Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa
File: Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa (raw, json)
Hash identifier: eMT9U1JgE9Qp7ruvpzaw9x/RY238h1ceOul754xPuwk=
Subject key identifier: 3D:DF:D3:44:CC:DE:2D:79:91:E2:5F:C8:4A:32:11:7F:79:1F:24:6F
Certificate issuer: /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial: 0194206803C001F107725473AEA997731101
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210938
IP address blocks: 185.211.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:03:c0:01:f1:07:72:54:73:ae:a9:97:73:11:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ddfd344ccde2d7991e25fc84a32117f791f246f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:fd:70:93:90:80:81:68:67:fe:29:f0:cd:
73:83:21:d1:1d:e7:bd:e3:1d:3b:2f:19:95:4a:43:
c1:d5:60:b4:4f:ae:f4:3e:b7:a7:0b:45:e4:de:fb:
9a:d0:4d:1b:b3:cf:c7:dd:c9:46:41:b8:89:62:ef:
6c:fa:64:d5:d9:a7:fb:ba:bf:2d:19:1c:c9:6c:49:
fa:3b:b8:a2:19:4f:82:df:45:37:18:e1:25:8c:0c:
54:f8:0c:af:6a:9d:03:81:f3:4a:3e:df:2e:2f:96:
79:a8:c8:0f:a9:47:f6:37:33:56:4f:a9:e5:63:f2:
ec:3a:60:f3:17:e7:6e:73:42:9f:28:3d:b7:17:6f:
63:b7:08:34:e4:22:2b:df:27:d8:73:72:f1:5f:c3:
40:1f:02:f6:8e:0c:d3:97:91:de:6a:bb:3e:33:6b:
a8:08:8d:09:d1:fe:75:80:d4:ae:ce:2c:02:ea:4b:
b9:0c:21:be:3c:9f:3f:77:cd:b7:21:d4:fc:5b:fe:
24:ac:92:e1:38:5d:bb:fa:b8:5f:1e:44:3b:a1:39:
f4:78:df:33:8f:cb:29:5b:09:4a:94:46:cf:42:6f:
fc:ae:70:e2:ba:fb:b9:dc:80:f9:f1:45:11:ff:42:
57:f5:71:d1:83:dd:9b:f1:52:f1:31:84:c3:9e:c5:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DF:D3:44:CC:DE:2D:79:91:E2:5F:C8:4A:32:11:7F:79:1F:24:6F
X509v3 Authority Key Identifier:
keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:86:ca:46:67:80:83:42:5a:7b:41:31:59:4d:36:ae:5d:3f:
f4:1c:c2:4e:de:5e:39:a7:30:12:1d:5e:71:6a:d9:5d:e0:4a:
4c:8f:81:ca:75:f3:34:a2:9e:48:46:3c:3d:2d:1f:e3:94:45:
85:4f:ce:1e:c2:27:27:d0:d4:78:18:ab:2d:94:85:10:13:f3:
f5:00:a2:27:03:5f:b6:ef:f2:0d:05:6a:24:65:27:e8:02:82:
6b:67:66:19:08:d4:ca:c7:45:66:40:86:ec:4e:7a:76:67:92:
d1:fd:66:36:86:b3:a3:a1:54:04:34:68:fa:0a:78:38:46:4b:
56:78:c4:84:85:7a:9d:85:73:10:52:bd:6a:03:63:32:cc:46:
1c:92:52:6d:af:d1:bf:ff:e4:0a:80:b9:9e:19:d8:31:5c:5a:
ac:51:c3:8c:6f:0b:94:19:c2:1e:1e:1a:c1:b2:a9:97:df:24:
80:8c:b6:32:7b:64:54:cf:02:9e:34:00:d1:2b:45:78:f0:ed:
a7:ca:52:8d:8e:46:ae:85:cc:fe:5f:6e:6f:8e:10:96:0c:78:
f2:c5:1b:61:b3:20:34:2e:22:9b:e0:8a:48:68:10:3c:4a:49:
ac:83:2e:18:19:5a:74:d8:88:f7:6c:b4:86:bb:77:50:87:cf:
cd:d0:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:34 2025 by rpki-client