json)
Hash identifier: MLjmRldtHK6pEgykUkcv4z68m7PBtY+XZj0K+kMutvY=
Subject key identifier: 20:42:54:4D:97:EC:78:9D:D4:54:19:79:BF:4F:88:6B:E2:9E:07:5A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01951EC5EE07D7955C9CDAA1081C411E36CB
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IEJUTZfseJ3UVBl5v0-Ia-KeB1o.roa
Signing time: Wed 19 Feb 2025 15:14:02 +0000
ROA not before: Wed 19 Feb 2025 15:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 77.92.153.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:c5:ee:07:d7:95:5c:9c:da:a1:08:1c:41:1e:36:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 19 15:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2042544d97ec789dd4541979bf4f886be29e075a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:de:7b:24:99:d4:55:1d:47:44:d9:e6:71:
89:ff:e4:3a:39:44:9b:2d:4a:92:51:2d:52:f4:a8:
98:54:13:34:c0:15:b8:a7:06:52:d3:7a:dd:84:02:
ae:81:91:c0:b3:46:91:e0:f5:3d:f0:cd:2c:d6:ed:
2c:87:9f:1d:ee:3c:6f:15:8c:00:4f:77:b2:a2:94:
70:d1:9a:67:04:9d:3a:23:a6:77:e1:25:40:9c:dd:
54:b4:44:8f:87:45:37:5d:96:a1:43:99:3a:b6:73:
d7:63:cc:c8:e4:a9:95:60:a2:de:fc:71:c4:42:14:
17:dc:b6:d3:b1:ae:d2:52:67:fe:87:39:2f:25:c3:
24:28:37:93:9a:51:94:b3:e2:aa:19:e1:dd:5d:54:
ba:2a:8b:af:3b:18:06:e4:19:74:3e:95:c5:f7:3b:
3b:75:44:47:89:db:9b:d8:4c:e9:c8:a4:2b:ab:13:
fd:e6:fb:4b:2a:e4:16:75:65:24:13:56:12:10:9b:
25:41:65:26:a2:47:30:a8:54:31:8b:b3:52:40:05:
34:14:44:d8:95:96:5f:78:e9:63:83:74:91:19:ff:
29:22:09:62:26:bc:c6:5e:72:6d:99:25:c3:93:2d:
7e:f5:52:2f:b7:65:fe:f3:69:7a:fc:5c:5f:5f:86:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:54:4D:97:EC:78:9D:D4:54:19:79:BF:4F:88:6B:E2:9E:07:5A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IEJUTZfseJ3UVBl5v0-Ia-KeB1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.153.0/24
78.135.73.0/24
185.17.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7e:77:43:52:64:a0:b4:00:d8:f2:46:57:ce:6c:f1:cb:b8:
ca:60:9e:b0:06:c5:c5:ac:eb:46:3a:04:6b:f3:14:be:90:6b:
9f:06:32:a2:2b:ad:91:32:cc:4c:54:dd:5c:c2:0d:43:5e:5f:
b7:36:ff:c3:78:81:37:cf:42:da:15:2f:09:cd:22:2e:f8:47:
71:13:b7:0b:41:7f:3e:c4:ca:8f:57:1b:0b:7f:28:39:7c:a1:
29:05:51:7a:9d:f0:f7:6e:d1:aa:e9:82:1e:32:04:9f:00:81:
20:41:53:01:16:eb:71:c5:cd:64:d6:79:2f:ed:b6:ed:5d:1d:
19:f5:9c:65:b1:e5:aa:e2:3e:39:18:fb:67:1c:a2:86:c8:20:
ce:b1:2a:88:e6:56:42:3d:5c:e9:20:49:22:ab:e7:a3:3f:92:
ce:f9:b8:41:02:ca:20:15:eb:1b:22:3b:bd:65:04:8e:b6:52:
a9:9e:50:60:a5:a3:31:17:1b:2f:1c:d0:70:50:4a:3f:4f:63:
8d:eb:39:b9:88:47:ac:ac:a1:94:7f:2c:bf:aa:2c:a0:86:dc:
17:d1:0a:28:92:00:9c:11:df:ea:f4:40:6c:61:25:5e:55:22:
70:ac:d8:a4:a7:f5:d3:0f:c2:07:fc:d7:cd:a1:cf:66:f6:14:
f6:7e:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:38:56 2025 by rpki-client