Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/j9h-3RCYA4GR973gJlvT0ea106k.roa
File: j9h-3RCYA4GR973gJlvT0ea106k.roa (raw, json)
Hash identifier: lz+NUP8jcmTPiXhlt9xOtXKaOts84TsRJsY+TEWUVuU=
Subject key identifier: 8F:D8:7E:DD:10:98:03:81:91:F7:BD:E0:26:5B:D3:D1:E6:B5:D3:A9
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019426D99943CEE25561D78C88359B873B28
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/j9h-3RCYA4GR973gJlvT0ea106k.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 77.105.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:99:43:ce:e2:55:61:d7:8c:88:35:9b:87:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fd87edd1098038191f7bde0265bd3d1e6b5d3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:ec:85:00:09:3b:10:af:f3:f8:53:aa:f3:
ee:48:7b:c7:d2:0f:a6:92:5b:66:05:32:af:47:59:
b2:28:66:09:3c:b0:0d:40:7b:04:3e:58:4c:8e:01:
71:9e:61:f5:1c:9f:b2:87:5f:48:ae:a1:56:64:60:
b1:12:58:de:85:6f:e8:aa:53:f2:9e:72:da:c7:9d:
f3:60:40:6b:28:d0:34:e1:76:a8:e6:6e:20:48:ad:
8a:28:d5:35:3b:4a:8d:19:0a:1f:47:a8:15:16:3b:
07:5b:5e:ba:f0:23:05:82:39:c4:2d:73:ec:bb:f1:
8e:db:7d:a1:6d:fb:0c:9a:0b:3f:27:5b:b1:a1:e7:
30:c9:25:24:70:73:dd:b7:c3:60:1e:1e:45:f4:42:
10:34:ed:4d:a1:fe:6a:da:43:6f:22:09:e5:5f:74:
a0:0b:72:45:96:d9:84:8f:4f:f0:00:b9:cc:39:fa:
1c:57:fd:ec:87:ad:d1:c8:93:61:ea:65:d7:f5:cd:
0e:23:12:bd:e9:b5:78:a0:e1:6c:ff:2d:52:3f:73:
b5:3e:09:0f:f6:7a:6c:4e:75:9e:31:2a:90:12:2b:
10:a3:0b:81:0a:c4:1c:69:54:11:a7:34:87:76:e5:
0b:8e:ec:8b:6f:7b:59:eb:24:93:d0:42:67:23:66:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D8:7E:DD:10:98:03:81:91:F7:BD:E0:26:5B:D3:D1:E6:B5:D3:A9
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/j9h-3RCYA4GR973gJlvT0ea106k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.163.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:91:a3:d0:78:ad:b7:15:69:39:ca:06:78:08:5c:9e:e3:6a:
d0:e0:de:85:05:4d:10:90:ff:97:f1:be:d9:10:b6:fc:d8:c5:
e5:e2:1d:f1:29:70:5a:b2:f2:83:53:eb:68:50:0f:a5:fb:0d:
ad:77:29:cb:59:ab:6a:c1:be:ed:14:f5:d5:7d:32:f3:01:e3:
04:94:bd:f5:f3:13:89:3e:a2:6d:b9:64:05:54:31:34:c3:e0:
57:b0:64:f0:a2:11:25:f5:b5:e8:0b:e8:6c:78:4b:a9:e7:e2:
c4:33:63:00:3c:73:c8:50:ff:44:ff:8d:95:88:34:bd:ab:29:
dd:e2:2e:e8:2b:5f:59:42:55:b4:ec:66:63:c0:6a:5a:cf:fe:
f9:5c:97:7c:ed:f3:f3:77:3d:9f:61:d9:98:df:0d:e3:56:87:
9a:a5:e5:90:f3:ff:07:80:91:a2:c2:ed:00:1a:d5:0a:31:fe:
47:69:52:ab:f1:37:ab:ec:22:3b:01:01:0c:a7:ea:28:4c:27:
1d:b5:f1:12:cb:f8:1e:2d:a6:1c:91:b2:91:d5:7d:4b:d7:20:
bc:5d:5d:d7:69:c3:69:e4:94:d6:6f:50:14:77:7e:74:ef:60:
76:ea:cc:73:1d:89:55:bc:76:f2:3b:72:00:da:4d:6e:a3:91:
2e:43:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:07:02 2025 by rpki-client