Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/iDcx17jqSt5evXMH3ZR7hspxCwo.roa
File: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (raw, json)
Hash identifier: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=
Subject key identifier: 88:37:31:D7:B8:EA:4A:DE:5E:BD:73:07:DD:94:7B:86:CA:71:0B:0A
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 019425FD4566F5358B6BAE3D4D8801385463
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/iDcx17jqSt5evXMH3ZR7hspxCwo.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 80.77.176.0/20 maxlen: 24
185.125.152.0/22 maxlen: 24
2a06:b880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:45:66:f5:35:8b:6b:ae:3d:4d:88:01:38:54:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=883731d7b8ea4ade5ebd7307dd947b86ca710b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:b8:40:3e:2f:92:36:fa:30:62:f4:30:77:
ca:c9:51:54:11:47:d4:19:a8:90:0e:a2:80:49:7f:
44:e6:cf:3e:47:2e:01:cc:20:2f:00:4b:90:89:18:
08:2e:a5:8f:8f:93:d8:ef:18:dd:cf:27:64:c9:b6:
77:0a:ee:de:34:d2:b0:85:6c:ca:a7:dd:af:52:33:
6f:bd:c8:81:dc:0d:48:60:54:f8:9e:f1:ab:38:03:
88:e6:ef:bd:c0:fd:f9:d5:39:f4:3e:83:f6:7f:e5:
ee:42:31:57:24:13:d4:b5:10:d2:4d:7c:26:2c:41:
4b:5e:39:a8:63:df:12:35:28:ae:84:46:eb:74:b8:
3a:f6:42:68:18:b4:46:45:9f:3e:48:15:dd:45:f3:
02:ba:4c:af:6a:38:8b:29:06:f3:d1:f2:36:60:87:
8d:44:3f:0f:b2:05:06:6d:ab:6a:4e:cc:92:02:fb:
9b:5e:72:f1:38:c8:2b:07:1a:a1:3b:83:49:da:91:
c6:30:09:fc:91:ff:0a:3f:dc:ac:03:d3:5e:4a:66:
63:d0:04:71:f7:c5:7f:37:96:7b:64:aa:0f:60:02:
ea:29:de:d5:24:69:7c:c3:76:9a:9b:3d:31:a9:f0:
f0:6e:c8:00:b4:45:6b:a0:ea:c3:f1:d8:55:ed:80:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:37:31:D7:B8:EA:4A:DE:5E:BD:73:07:DD:94:7B:86:CA:71:0B:0A
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/iDcx17jqSt5evXMH3ZR7hspxCwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.176.0/20
185.125.152.0/22
IPv6:
2a06:b880::/29
Signature Algorithm: sha256WithRSAEncryption
7f:9e:f0:ab:e3:9c:f8:c4:68:b1:b6:70:57:fd:af:b4:de:42:
ba:f4:68:e6:ce:56:e6:4b:66:d0:29:50:58:ec:44:55:34:ea:
c2:96:ce:3f:d5:5f:fb:fc:7c:fb:91:ff:b4:c0:17:f4:8f:a3:
38:d3:80:e4:92:e0:d2:4b:35:e6:78:f4:25:d6:68:1a:95:35:
6f:db:93:16:18:08:db:da:9e:08:9b:14:ce:d3:a8:93:39:02:
d2:6d:d8:c5:45:9e:e6:16:76:29:48:68:47:83:cd:7e:70:19:
a2:0c:ca:62:4c:f8:58:76:5e:10:17:ae:e8:09:2a:f6:2c:a7:
c0:44:31:6d:f6:96:5d:6f:83:b5:47:9e:57:7b:33:41:bc:6c:
6b:60:5b:ed:d4:d0:36:09:62:bf:3b:0a:1c:7d:05:97:82:44:
a0:5d:f4:93:15:02:8b:ff:a6:21:71:df:fd:cd:4d:75:a8:2c:
9a:b7:01:9f:dd:7e:4e:df:cc:5f:ee:07:c4:81:4f:bc:33:50:
9d:10:bf:e1:f8:bd:33:6b:ac:93:13:e1:f7:f5:8a:8f:f1:5d:
cd:a9:30:d1:5a:c7:a1:ad:86:16:87:51:62:5f:ce:ba:34:47:
5b:51:7d:2d:50:34:3c:a0:e3:67:dd:69:f0:7a:e0:c1:35:2d:
8a:51:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:25:01 2025 by rpki-client