Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa
File: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (raw, json)
Hash identifier: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=
Subject key identifier: 5B:77:06:8E:3E:66:3F:65:70:60:0A:84:30:05:17:60:82:D0:2D:24
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019427478E7F5EF535E9A18EF89E5BAAA955
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49711
IP address blocks: 91.215.176.0/22 maxlen: 24
91.220.250.0/24 maxlen: 24
176.118.152.0/21 maxlen: 21
2001:67c:57c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8e:7f:5e:f5:35:e9:a1:8e:f8:9e:5b:aa:a9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b77068e3e663f6570600a843005176082d02d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:dc:b4:89:a0:bf:b6:78:63:b0:7a:96:8f:
ff:21:1a:13:f0:b8:63:7e:09:20:27:5b:ab:b9:ed:
50:31:ca:1d:18:2b:c7:1d:9f:86:2f:13:fd:a6:10:
18:2f:9f:b0:3d:ac:72:f8:d2:e3:a2:a2:e9:91:02:
52:25:94:3c:b8:a8:7e:6c:a5:11:a5:f6:8b:4e:62:
ab:75:b0:44:a2:64:5d:1b:69:1b:6b:87:01:cb:c0:
0a:5e:ae:d4:6d:07:e9:82:6e:60:30:29:bf:9b:08:
8c:49:9b:cb:9f:00:2c:d1:50:d4:e7:62:61:43:65:
40:a8:a0:61:71:58:5d:8d:cf:c0:ef:9b:b2:36:1f:
65:18:7a:6d:95:a9:34:18:5e:1a:a6:f7:7e:d6:75:
25:a0:e5:40:73:c2:ee:6c:db:79:f1:40:7f:f6:1e:
cc:58:a1:21:f6:8b:93:77:8f:f8:27:7c:0d:fe:9d:
26:73:c2:dc:31:d3:12:30:6d:cd:75:bd:b3:75:40:
12:1f:89:84:2c:cf:ef:63:cb:9c:3f:61:8f:20:fe:
34:74:0e:08:20:09:a4:6f:f8:94:a3:73:ec:e0:c5:
e8:4b:ec:c8:75:ac:74:97:15:41:bc:e9:98:d4:ca:
36:db:db:2d:9b:a9:83:5d:7a:f3:c4:fd:78:55:c5:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:77:06:8E:3E:66:3F:65:70:60:0A:84:30:05:17:60:82:D0:2D:24
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.176.0/22
91.220.250.0/24
176.118.152.0/21
IPv6:
2001:67c:57c::/48
Signature Algorithm: sha256WithRSAEncryption
aa:af:ef:82:4f:30:26:e5:49:f4:3a:80:f2:6d:a4:ae:95:62:
9b:fd:13:74:a8:d4:dc:c6:f1:c9:1b:e7:00:17:11:b6:5c:54:
89:1d:72:5e:60:16:42:5e:cd:51:c1:65:3d:6b:ce:b7:a8:b3:
f0:ba:8f:ac:be:1c:3e:0c:6e:86:a6:70:df:74:2d:4e:56:ee:
53:6d:5a:2e:e1:7e:6b:19:ad:05:2f:67:87:82:79:62:60:53:
6d:f4:9a:f9:35:61:26:da:f7:de:3a:65:9e:3a:5b:41:b1:b1:
a5:5d:75:99:d2:78:dc:4f:73:96:1a:31:a4:bb:29:fd:4b:ce:
c1:e3:92:7a:70:71:b4:37:19:58:b8:32:b0:d3:19:1e:b6:41:
7a:80:08:f9:24:ae:31:ba:b6:5b:44:c6:7e:6e:8c:3f:7b:8c:
f6:1d:4f:89:d7:c2:59:b8:91:d2:45:82:0c:11:1c:a9:f2:ba:
7c:1f:36:3f:09:06:64:79:fd:36:f4:63:bb:b7:d9:e7:dd:c4:
80:9e:22:74:41:cc:21:47:40:a8:12:46:a7:72:c2:37:40:f1:
9c:4a:69:d7:e3:42:c9:d0:34:e6:5e:92:e0:d2:5e:a3:d8:27:
c6:fc:1f:3d:d1:b2:0e:8f:41:0f:da:39:6c:27:0b:7f:6f:3b:
b3:58:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:06:57 2025 by rpki-client