Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/XBS2bilHl7hAUnhaEuY8p5cjE4c.roa
File: XBS2bilHl7hAUnhaEuY8p5cjE4c.roa (raw, json)
Hash identifier: GRT8VC70aJ9wVqj8F9C5XozSwpU4dQPqDcpv9YGwfrE=
Subject key identifier: 5C:14:B6:6E:29:47:97:B8:40:52:78:5A:12:E6:3C:A7:97:23:13:87
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 0194258F77D56FF8F2DEA5B5239A6D2ABA81
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/XBS2bilHl7hAUnhaEuY8p5cjE4c.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43627
IP address blocks: 77.90.85.0/24 maxlen: 24
77.90.86.0/23 maxlen: 24
77.90.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:77:d5:6f:f8:f2:de:a5:b5:23:9a:6d:2a:ba:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c14b66e294797b84052785a12e63ca797231387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:7b:17:0e:3a:26:b7:f5:09:2c:19:9f:c1:
06:b0:91:46:42:13:dd:70:12:36:97:14:4e:5d:de:
ec:9e:43:eb:9c:34:bb:b9:45:1e:ab:e5:0e:82:61:
90:c8:85:c5:5d:87:d8:b1:c1:b0:b3:d3:4c:1e:b6:
c2:92:47:10:6c:19:ab:4f:71:76:c2:65:f5:7b:b0:
4f:af:5b:1d:1a:03:33:3b:5e:70:18:be:77:e5:73:
18:f1:30:65:d0:33:17:37:9c:8d:5e:38:f3:06:2c:
80:d7:10:25:75:6b:37:b4:08:c9:58:cc:3b:63:8d:
3e:a7:65:47:8a:c0:79:dd:cd:39:1d:f1:c0:0a:38:
b3:08:d3:14:95:5c:02:66:29:06:b9:a2:e3:ae:07:
2f:75:d6:39:f5:80:fe:e9:03:44:95:9b:c1:3c:db:
f1:a4:5a:d9:c2:5c:fe:9c:6a:9e:1e:52:84:a3:96:
9c:94:17:1b:81:66:9c:6f:d2:42:2c:68:30:3f:40:
d7:11:3c:11:3e:99:f9:3a:12:35:93:18:47:5a:2f:
b9:69:e3:05:9a:bc:0e:a5:93:f1:a3:3a:a5:46:3a:
c6:8a:d3:9c:82:20:98:21:5e:28:77:f3:01:bd:8c:
0d:b9:7b:d1:c5:41:29:b1:80:aa:c8:52:71:47:20:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:B6:6E:29:47:97:B8:40:52:78:5A:12:E6:3C:A7:97:23:13:87
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/XBS2bilHl7hAUnhaEuY8p5cjE4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.85.0-77.90.91.255
Signature Algorithm: sha256WithRSAEncryption
88:9b:9b:92:92:c1:21:b4:33:fd:4c:04:af:d9:84:2f:cd:1a:
e4:18:15:16:ee:67:29:44:9d:77:20:29:6f:c4:95:a7:3b:f2:
3d:d0:e3:c9:05:e1:9a:3f:79:52:ae:ef:74:c7:72:08:13:2c:
e2:f6:01:d0:f1:b9:62:06:80:aa:97:a8:b5:71:18:e0:88:cd:
ce:5f:3f:ad:0d:fb:a6:1b:b7:97:3a:b1:77:8a:ad:47:9e:14:
a9:04:50:f9:8c:36:4e:dc:8b:7b:ae:97:57:e2:1b:6b:f2:8d:
9f:71:9b:f7:a7:57:5a:3e:f8:f3:2f:7d:6f:67:c3:c8:f1:fa:
ff:db:56:d2:2d:d3:84:7a:8e:ad:a3:ae:65:fe:aa:88:b8:20:
8a:17:82:cf:de:32:4c:09:03:44:37:4b:8a:31:0f:ec:9e:35:
15:d2:f8:d5:f2:60:d3:0b:38:d4:3d:24:ab:94:d9:89:08:39:
50:26:df:02:95:4b:c0:2c:3e:d9:3b:e4:79:cb:66:0e:8d:a6:
ca:5a:5c:65:9d:98:74:ea:e8:26:51:50:f4:bb:7c:cc:91:cf:
8c:c2:81:97:32:b1:7d:5c:fe:2d:75:50:66:88:cb:c5:6a:5f:
ed:19:a4:c0:c0:d9:ed:ff:28:76:b2:be:7e:3c:88:9b:0a:31:
e2:19:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 16:08:19 2025 by rpki-client