Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/_VNZcr3EYGlXqjzpoEk_KD5xeQo.roa
File: _VNZcr3EYGlXqjzpoEk_KD5xeQo.roa (raw, json)
Hash identifier: q7OjuouQNM7VgrvgHXW4IBw772Y+anjbTLeMEEPFDVg=
Subject key identifier: FD:53:59:72:BD:C4:60:69:57:AA:3C:E9:A0:49:3F:28:3E:71:79:0A
Certificate issuer: /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial: 0194221F54075EC2F66DE8CD272E272C72D8
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/_VNZcr3EYGlXqjzpoEk_KD5xeQo.roa
Signing time: Wed 01 Jan 2025 13:47:45 +0000
ROA not before: Wed 01 Jan 2025 13:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210115
IP address blocks: 77.87.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:54:07:5e:c2:f6:6d:e8:cd:27:2e:27:2c:72:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
Validity
Not Before: Jan 1 13:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd535972bdc4606957aa3ce9a0493f283e71790a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:c0:06:14:d9:9c:59:d8:c3:df:d6:6e:73:
b3:79:66:81:73:41:e8:92:d7:9f:79:5b:f2:12:9b:
82:a8:2d:8c:0d:30:04:b0:b6:91:12:18:34:15:28:
f8:2a:c8:c8:f6:39:00:1a:72:1c:8d:1e:ba:3c:8a:
d2:f4:20:61:31:95:68:d1:30:e3:77:04:bc:17:88:
ee:51:c9:f9:bd:40:a7:60:da:05:40:7a:7e:cb:be:
47:88:4c:a9:af:4c:78:b7:8e:19:a3:6c:fc:ab:69:
9f:d9:20:93:e3:81:d0:b7:3c:47:3d:d5:70:e6:c3:
19:cd:13:2d:7b:a2:a6:bc:9b:b7:14:74:10:39:93:
44:7d:02:77:ae:67:6b:d2:fc:39:00:95:99:36:83:
85:b8:7b:44:dd:ba:e9:47:9d:59:aa:68:32:fc:9d:
4d:99:a7:d5:4f:33:7f:b0:40:55:08:c0:03:97:6d:
2c:ae:b5:56:fd:9b:52:81:ab:00:18:d3:d4:bd:ea:
88:22:b3:26:32:9b:f1:d4:0b:e5:25:f2:1d:31:0f:
83:af:35:04:af:86:15:e5:01:d9:c8:7b:c9:8a:10:
d1:4e:7b:69:f1:e3:de:ed:dc:5f:47:96:e3:e4:92:
a9:0a:35:83:f0:d4:a6:89:50:0c:bc:c3:97:93:0c:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:59:72:BD:C4:60:69:57:AA:3C:E9:A0:49:3F:28:3E:71:79:0A
X509v3 Authority Key Identifier:
keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/_VNZcr3EYGlXqjzpoEk_KD5xeQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.32.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:68:71:6f:0e:84:61:05:6f:94:d4:f8:c8:30:d2:2f:0a:8d:
dc:35:e2:86:9d:ae:37:41:a7:b6:23:01:4c:64:f8:6a:72:8b:
6e:59:f6:d3:c5:a3:d7:1e:b3:c5:08:8d:8b:ab:00:d8:97:c9:
53:b6:25:ee:31:17:2c:e4:57:fd:19:dd:f5:3c:39:37:a8:9c:
79:da:3c:0a:24:b0:bc:c8:33:c2:7e:6a:74:87:d1:cd:67:e2:
13:07:a9:9a:f5:bd:34:4e:80:da:b5:b0:15:ca:1d:64:4d:a9:
0e:30:c3:ef:ca:73:cc:7b:47:25:a5:5f:84:ef:a9:65:9b:67:
96:fa:8a:b6:fa:97:e9:d6:86:ae:df:11:31:38:0f:75:d9:cf:
1a:61:7e:f6:5e:86:94:3b:df:7b:4e:49:2d:00:58:75:95:17:
76:61:3c:6a:90:7e:a9:eb:83:2b:84:d5:9f:f0:a9:b3:7e:f1:
a7:70:7a:79:81:0d:bc:42:68:e6:72:5d:38:f4:9b:61:a9:d3:
69:69:ad:77:9d:b4:e6:e3:bd:fb:16:df:42:aa:b9:97:aa:1c:
1f:c0:8d:3a:cc:0f:bf:51:ca:4a:f2:fa:f0:18:9b:87:14:51:
48:c7:11:83:6e:50:33:2e:75:8e:62:2c:27:4e:2c:20:0e:37:
cc:11:cc:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH1QHXsL2bejNJy4nLHLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2FmOGI3OTBhYzA5MjNiMjQzMDdlZTAwOGYyNjFkMTBk
OTU2MGIwHhcNMjUwMTAxMTM0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDUzNTk3MmJkYzQ2MDY5NTdhYTNjZTlhMDQ5M2YyODNlNzE3OTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZnABhTZnFnYw9/WbnOzeWaBc0Ho
ktefeVvyEpuCqC2MDTAEsLaREhg0FSj4KsjI9jkAGnIcjR66PIrS9CBhMZVo0TDj
dwS8F4juUcn5vUCnYNoFQHp+y75HiEypr0x4t44Zo2z8q2mf2SCT44HQtzxHPdVw
5sMZzRMte6KmvJu3FHQQOZNEfQJ3rmdr0vw5AJWZNoOFuHtE3brpR51Zqmgy/J1N
mafVTzN/sEBVCMADl20srrVW/ZtSgasAGNPUveqIIrMmMpvx1AvlJfIdMQ+DrzUE
r4YV5QHZyHvJihDRTntp8ePe7dxfR5bj5JKpCjWD8NSmiVAMvMOXkwzqjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1TWXK9xGBpV6o86aBJPyg+cXkKMB8GA1UdIwQY
MBaAFHE6+LeQrAkjskMH7gCPJh0Q2VYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2Mt
NDc0MTQ3NjZiNmJhLzEvX1ZOWmNyM0VZR2xYcWp6cG9Fa19LRDV4ZVFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2MtNDc0MTQ3NjZiNmJh
LzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTVcgMA0G
CSqGSIb3DQEBCwUAA4IBAQCgaHFvDoRhBW+U1PjIMNIvCo3cNeKGna43Qae2IwFM
ZPhqcotuWfbTxaPXHrPFCI2LqwDYl8lTtiXuMRcs5Ff9Gd31PDk3qJx52jwKJLC8
yDPCfmp0h9HNZ+ITB6ma9b00ToDatbAVyh1kTakOMMPvynPMe0clpV+E76llm2eW
+oq2+pfp1oau3xExOA912c8aYX72XoaUO997TkktAFh1lRd2YTxqkH6p64MrhNWf
8KmzfvGncHp5gQ28Qmjmcl049JthqdNpaa13nbTm4737Ft9CqrmXqhwfwI06zA+/
UcpK8vrwGJuHFFFIxxGDblAzLnWOYiwnTiwgDjfMEcz9
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:49:07 2025 by rpki-client