Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/EKdJIayRjGqpNjC_sXcLD4LpFxg.roa
File: EKdJIayRjGqpNjC_sXcLD4LpFxg.roa (raw, json)
Hash identifier: Q7XyDf/+ZYlwIoQHzzpWgBVzZ1z6oDECbrHcCzM9GG4=
Subject key identifier: 10:A7:49:21:AC:91:8C:6A:A9:36:30:BF:B1:77:0B:0F:82:E9:17:18
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 01946F55E1536AA6637F34662215D37520FD
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/EKdJIayRjGqpNjC_sXcLD4LpFxg.roa
Signing time: Thu 16 Jan 2025 13:38:06 +0000
ROA not before: Thu 16 Jan 2025 13:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 81.161.62.0/24 maxlen: 24
91.227.193.0/24 maxlen: 24
2a01:fd40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:55:e1:53:6a:a6:63:7f:34:66:22:15:d3:75:20:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Jan 16 13:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10a74921ac918c6aa93630bfb1770b0f82e91718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:1c:50:97:96:79:e5:9d:d1:fd:09:b1:fb:
34:f8:7a:7a:a0:61:f8:da:d9:67:52:d6:1b:70:f2:
26:f7:c3:00:dc:6b:89:31:09:dc:03:e3:c0:6b:b6:
8f:42:cc:47:b1:da:ad:bc:da:b0:ac:a0:e7:ca:19:
7c:78:3f:b2:64:a1:fb:73:60:f6:04:95:55:7c:13:
e7:0b:2d:88:93:95:ea:95:4f:47:3d:d5:45:95:7e:
12:32:db:14:70:d2:d4:61:9c:f3:aa:ca:27:49:6a:
21:fd:34:43:8a:3e:42:f8:a3:73:8d:a8:a9:04:b3:
fd:99:8a:1a:68:5c:68:08:fe:6e:b4:1b:b3:91:28:
87:fb:c9:7f:4f:2d:22:4c:4a:85:fa:f3:81:1c:f3:
ab:36:fc:11:74:4b:f7:cd:39:6d:f3:8f:ec:aa:d7:
39:d1:8f:cc:b0:c8:64:ce:00:77:8d:6b:21:72:3c:
74:94:86:40:a0:4a:f6:64:59:88:e5:00:ad:33:01:
fb:e1:b1:9c:5d:a9:41:4a:1a:42:59:c4:20:63:50:
4b:21:80:19:06:72:55:7e:97:2d:b4:be:54:e4:6d:
b2:a5:73:01:c8:2a:67:ec:29:07:60:93:17:6b:3c:
6a:cb:6d:9d:74:7b:99:c7:da:c2:81:16:f5:f1:c7:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A7:49:21:AC:91:8C:6A:A9:36:30:BF:B1:77:0B:0F:82:E9:17:18
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/EKdJIayRjGqpNjC_sXcLD4LpFxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.62.0/24
91.227.193.0/24
IPv6:
2a01:fd40::/32
Signature Algorithm: sha256WithRSAEncryption
86:2d:de:8d:27:85:b7:dc:50:04:ab:9b:f3:6f:95:b4:4d:77:
45:35:c4:38:a8:a5:22:d2:08:58:68:00:c3:00:87:e8:67:8f:
a1:95:d2:3a:5d:b9:f1:3a:fa:fc:ee:9d:00:75:e2:3a:31:a4:
05:ee:bf:e8:38:ab:0d:4f:f3:8f:f1:cf:14:9c:85:eb:8f:2a:
3c:57:ba:60:7a:25:76:ba:aa:17:04:ae:ea:c0:01:9f:81:e8:
6c:b8:77:38:d3:dd:bf:5e:c7:67:5f:3f:88:07:74:93:90:9a:
c3:d9:b6:1f:d4:eb:72:da:41:b1:b6:d2:3c:f2:83:d5:8a:56:
d1:e4:d1:1e:d4:80:0f:c7:8b:5e:fb:b1:4c:46:af:12:f6:6a:
39:a9:c2:fc:3d:d7:9c:55:03:ef:df:a1:6b:2d:8f:e4:7b:ae:
22:22:ef:68:ae:be:1a:f6:87:83:de:1e:42:12:70:77:ca:a0:
f9:e3:01:ab:a9:c9:ca:6e:cc:ed:11:46:87:f5:6d:89:f4:38:
4f:b2:b0:91:fd:65:6e:95:f5:86:28:28:45:5d:14:1a:d9:ab:
78:e7:4b:de:78:a0:55:4a:df:b1:19:56:23:a2:11:52:5a:9f:
36:2e:a0:b9:1d:70:5d:1e:a8:6f:4a:33:cf:05:99:f7:4d:1e:
09:48:38:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:40 2025 by rpki-client