Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/3OrpPYLoIXvd5Z078UIjv-o45HE.roa
File: 3OrpPYLoIXvd5Z078UIjv-o45HE.roa (raw, json)
Hash identifier: 7OkFl+S/WJrI7zN/5kL1WgsZR4fsHSw0RK0hWnDrWeA=
Subject key identifier: DC:EA:E9:3D:82:E8:21:7B:DD:E5:9D:3B:F1:42:23:BF:EA:38:E4:71
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 01958923584823C365B900F590D605617A05
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/3OrpPYLoIXvd5Z078UIjv-o45HE.roa
Signing time: Wed 12 Mar 2025 06:55:49 +0000
ROA not before: Wed 12 Mar 2025 06:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 77.223.128.0/20 maxlen: 20
77.223.128.0/24 maxlen: 24
77.223.129.0/24 maxlen: 24
77.223.130.0/24 maxlen: 24
77.223.131.0/24 maxlen: 24
77.223.132.0/24 maxlen: 24
77.223.133.0/24 maxlen: 24
77.223.134.0/24 maxlen: 24
77.223.135.0/24 maxlen: 24
77.223.136.0/24 maxlen: 24
77.223.137.0/24 maxlen: 24
77.223.138.0/24 maxlen: 24
77.223.139.0/24 maxlen: 24
77.223.140.0/24 maxlen: 24
77.223.141.0/24 maxlen: 24
77.223.142.0/24 maxlen: 24
77.223.143.0/24 maxlen: 24
77.223.146.0/23 maxlen: 23
77.223.146.0/24 maxlen: 24
77.223.147.0/24 maxlen: 24
77.223.148.0/24 maxlen: 24
77.223.149.0/24 maxlen: 24
77.223.150.0/24 maxlen: 24
77.223.151.0/24 maxlen: 24
77.223.152.0/24 maxlen: 24
77.223.153.0/24 maxlen: 24
77.223.154.0/24 maxlen: 24
77.223.155.0/24 maxlen: 24
77.223.156.0/24 maxlen: 24
77.223.157.0/24 maxlen: 24
77.223.158.0/24 maxlen: 24
77.223.159.0/24 maxlen: 24
78.40.224.0/21 maxlen: 21
78.40.224.0/24 maxlen: 24
78.40.225.0/24 maxlen: 24
78.40.226.0/24 maxlen: 24
78.40.227.0/24 maxlen: 24
78.40.228.0/24 maxlen: 24
78.40.229.0/24 maxlen: 24
78.40.230.0/24 maxlen: 24
78.40.231.0/24 maxlen: 24
91.191.160.0/21 maxlen: 21
91.191.160.0/24 maxlen: 24
91.191.161.0/24 maxlen: 24
91.191.162.0/24 maxlen: 24
91.191.163.0/24 maxlen: 24
91.191.164.0/24 maxlen: 24
91.191.165.0/24 maxlen: 24
91.191.166.0/24 maxlen: 24
91.191.167.0/24 maxlen: 24
91.191.168.0/21 maxlen: 21
91.191.168.0/24 maxlen: 24
91.191.169.0/24 maxlen: 24
91.191.170.0/24 maxlen: 24
91.191.171.0/24 maxlen: 24
91.191.172.0/24 maxlen: 24
91.191.173.0/24 maxlen: 24
91.191.174.0/24 maxlen: 24
91.191.175.0/24 maxlen: 24
93.187.200.0/21 maxlen: 21
93.187.200.0/24 maxlen: 24
93.187.201.0/24 maxlen: 24
93.187.202.0/24 maxlen: 24
93.187.203.0/24 maxlen: 24
93.187.204.0/24 maxlen: 24
93.187.205.0/24 maxlen: 24
93.187.206.0/24 maxlen: 24
93.187.207.0/24 maxlen: 24
185.80.72.0/24 maxlen: 24
195.244.32.0/19 maxlen: 19
195.244.32.0/24 maxlen: 24
195.244.33.0/24 maxlen: 24
195.244.34.0/24 maxlen: 24
195.244.35.0/24 maxlen: 24
195.244.36.0/24 maxlen: 24
195.244.37.0/24 maxlen: 24
195.244.38.0/24 maxlen: 24
195.244.39.0/24 maxlen: 24
195.244.40.0/24 maxlen: 24
195.244.41.0/24 maxlen: 24
195.244.42.0/24 maxlen: 24
195.244.43.0/24 maxlen: 24
195.244.44.0/24 maxlen: 24
195.244.45.0/24 maxlen: 24
195.244.46.0/24 maxlen: 24
195.244.47.0/24 maxlen: 24
195.244.48.0/24 maxlen: 24
195.244.49.0/24 maxlen: 24
195.244.50.0/24 maxlen: 24
195.244.51.0/24 maxlen: 24
195.244.52.0/24 maxlen: 24
195.244.53.0/24 maxlen: 24
195.244.54.0/24 maxlen: 24
195.244.55.0/24 maxlen: 24
195.244.56.0/24 maxlen: 24
195.244.57.0/24 maxlen: 24
195.244.58.0/24 maxlen: 24
195.244.59.0/24 maxlen: 24
195.244.60.0/24 maxlen: 24
195.244.61.0/24 maxlen: 24
195.244.62.0/24 maxlen: 24
195.244.63.0/24 maxlen: 24
2a01:aac0::/32 maxlen: 32
2a0a:be80::/29 maxlen: 29
2a0a:be80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:23:58:48:23:c3:65:b9:00:f5:90:d6:05:61:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Mar 12 06:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dceae93d82e8217bdde59d3bf14223bfea38e471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:21:41:36:b5:3b:14:9f:f5:70:8b:e8:a9:
fb:43:03:07:e0:56:b9:9b:f5:47:41:03:94:2a:1d:
f3:6d:9f:fb:fa:a4:f0:f7:96:0d:ff:c4:de:2d:73:
5f:98:b4:ee:02:22:64:bd:7c:69:7f:af:29:c7:9e:
01:79:7e:31:e1:ea:8a:96:d9:40:cc:ac:b1:f6:a6:
b2:d2:18:8a:07:27:37:74:51:57:13:b6:27:ab:fc:
84:6c:33:67:94:14:76:ac:0a:52:8b:b5:2c:c0:b6:
fa:71:0f:8c:44:1a:ea:19:45:b9:60:30:1e:a2:29:
da:c5:44:17:24:39:67:7c:e0:06:95:84:21:68:7f:
c3:4f:c8:62:48:a2:3a:d4:8e:da:9b:06:58:27:2b:
71:89:e6:cc:81:fd:11:23:66:d2:ad:66:49:ca:98:
6d:82:f7:07:aa:df:49:6b:52:19:61:7b:ff:f8:fc:
b6:d7:80:d3:dc:d1:09:0c:0a:51:70:95:87:f9:71:
49:a7:62:d2:df:bd:53:4c:c7:90:97:2a:cd:d8:7b:
05:fd:af:fc:cb:72:f1:96:f1:17:a1:77:33:07:7f:
90:16:77:09:06:d2:46:d5:9d:24:eb:f0:8d:b2:8c:
6f:92:92:2c:d4:01:50:cb:d6:49:25:27:68:95:54:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:E9:3D:82:E8:21:7B:DD:E5:9D:3B:F1:42:23:BF:EA:38:E4:71
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/3OrpPYLoIXvd5Z078UIjv-o45HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/20
77.223.146.0-77.223.159.255
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
185.80.72.0/24
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
Signature Algorithm: sha256WithRSAEncryption
09:ef:8f:df:71:f2:ea:de:59:83:db:05:07:72:ca:89:96:d8:
ea:cc:68:c2:e8:5e:86:e5:01:40:2f:f1:b9:cb:02:a1:30:4d:
f5:8c:ad:08:1e:d5:3b:8e:2d:10:6f:10:3f:d1:ec:1c:48:31:
be:d8:84:31:d2:0a:07:f1:28:04:83:27:55:39:e4:bd:6a:c9:
84:37:4c:97:66:d1:1d:38:54:0a:9e:70:c4:02:5f:47:3f:22:
de:4c:c8:f7:8f:71:a9:39:5c:97:88:66:3a:6f:2f:5d:e3:5c:
5e:9d:8f:9f:b7:15:0e:33:1c:73:e1:5b:a4:4d:1e:be:aa:db:
78:aa:36:4b:6a:63:0b:e8:f0:7b:ad:5c:df:55:6b:2e:2e:14:
f7:71:74:ac:6f:51:98:d2:35:15:19:60:08:d0:9f:d0:48:bf:
20:9d:29:ac:cc:cd:e8:c9:66:59:43:24:22:fd:fa:7c:be:ce:
77:99:03:3c:41:71:a8:6e:7a:8c:6a:06:f8:5d:8c:70:d3:91:
f9:06:b7:6b:a6:6b:3b:27:73:43:19:da:83:f9:40:e5:19:3b:
8a:8e:0a:1a:80:c8:24:b1:57:68:3f:d1:51:c8:ec:b2:b7:8a:
46:1d:0c:a0:51:67:21:7c:e1:15:80:94:1c:5c:13:8d:fa:40:
18:2a:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:27 2025 by rpki-client