Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/gpd7OTySBF88_ieGeC5xgwx4qHQ.roa
File: gpd7OTySBF88_ieGeC5xgwx4qHQ.roa (raw, json)
Hash identifier: RdN9I6MEx1szFl28V6LeCBYwwmv66RX788uJxkiR1Mc=
Subject key identifier: 82:97:7B:39:3C:92:04:5F:3C:FE:27:86:78:2E:71:83:0C:78:A8:74
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019426D99A00D224E8F83BABC300E0564A63
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/gpd7OTySBF88_ieGeC5xgwx4qHQ.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 77.105.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9a:00:d2:24:e8:f8:3b:ab:c3:00:e0:56:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82977b393c92045f3cfe2786782e71830c78a874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:22:d8:db:a7:07:6e:4e:07:26:16:0f:6e:
bd:cc:d4:a9:db:81:47:db:6a:39:da:71:a9:16:7c:
f3:51:8a:21:96:6e:64:04:5f:2f:3a:11:6a:57:d1:
ba:71:fa:83:d9:ac:4b:24:0d:e3:80:23:60:23:82:
4d:15:09:0f:73:a5:83:45:7e:1d:ea:ce:de:e8:e4:
2c:8d:6a:f3:0d:d8:71:ac:fc:c2:7b:4c:8e:f5:e2:
39:7f:7b:38:31:89:d8:cf:5d:d6:a6:e9:68:d2:3d:
04:d5:92:d6:cf:04:61:11:16:83:42:64:48:ed:ff:
0e:78:d3:a2:b5:01:f9:47:bd:9c:6a:25:87:2f:ba:
c4:82:95:7e:c4:97:09:5b:1a:c2:94:0d:8a:3a:d0:
10:91:5a:25:19:2f:e4:a8:71:af:52:05:2d:1d:ef:
a6:77:88:3c:64:5e:74:3e:c7:52:16:61:d3:77:48:
21:83:75:05:8b:31:e6:6c:a6:75:4e:3a:6e:16:38:
47:db:33:26:60:d6:e3:52:d8:41:85:9a:0f:65:fd:
a6:e8:5a:65:22:e8:f4:3f:9a:99:8d:ff:84:35:43:
b1:f0:7f:7f:ab:f0:c1:fc:06:b7:f8:d2:ec:8e:4c:
63:d9:e0:dc:68:c2:44:f1:c4:61:a8:26:b3:b8:fc:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:97:7B:39:3C:92:04:5F:3C:FE:27:86:78:2E:71:83:0C:78:A8:74
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/gpd7OTySBF88_ieGeC5xgwx4qHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.164.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:dc:51:69:f8:0b:da:e6:e5:ef:80:5d:4a:1b:3f:1d:b6:c8:
c8:55:03:e4:26:b3:28:f6:7f:f6:fc:5f:3d:5e:04:ab:8f:af:
28:06:ca:94:b5:34:76:2d:16:0d:47:99:d4:73:34:8e:14:c9:
53:0e:95:67:5e:9d:49:fd:09:7c:12:04:74:d2:5b:52:a8:d4:
85:f5:dc:4e:5c:97:8e:3d:76:a6:d2:57:64:cb:49:27:94:30:
b8:6c:6e:e8:66:42:da:53:ea:06:e8:5b:fb:ac:df:07:c4:dd:
1c:b5:bb:cd:8b:63:f5:7b:92:2b:88:c8:0c:6b:fc:d9:50:74:
1c:51:d4:e0:26:c5:a0:ce:c4:72:24:59:11:a0:83:08:81:2a:
d5:82:15:2a:fb:22:c2:90:ce:a1:5d:b6:26:9a:b2:2e:8a:91:
8a:70:34:8d:58:51:c9:18:a9:cf:24:df:5e:7e:4a:41:bc:c9:
7d:07:8a:fb:f5:80:f0:39:c7:8b:f9:9a:a8:8b:5e:ce:1f:4d:
f2:d2:82:a0:4d:14:ea:fc:1a:13:50:f7:1b:8b:61:f2:c5:9f:
46:c6:52:ca:4a:83:f1:0b:e4:d2:f0:c1:ee:cf:c5:07:60:27:
99:0e:75:bb:1f:be:18:99:06:69:57:c2:fd:97:45:e5:79:f3:
b0:79:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:40:46 2025 by rpki-client