Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/78Z2QttRPf2PQbYBlHDkWkLNG70.roa
File: 78Z2QttRPf2PQbYBlHDkWkLNG70.roa (raw, json)
Hash identifier: 38hOujFj9smz92xQz1+Jp4WhQ5I/HQHBs06oIGiXUzg=
Subject key identifier: EF:C6:76:42:DB:51:3D:FD:8F:41:B6:01:94:70:E4:5A:42:CD:1B:BD
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01956057787D46848DE6E2CA9A5A8641936E
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/78Z2QttRPf2PQbYBlHDkWkLNG70.roa
Signing time: Tue 04 Mar 2025 08:48:19 +0000
ROA not before: Tue 04 Mar 2025 08:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 37.44.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:57:78:7d:46:84:8d:e6:e2:ca:9a:5a:86:41:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 4 08:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efc67642db513dfd8f41b6019470e45a42cd1bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:e9:57:c9:5d:67:b3:1f:d8:3d:c9:05:60:
7b:01:d5:3a:13:56:f4:33:11:fc:e9:f9:3d:16:1b:
96:bf:db:09:3e:b0:49:1c:52:f5:79:ea:51:a0:fd:
0e:d7:cd:cc:e0:67:6d:9a:86:34:1d:ce:aa:e9:ee:
57:84:b7:85:c2:7d:d4:64:24:b6:6b:f1:22:e5:4b:
3a:24:fd:c8:a5:ca:a1:76:11:0a:e7:fa:c0:e3:50:
fb:12:25:7c:71:2d:4f:8a:62:cc:a9:de:17:32:e5:
d5:fd:72:7d:9f:48:58:06:5c:25:3e:52:2e:36:94:
d7:69:de:fb:2a:25:d1:4e:c8:ec:73:6d:7a:15:54:
b5:cf:8e:d5:6a:b0:31:9a:fc:bc:3e:1e:ff:65:11:
df:28:f3:e4:5b:3b:a5:0a:d6:d6:a1:f1:cd:41:98:
f5:34:94:73:7b:a9:40:54:1a:a7:4a:50:0f:43:d9:
98:29:e6:b8:d0:ac:c6:89:a2:07:3f:ee:12:14:84:
31:32:c7:9b:2c:db:c2:52:43:50:4a:98:cc:b0:76:
e6:62:83:c6:be:77:6d:fe:36:e0:00:12:2d:64:b8:
97:4f:10:21:c0:f1:02:35:b9:30:ba:8a:9d:ca:61:
12:08:b6:87:08:3d:9d:26:e2:9d:6f:57:e8:23:68:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:76:42:DB:51:3D:FD:8F:41:B6:01:94:70:E4:5A:42:CD:1B:BD
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/78Z2QttRPf2PQbYBlHDkWkLNG70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.229.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5c:1c:7e:1b:8c:0a:aa:be:ac:2d:1d:05:c2:d7:1b:00:2f:
54:0d:d3:25:d1:c7:45:2a:29:bb:99:b9:58:c1:4f:32:54:86:
93:c3:54:66:66:c1:b9:6e:22:ec:f5:a8:f9:0a:da:48:cb:d3:
52:57:d2:ac:5b:97:cf:0c:dc:f2:a5:98:a6:f8:3a:ed:c1:f7:
92:1d:61:6e:bb:ad:62:a5:63:4d:80:66:91:99:b0:d1:9d:0b:
6f:4c:9f:b8:c4:38:bf:43:30:ac:07:fe:09:b8:98:5f:67:07:
98:1a:19:77:29:ba:08:e1:30:2c:99:58:4a:95:84:73:f3:2d:
9f:3b:45:5a:38:d3:b5:68:ab:ca:f5:81:5c:68:6f:30:49:7b:
cb:48:a7:6a:27:72:d2:ee:21:b8:34:ef:1f:35:2d:cf:8d:9f:
bd:ea:9e:92:87:4c:65:5a:68:d4:91:f1:22:5e:5e:89:52:78:
7d:91:b3:fc:0f:5b:41:ee:75:da:7c:3b:8b:95:9e:fc:e7:4b:
b2:19:95:6a:19:2c:2d:e4:4d:9b:53:25:5f:12:98:08:a5:1f:
47:c6:63:79:89:46:5b:e9:73:0d:e3:39:22:56:25:b7:d7:6e:
f6:10:19:af:f0:b0:00:f8:da:0a:97:e9:2b:df:c8:32:a9:20:
68:99:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:54:16 2025 by rpki-client