Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mmDaz39uShChztVWNm_0mb2ZO_c.roa
File: mmDaz39uShChztVWNm_0mb2ZO_c.roa (raw, json)
Hash identifier: FEXvLuD72Y3B+YFI7hw1P+KiHGjFHtxB4HjxkiMlHrQ=
Subject key identifier: 9A:60:DA:CF:7F:6E:4A:10:A1:CE:D5:56:36:6F:F4:99:BD:99:3B:F7
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484F6833453088DF39B2619936FAA7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mmDaz39uShChztVWNm_0mb2ZO_c.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265561
IP address blocks: 178.19.32.0/24 maxlen: 24
201.77.59.0/24 maxlen: 24
201.77.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4f:68:33:45:30:88:df:39:b2:61:99:36:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a60dacf7f6e4a10a1ced556366ff499bd993bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:4c:c6:ef:e4:4b:d9:88:81:c0:ef:e4:90:
93:3a:55:6f:53:c4:a9:c4:05:32:17:b5:a8:59:df:
4f:eb:54:3a:a6:bc:20:f2:03:6f:82:22:73:73:26:
13:6c:98:65:b2:93:0a:ca:3e:a7:06:d1:ca:3f:b1:
08:c3:e5:82:a0:54:4c:63:4f:4e:e0:b1:8f:ba:46:
36:89:93:93:fe:69:e1:b0:12:22:ea:64:3b:7a:28:
ff:43:17:15:f5:15:d1:20:25:42:9e:53:9f:55:b4:
04:62:69:89:7b:cc:07:1d:dc:04:ca:9b:f5:a4:77:
fd:47:d3:5a:a3:d9:c0:76:14:a4:11:2f:00:3d:36:
1a:46:d3:6d:db:bc:3e:14:0b:6d:90:3b:e5:af:12:
a9:15:16:c5:9c:bb:48:b8:64:0c:b6:c2:cb:27:31:
90:2c:c6:23:c7:d1:1b:c7:66:4c:82:05:45:db:9f:
3e:61:7a:72:29:d9:cb:96:ea:dc:54:50:19:13:a9:
6d:94:77:c6:58:f7:ac:98:9b:e8:23:08:33:cb:eb:
40:21:61:74:e3:f4:aa:a9:02:45:1b:0a:48:60:95:
6f:5d:33:a6:29:e7:88:13:7c:be:5a:8a:2a:12:ef:
7f:c0:e5:87:18:6e:d3:a3:72:73:1a:3e:b0:20:ea:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:60:DA:CF:7F:6E:4A:10:A1:CE:D5:56:36:6F:F4:99:BD:99:3B:F7
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mmDaz39uShChztVWNm_0mb2ZO_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.32.0/24
201.77.59.0-201.77.60.255
Signature Algorithm: sha256WithRSAEncryption
77:49:d4:68:e3:14:f3:89:8a:67:cb:b3:12:02:92:95:1d:43:
9b:64:3a:ac:5f:c3:67:bc:6d:f5:14:cf:af:a7:68:d1:c2:35:
e5:34:fa:ce:84:bb:df:98:24:de:a8:0c:97:85:cf:0d:ae:fd:
dc:56:f7:e9:8d:f7:ef:73:b4:33:f1:fc:ae:88:df:a8:c8:7e:
e5:d0:f8:73:ff:81:9e:a9:bb:db:0f:f5:1d:89:a8:dd:92:33:
16:a0:d3:bb:75:fa:25:5e:01:5a:19:d9:50:9e:2f:be:96:e1:
22:95:62:2c:2e:82:1e:e5:34:0e:63:37:ef:2d:24:d1:b5:56:
ae:31:21:ff:cc:1a:5d:9c:ae:8e:ad:0f:d8:c9:06:10:7f:98:
3b:31:fc:a9:77:85:b0:0c:82:40:69:fb:cc:0a:b8:53:42:01:
10:f1:9b:61:fc:9f:90:d5:79:aa:98:9c:e5:8a:1c:87:7f:28:
e3:93:47:5d:e6:96:17:46:45:f2:83:df:2c:3d:11:20:27:a6:
41:c2:8f:20:72:09:11:62:89:bc:03:0b:af:b4:ee:af:df:b9:
a1:8a:46:52:9e:da:39:f4:85:b6:b0:f7:2d:27:2c:da:8b:34:
f3:99:fa:9b:96:20:8d:bd:e5:f1:4c:26:ba:41:8e:71:42:51:
06:04:8c:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:35 2025 by rpki-client