Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/CxW9CMhkxVrayKYNgSlraHOeOQM.roa
File: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (raw, json)
Hash identifier: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=
Subject key identifier: 0B:15:BD:08:C8:64:C5:5A:DA:C8:A6:0D:81:29:6B:68:73:9E:39:03
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 01942521F072A51E65C2C443F544D8A9D391
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/CxW9CMhkxVrayKYNgSlraHOeOQM.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 185.77.116.0/24 maxlen: 24
185.77.117.0/24 maxlen: 24
185.77.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f0:72:a5:1e:65:c2:c4:43:f5:44:d8:a9:d3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b15bd08c864c55adac8a60d81296b68739e3903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:ac:c7:a7:50:e5:b3:a1:cb:c2:09:7d:63:
5c:54:84:55:16:10:b2:6b:f0:f9:98:54:60:87:8d:
15:b6:77:4e:dd:b9:0a:38:e8:0a:52:77:1f:3a:ad:
98:42:d1:87:0f:e1:09:82:0c:4b:0c:eb:c1:5c:cc:
37:f9:40:ff:9d:86:56:df:07:3a:7b:0c:fe:57:6f:
78:5b:03:b3:ca:a7:4a:f1:84:1c:7d:da:8c:08:8c:
19:02:ff:40:cf:50:7f:9b:0f:20:f4:9f:6b:5d:4b:
2c:43:a5:24:4e:db:f3:30:56:f9:c3:4d:1e:16:27:
00:a1:aa:69:21:83:37:e3:44:f4:33:08:85:0b:d7:
d4:46:c3:e0:48:46:6c:24:21:ae:fa:29:61:f1:6b:
fb:03:07:1a:cd:64:8a:b8:5b:88:17:1f:60:93:0c:
d6:27:15:34:91:16:c4:62:b5:db:1a:48:89:50:c3:
a3:40:73:bc:01:9d:6d:17:2f:e7:64:e1:77:0a:1a:
2a:f6:2a:9f:7b:d6:88:12:7b:a4:32:ce:bd:bf:28:
32:0a:e1:32:b1:25:6a:f7:b7:6c:bb:bf:98:fe:9a:
16:e2:75:1c:35:2a:ef:c1:a0:37:8b:e9:98:6a:0c:
50:fe:0b:b7:1c:11:a5:29:ce:a1:ea:c9:d0:f8:59:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:15:BD:08:C8:64:C5:5A:DA:C8:A6:0D:81:29:6B:68:73:9E:39:03
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/CxW9CMhkxVrayKYNgSlraHOeOQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.116.0-185.77.118.255
Signature Algorithm: sha256WithRSAEncryption
b3:f9:3f:7d:f3:bd:90:19:a7:f9:3d:66:12:4a:16:e0:b6:c0:
a0:01:5c:ed:4c:d4:cc:75:d6:9c:a9:5a:ea:4e:55:a8:86:00:
2e:33:02:b7:58:5b:a0:03:88:e9:c4:bc:08:37:89:a7:65:e5:
16:3e:79:bd:4c:8c:fc:86:35:59:e1:42:c6:fe:d3:43:2c:f0:
57:d6:82:bd:21:e6:56:1b:fd:cc:a6:be:dc:38:03:1a:9a:de:
87:82:7b:0a:55:a9:e8:be:99:19:4c:70:c7:83:1b:71:41:d3:
a8:74:ec:77:55:3e:97:fb:c2:ba:89:d9:ad:e3:7b:8e:a9:8c:
a5:51:a6:e3:9e:d5:15:57:e2:06:98:31:1f:5e:9c:13:b0:71:
50:4f:95:22:21:91:e6:50:72:95:8d:2c:7e:0c:34:d4:85:a2:
7d:61:a2:c4:d1:b5:55:fd:89:bd:4c:3b:25:04:6a:bb:5b:4a:
77:4b:e3:f0:49:d7:12:9f:47:4d:0a:7b:df:c2:1e:61:35:5f:
8f:e1:e3:29:fa:5f:7a:37:a5:a7:19:15:fc:11:51:17:d8:7a:
e2:d3:a7:f0:62:99:91:32:1c:d3:a5:f0:96:4a:41:67:80:42:
67:71:46:f9:87:dd:29:ff:68:ff:34:9b:0c:ff:63:13:60:eb:
77:d4:b7:e0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQlIfBypR5lwsRD9UTYqdORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh
Y2VjNmUwHhcNMjUwMTAyMDM0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjE1YmQwOGM4NjRjNTVhZGFjOGE2MGQ4MTI5NmI2ODczOWUzOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07isx6dQ5bOhy8IJfWNcVIRVFhCy
a/D5mFRgh40VtndO3bkKOOgKUncfOq2YQtGHD+EJggxLDOvBXMw3+UD/nYZW3wc6
ewz+V294WwOzyqdK8YQcfdqMCIwZAv9Az1B/mw8g9J9rXUssQ6UkTtvzMFb5w00e
FicAoappIYM340T0MwiFC9fURsPgSEZsJCGu+ilh8Wv7AwcazWSKuFuIFx9gkwzW
JxU0kRbEYrXbGkiJUMOjQHO8AZ1tFy/nZOF3Choq9iqfe9aIEnukMs69vygyCuEy
sSVq97dsu7+Y/poW4nUcNSrvwaA3i+mYagxQ/gu3HBGlKc6h6snQ+Fn1XQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAsVvQjIZMVa2simDYEpa2hznjkDMB8GA1UdIwQY
MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt
YmEzNzUxMTQwNGMyLzEvQ3hXOUNNaGt4VnJheUtZTmdTbHJhSE9lT1FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy
LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5TXQD
BAC5TXYwDQYJKoZIhvcNAQELBQADggEBALP5P33zvZAZp/k9ZhJKFuC2wKABXO1M
1Mx11pypWupOVaiGAC4zArdYW6ADiOnEvAg3iadl5RY+eb1MjPyGNVnhQsb+00Ms
8FfWgr0h5lYb/cymvtw4Axqa3oeCewpVqei+mRlMcMeDG3FB06h07HdVPpf7wrqJ
2a3je46pjKVRpuOe1RVX4gaYMR9enBOwcVBPlSIhkeZQcpWNLH4MNNSFon1hosTR
tVX9ib1MOyUEartbSndL4/BJ1xKfR00Ke9/CHmE1X4/h4yn6X3o3pacZFfwRURfY
euLTp/BimZEyHNOl8JZKQWeAQmdxRvmH3Sn/aP80mwz/YxNg63fUt+A=
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:50:01 2025 by rpki-client