Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa
File: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (raw, json)
Hash identifier: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=
Subject key identifier: 74:CB:79:B5:A3:44:28:BD:8B:56:D8:45:B4:97:D9:D4:CC:F4:4E:88
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 019424448130A1B0EC982271396C993E7994
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43061
IP address blocks: 77.94.128.0/19 maxlen: 19
2a02:d90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:81:30:a1:b0:ec:98:22:71:39:6c:99:3e:79:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74cb79b5a34428bd8b56d845b497d9d4ccf44e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:67:3d:52:1e:ff:82:80:dd:d2:3a:55:d4:
43:3d:d5:6f:1a:92:3d:e7:32:4c:7e:da:1f:7f:c3:
76:83:e6:f3:8e:ce:32:58:79:5d:69:a4:8a:09:12:
0c:df:8d:65:7a:8c:5e:0b:b4:34:d9:22:b4:1d:8e:
08:3e:b7:5d:99:b7:6d:80:0f:41:b9:1a:86:0d:7f:
27:67:89:eb:87:69:ef:e8:00:fb:ae:c7:b0:33:fd:
a1:2f:20:0e:75:5b:c9:93:09:45:5c:83:3c:d1:8e:
c5:3d:47:db:58:65:8b:57:d0:b8:a7:93:20:4d:d2:
1e:1a:be:88:40:c2:2c:59:4c:36:e5:f3:eb:38:ac:
93:f8:66:4e:11:5d:f1:dd:98:9f:98:7b:00:8b:6e:
53:69:0c:a2:96:2a:a4:80:bd:f4:ea:82:57:41:5b:
e1:5c:e8:3b:05:49:b2:a8:6d:65:99:94:ec:e1:bb:
95:e1:b0:8b:05:8e:a7:32:50:b6:38:c8:2c:05:bf:
de:a4:fc:b5:3c:fb:ba:e7:b6:48:92:2f:1b:f6:9c:
e1:51:26:67:d9:7e:ca:b6:9e:8a:2f:85:63:70:12:
61:f4:99:6a:e5:16:be:c3:25:ee:72:24:dd:82:c5:
95:b5:e5:d5:79:91:2e:22:a0:16:62:c5:5a:bd:8a:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CB:79:B5:A3:44:28:BD:8B:56:D8:45:B4:97:D9:D4:CC:F4:4E:88
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.128.0/19
IPv6:
2a02:d90::/32
Signature Algorithm: sha256WithRSAEncryption
ac:5d:01:5b:f7:03:dc:0b:04:e7:dc:6d:33:e9:48:3d:2c:3f:
36:00:1b:6d:60:ad:69:3d:48:21:df:1a:af:21:8e:c4:dd:11:
e5:ec:a2:24:39:a2:35:2a:52:9a:65:a1:81:46:04:f6:c6:f4:
5c:92:8a:53:f9:77:f2:44:47:23:6d:c3:36:ee:9f:a5:b6:ff:
93:2a:b3:74:a3:fe:95:21:ac:62:fa:f2:f8:80:03:81:a3:bc:
dd:43:f6:78:31:66:ee:05:fd:b2:49:91:17:2b:5b:6b:81:a2:
a1:a4:66:ba:87:61:d2:31:9c:5c:d7:23:0d:a3:fe:ee:d4:a5:
0a:0e:0d:b0:dd:63:4a:fa:9c:11:12:71:af:74:86:4b:8d:e4:
b4:fa:f0:6c:e7:c0:41:7b:d1:6a:f8:57:15:cc:5b:02:a1:3d:
aa:62:cc:02:b2:05:7c:51:eb:16:87:0b:5b:ff:88:4e:0b:94:
8c:3e:f4:af:77:72:4f:d0:80:af:ab:52:39:d3:d8:03:49:49:
d3:5c:0c:10:70:e6:b4:ec:f9:c2:2e:dd:a3:d4:96:10:b7:ac:
39:9b:2b:27:13:88:e8:f4:c2:3a:d8:58:ab:47:f3:ff:2d:f1:
20:fe:3f:8b:7d:0f:6c:50:61:86:10:e9:08:e8:54:13:f7:00:
f8:81:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:44:08 2025 by rpki-client