Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_w67_4TFSt5B87odQ6wtCdlX8Fs.roa
File: _w67_4TFSt5B87odQ6wtCdlX8Fs.roa (raw, json)
Hash identifier: 4KOusTxfFBsQgS+w2QfN8YOhD2gn4Eh3r3zGgAtFFAQ=
Subject key identifier: FF:0E:BB:FF:84:C5:4A:DE:41:F3:BA:1D:43:AC:2D:09:D9:57:F0:5B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01952362F5E8C8FB9B09F4ECFABC1FF32E36
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_w67_4TFSt5B87odQ6wtCdlX8Fs.roa
Signing time: Thu 20 Feb 2025 12:44:02 +0000
ROA not before: Thu 20 Feb 2025 12:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213143
IP address blocks: 77.92.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:62:f5:e8:c8:fb:9b:09:f4:ec:fa:bc:1f:f3:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 20 12:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff0ebbff84c54ade41f3ba1d43ac2d09d957f05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:05:81:d1:25:8a:8f:fa:56:39:1f:c1:f6:
2b:43:d3:a0:12:05:a6:39:42:0c:26:c1:56:53:26:
12:5f:70:48:58:fd:b6:62:18:3a:c7:1e:e5:ad:24:
9d:82:62:12:02:08:a4:3c:50:f9:a5:33:dd:e3:2a:
8e:f6:1d:44:b4:12:e4:a5:ea:9d:90:df:d0:24:f7:
2b:7c:e6:95:2d:20:05:94:40:c0:09:f1:cc:f0:5e:
4d:61:09:35:22:88:d7:3d:d3:12:e4:2b:47:71:ce:
e6:8f:49:15:60:97:c9:26:c4:18:a1:a0:0c:9a:08:
35:66:d7:e7:7e:a8:5c:a7:0e:fb:1b:d4:00:14:77:
d4:6e:b0:18:8d:b9:5d:87:03:d1:44:b5:db:73:7e:
26:28:4e:9f:d5:6d:d9:61:99:26:af:79:a5:d6:0e:
29:e5:18:be:b5:63:59:03:a7:7d:f2:f7:ab:58:b1:
d5:16:bb:d8:32:84:9a:7a:1b:54:69:73:3a:a9:9d:
d5:14:aa:7f:c9:15:d7:15:1c:3c:fd:65:5d:b0:9c:
88:80:d9:06:15:bc:fc:39:00:4a:1c:f3:72:62:71:
96:3e:6c:fc:00:af:ad:34:d7:f5:e9:41:64:b2:0a:
35:e1:28:43:26:48:8a:e9:20:71:c1:b3:0f:a4:6f:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0E:BB:FF:84:C5:4A:DE:41:F3:BA:1D:43:AC:2D:09:D9:57:F0:5B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_w67_4TFSt5B87odQ6wtCdlX8Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.131.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9c:0a:d3:20:43:62:04:ec:92:61:51:08:50:b1:f3:1d:6a:
45:67:db:cc:b8:7b:a9:b3:d1:d5:3d:16:e3:86:ef:7d:2a:1c:
10:0f:42:a2:75:ad:d4:ff:d7:e7:65:19:9f:62:f8:1b:21:ab:
c8:a8:69:72:bd:cf:1b:14:32:b9:6a:c1:23:54:9d:b1:a6:3d:
d3:ab:a7:09:89:fc:09:39:eb:b4:1e:55:cf:77:a3:3d:95:29:
29:fc:0d:68:70:8f:63:ce:5e:f1:f0:4c:68:99:e3:2a:df:91:
d0:a9:c9:d0:dc:bf:fc:2a:a0:12:4a:7a:b5:cb:17:35:f8:6f:
7d:dc:4b:c3:e9:4c:8a:e2:b9:fa:2c:58:e9:d8:74:0c:b3:a9:
d7:47:67:4f:7d:a0:fc:bc:3d:e9:9a:95:7c:47:53:96:2a:88:
99:aa:a1:e5:5f:60:cb:68:d7:d5:ac:93:3a:e5:23:96:83:59:
c5:c3:2b:64:1b:99:a7:f4:42:5b:ec:0d:6d:5f:4b:56:bd:6d:
41:ba:09:60:a6:03:74:8b:ca:93:86:3e:3a:ef:a6:04:e8:f5:
d7:40:49:57:4d:64:5a:21:5d:b2:2f:25:bb:9f:3c:10:14:27:
de:05:b9:e3:1f:28:e2:c3:be:1a:55:2c:f8:64:8b:a0:6f:65:
98:30:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:41 2025 by rpki-client