Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/d-6oHxGBu3uoNsynUGQ-jykLpuY.roa
File: d-6oHxGBu3uoNsynUGQ-jykLpuY.roa (raw, json)
Hash identifier: nTvRGLOiSbzDI5kbpr4PxXlAAgieGj6+zvY9qnISFeU=
Subject key identifier: 77:EE:A8:1F:11:81:BB:7B:A8:36:CC:A7:50:64:3E:8F:29:0B:A6:E6
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 01942747DA33456A80B8F4B9D812CC78D5E6
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/d-6oHxGBu3uoNsynUGQ-jykLpuY.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208722
IP address blocks: 45.87.132.0/22 maxlen: 22
100.43.64.0/19 maxlen: 19
199.36.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:da:33:45:6a:80:b8:f4:b9:d8:12:cc:78:d5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77eea81f1181bb7ba836cca750643e8f290ba6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:5b:a6:a9:61:90:14:29:dc:36:d9:a0:04:
e6:d8:ff:40:a6:ec:22:48:56:14:89:5d:13:e1:90:
50:f0:07:f5:c7:b8:80:d8:4d:52:82:1c:71:3e:88:
67:71:b2:c3:6d:56:cb:06:53:45:c4:48:92:77:06:
1e:42:96:59:f3:fb:2f:f4:05:2b:fd:13:78:1b:37:
21:61:ba:d8:62:9b:6e:54:dc:b2:41:65:5f:b0:21:
da:0d:97:d3:3d:10:fe:c7:c5:89:3b:c6:d8:32:4f:
d7:1d:14:22:92:bc:7c:dc:16:99:a9:a6:8a:72:60:
cc:77:77:90:e9:93:4f:eb:e8:50:c9:77:80:79:75:
0c:9b:a8:cd:02:cc:43:31:67:09:d2:f0:25:e2:24:
19:4b:9a:2a:bf:de:39:3e:55:4a:5b:47:c8:73:9d:
71:e0:f6:de:6c:8b:ad:6c:b1:51:48:6d:0c:ac:f3:
87:d5:49:3f:10:63:c1:ff:f8:c2:02:45:bb:cb:29:
be:3a:de:f1:49:bd:b8:0e:af:7a:a4:32:d4:d2:1a:
a8:ba:e3:95:ea:c9:4a:2b:d0:df:ef:a0:33:41:07:
d8:54:54:5d:74:41:69:a6:ab:d0:14:22:6e:d6:9d:
95:4c:3a:4f:25:a7:6c:da:58:70:ca:ac:10:9b:f6:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:A8:1F:11:81:BB:7B:A8:36:CC:A7:50:64:3E:8F:29:0B:A6:E6
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/d-6oHxGBu3uoNsynUGQ-jykLpuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.132.0/22
100.43.64.0/19
199.36.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:a0:4f:a0:48:4a:3e:1d:1f:a3:ee:0d:16:e8:4a:70:3d:62:
ee:50:9c:1a:87:ca:22:cb:26:32:da:c6:0e:2b:fa:f3:ba:c2:
97:28:7d:ee:8b:b0:14:06:06:1f:4a:88:7d:9a:11:14:85:5d:
35:6c:ff:fa:c0:1b:06:04:96:21:1b:62:6c:44:0c:83:94:08:
df:6c:52:ae:d5:bd:95:8e:49:59:3b:f8:60:36:ec:21:6e:07:
0d:c5:a9:d1:f9:9a:6a:e6:a6:d5:5e:65:8c:e7:8e:bb:aa:14:
1a:4f:2b:df:dc:e4:1d:ff:01:37:20:df:bc:10:64:8f:c8:29:
c6:b5:a0:af:89:d5:d4:71:cf:4b:65:2f:13:0e:2d:b7:13:91:
61:f3:60:e2:29:1d:0b:12:fc:60:02:01:6c:ac:1d:23:b3:ed:
3f:8f:8b:68:7a:b6:bd:18:bd:9c:c2:de:c1:30:56:eb:24:b2:
f3:e2:e4:94:77:9a:6f:78:ee:cf:7e:90:70:4b:f2:e2:d0:5a:
7f:c5:81:3a:43:2c:19:45:7a:24:ee:2e:c0:04:8c:1d:68:0d:
c2:4c:35:12:76:63:70:58:bd:ba:5d:79:4f:d0:5e:cd:c8:a2:
72:dc:8e:89:44:2f:07:03:ed:02:bb:0e:b3:53:0e:10:bd:07:
9b:b7:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:42 2025 by rpki-client