Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/7Cn94brCANl81RCeGqUf6f3wZjs.roa
File: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (raw, json)
Hash identifier: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=
Subject key identifier: EC:29:FD:E1:BA:C2:00:D9:7C:D5:10:9E:1A:A5:1F:E9:FD:F0:66:3B
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 0194228D6B397FFE1DC2A45D42B9C8ED7899
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/7Cn94brCANl81RCeGqUf6f3wZjs.roa
Signing time: Wed 01 Jan 2025 15:48:00 +0000
ROA not before: Wed 01 Jan 2025 15:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 77.221.46.0/23 maxlen: 23
77.221.46.0/24 maxlen: 24
77.221.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6b:39:7f:fe:1d:c2:a4:5d:42:b9:c8:ed:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 15:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec29fde1bac200d97cd5109e1aa51fe9fdf0663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:ae:f2:3e:ae:75:93:be:64:55:cc:d0:3f:
d0:e2:e1:6b:9e:26:0c:7b:19:aa:04:41:01:2b:84:
ab:0e:a5:0c:1c:d9:4d:2c:76:5c:55:fe:4f:80:3e:
34:ea:82:52:3e:af:f1:76:86:f0:25:2a:8a:5d:5e:
05:98:fe:c0:75:28:4c:64:80:93:2d:51:cf:4e:5e:
c2:db:17:21:b0:27:8b:27:cc:0c:83:db:a6:c0:e2:
b0:37:16:97:80:11:26:ed:2f:e8:bd:a1:df:0f:c7:
b3:6c:35:8c:e2:fb:f1:4d:2b:74:6f:35:f8:c2:c1:
15:07:9a:7c:93:a7:7f:ba:01:b0:58:d7:e6:09:5b:
80:31:b5:11:bb:74:0b:7d:84:f8:80:91:1d:17:dc:
08:c8:34:ac:67:d7:a3:34:a4:08:45:d7:46:e2:cb:
71:08:02:13:2f:4a:02:92:35:c6:7f:eb:5f:10:04:
35:e1:38:9b:48:52:02:97:7a:32:c1:e3:cf:6c:f7:
1a:14:14:c7:55:18:1c:28:a6:67:91:30:1a:eb:79:
73:ac:65:01:33:2c:01:57:42:51:93:52:20:59:b1:
e5:22:87:46:e7:d2:03:b1:fa:25:1d:45:e3:a6:19:
f6:d1:fc:e2:0e:ab:c1:4f:89:c6:fe:ac:83:9e:29:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:29:FD:E1:BA:C2:00:D9:7C:D5:10:9E:1A:A5:1F:E9:FD:F0:66:3B
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/7Cn94brCANl81RCeGqUf6f3wZjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.46.0/23
Signature Algorithm: sha256WithRSAEncryption
af:1d:68:f4:bf:8a:da:1e:46:7f:ea:d1:17:40:2d:f6:e6:93:
3b:24:b5:60:80:5f:d7:f3:29:44:47:42:f1:79:9a:51:c7:30:
d6:4d:bc:9c:4f:61:28:8b:21:ae:6d:9b:1b:db:4c:97:55:d7:
0b:9f:66:a7:e1:7e:70:4a:56:30:88:4d:f3:b1:b1:96:b0:cd:
80:cb:2e:93:2c:b3:e7:01:86:41:e9:e0:b8:44:eb:29:55:6f:
51:77:e3:2b:3d:d3:80:48:b6:b8:79:fb:d1:3d:d2:4b:bf:79:
6d:9c:da:be:7d:89:75:0a:56:26:df:89:9c:dd:61:dd:cb:01:
c4:5e:3d:4c:57:5b:03:28:f5:8e:31:43:c2:0d:f6:24:2e:24:
93:8d:f1:48:6e:19:32:5d:5b:56:c8:bd:46:69:9e:2b:5f:2e:
a9:83:48:f9:e1:c3:ab:1c:8e:06:77:59:65:a0:f5:af:a6:44:
9f:7e:09:8d:80:78:8b:f6:1b:f4:cb:df:66:2b:22:32:05:57:
e9:d1:1e:99:f5:6b:03:d8:15:1e:4d:60:37:b1:7e:d7:b0:41:
de:3a:57:94:4c:fb:d2:e2:f1:eb:91:ec:94:80:13:20:13:75:
6d:d7:41:b3:50:fc:58:dd:e3:ed:b8:5a:73:3e:b1:29:a2:75:
f7:f4:80:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:42 2025 by rpki-client