Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/sKY5eWcuMLtnQDCwYINlgWrJYiU.roa
File: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (raw, json)
Hash identifier: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=
Subject key identifier: B0:A6:39:79:67:2E:30:BB:67:40:30:B0:60:83:65:81:6A:C9:62:25
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 0194266B97181BEB3261BBCB486B5376FB15
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/sKY5eWcuMLtnQDCwYINlgWrJYiU.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12637
IP address blocks: 77.83.64.0/22 maxlen: 24
80.241.140.0/22 maxlen: 24
2a05:be80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:97:18:1b:eb:32:61:bb:cb:48:6b:53:76:fb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a63979672e30bb674030b0608365816ac96225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:61:87:f5:af:37:73:89:37:9f:0e:06:38:fb:
59:c7:54:a8:a1:92:82:e0:92:63:e7:69:cf:12:16:
71:63:e4:6b:58:11:2f:5c:fd:6f:2d:84:3d:36:1b:
5d:c4:67:70:8f:25:50:25:0d:94:50:a5:8a:18:a6:
e3:3e:3b:ac:43:89:57:2d:80:06:53:c8:2e:0f:85:
15:06:aa:df:cd:6d:25:ab:26:43:54:f3:a2:81:67:
d9:e5:78:be:33:67:1b:94:32:d4:1d:2d:25:f7:bb:
a7:bd:58:5f:da:d4:2d:8c:82:6e:c6:e3:dc:d1:e7:
e3:2c:aa:cb:a9:2d:9b:77:41:4f:16:71:05:d0:5e:
fe:a7:11:04:79:d0:19:52:67:2e:76:42:5b:de:36:
b4:45:21:86:c9:af:2c:a3:31:b1:c3:46:39:e4:b7:
b8:52:45:c8:8e:af:b4:19:f6:d5:d0:39:b7:f8:c3:
43:1b:21:f4:48:41:5b:81:32:d7:4c:77:77:da:fe:
8b:75:8a:15:44:66:21:9b:b2:4f:60:62:c8:2e:08:
91:8b:96:2c:cb:ae:56:cb:2d:d8:69:d3:98:59:2d:
92:bd:41:4e:a2:74:29:3e:85:ba:6f:aa:05:49:27:
6b:22:6b:66:2a:04:cb:d9:74:15:38:e0:17:4e:d8:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A6:39:79:67:2E:30:BB:67:40:30:B0:60:83:65:81:6A:C9:62:25
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/sKY5eWcuMLtnQDCwYINlgWrJYiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.64.0/22
80.241.140.0/22
IPv6:
2a05:be80::/29
Signature Algorithm: sha256WithRSAEncryption
32:93:03:6f:08:69:20:b7:a4:b7:1b:71:a5:35:77:66:99:5d:
36:e7:cc:af:12:a3:68:42:d0:ce:40:af:4c:6a:29:b5:a6:ba:
d5:7f:a4:bb:3d:38:26:f5:26:d4:79:c3:b7:c5:f3:34:78:c1:
a5:2b:d0:ed:3d:2c:f5:e5:90:66:3e:bd:6b:8f:45:1e:da:0a:
37:3e:ac:d4:0c:73:0b:0e:c0:d7:8d:11:52:8a:53:97:46:c9:
67:50:ff:06:eb:6c:29:de:df:f3:64:32:4e:d3:57:3b:c2:c1:
8c:bd:ad:ed:fe:e6:01:6a:45:a4:bd:45:73:aa:4c:f0:e3:e6:
56:42:ca:ee:87:ad:d5:7d:e7:e5:35:50:94:41:97:f8:70:c4:
6e:1d:23:2c:01:85:cd:fd:18:6a:f6:fc:cc:4b:9b:72:3f:5d:
7e:ba:b5:0f:ee:83:c2:f0:bd:88:fe:33:f2:f4:66:cb:56:05:
92:8c:20:d7:e7:8e:b2:b1:03:77:64:68:a0:14:41:79:a3:82:
1b:18:cc:83:8d:37:c8:b1:be:9d:d7:4d:45:24:38:48:e9:90:
9b:d9:64:03:e3:6e:e4:85:82:3b:55:fa:02:47:48:59:49:e9:
e9:bb:6a:4f:7e:c8:62:37:8d:d1:78:43:08:08:ab:dc:e4:af:
29:8b:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:58 2025 by rpki-client