Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/77c7LwFJ33uk1xUKt1FAfMJrE9U.roa
File: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (raw, json)
Hash identifier: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=
Subject key identifier: EF:B7:3B:2F:01:49:DF:7B:A4:D7:15:0A:B7:51:40:7C:C2:6B:13:D5
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 019425FDCC843793C1A9C7B7B7B53C89EA14
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/77c7LwFJ33uk1xUKt1FAfMJrE9U.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20756
IP address blocks: 81.92.80.0/20 maxlen: 20
81.92.84.0/23 maxlen: 23
81.92.88.0/23 maxlen: 23
81.92.90.0/23 maxlen: 23
81.92.94.0/23 maxlen: 23
185.65.56.0/22 maxlen: 22
185.65.56.0/23 maxlen: 23
185.65.58.0/23 maxlen: 23
2a01:c8::/32 maxlen: 32
2a01:c8:100::/40 maxlen: 40
2a01:c8:200::/40 maxlen: 40
2a01:c8:300::/40 maxlen: 40
2a01:c8:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cc:84:37:93:c1:a9:c7:b7:b7:b5:3c:89:ea:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efb73b2f0149df7ba4d7150ab751407cc26b13d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:aa:74:de:c9:7f:1b:85:97:11:a7:63:73:
d1:a7:69:63:59:95:d3:d6:37:aa:6a:a3:9c:d7:2e:
83:59:53:da:32:75:3a:b7:84:4d:38:55:6f:48:c5:
f1:db:11:1a:c0:84:1f:07:29:fa:75:2b:ac:dd:ed:
81:08:e4:d6:78:ca:95:f0:1d:02:50:ee:87:8f:be:
b7:d5:10:f1:0c:06:de:aa:59:5e:fc:93:2a:89:bc:
e0:2c:26:c1:2f:49:f5:dd:3b:bd:dd:a7:31:65:09:
be:ed:6c:91:13:36:e7:ca:35:8b:d2:60:e7:b7:b1:
aa:e6:eb:6a:a1:98:03:f5:55:c6:01:16:de:4a:3e:
6d:54:1b:aa:fb:c4:d5:e0:98:e4:a8:43:76:56:c9:
14:ea:88:b3:fa:6a:a8:57:83:49:68:5a:09:4e:9b:
71:c9:0c:13:9d:48:8e:7e:77:5c:ea:cc:81:f0:20:
5f:b6:5f:49:d8:95:70:e2:f4:89:51:9c:7f:e8:63:
ca:5f:fe:9a:03:cf:52:3a:8f:37:13:f4:d2:99:93:
c2:68:9c:a9:c0:b1:f7:d8:cd:06:d9:08:ae:4e:27:
6d:93:ee:50:54:55:71:62:f8:64:fd:a3:72:7c:0e:
c3:ea:22:c9:c3:30:80:0f:1d:38:8d:36:7c:2c:c1:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:3B:2F:01:49:DF:7B:A4:D7:15:0A:B7:51:40:7C:C2:6B:13:D5
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/77c7LwFJ33uk1xUKt1FAfMJrE9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.80.0/20
185.65.56.0/22
IPv6:
2a01:c8::/32
Signature Algorithm: sha256WithRSAEncryption
27:ed:5a:e9:ca:39:03:c8:60:fb:5b:14:49:8d:4e:2b:fb:08:
a4:e9:72:c9:96:40:17:f0:50:6a:30:9f:7b:86:58:9f:ea:e7:
8b:fc:52:43:97:f4:2e:e4:5a:f1:70:f4:96:b8:98:54:97:7a:
7e:c2:5c:5f:e6:69:1c:2b:cf:6a:ed:62:79:3f:01:9f:44:47:
9a:96:aa:57:9d:11:c5:ed:56:b6:c1:3a:98:45:1b:7f:73:36:
51:a4:b9:01:81:b0:e1:2e:34:d0:19:1a:04:19:4e:7b:46:a5:
d9:cb:6b:10:90:b1:09:d8:27:73:a5:57:fd:fc:36:35:b1:e6:
d0:89:cd:64:6a:7e:10:6b:31:3c:a8:c2:5c:94:e4:13:2a:7d:
36:69:e0:07:97:94:a6:2c:44:6b:00:7f:6d:0b:85:de:f3:a4:
a6:83:3e:bb:b5:a3:9f:67:ea:ef:d9:25:10:9d:ff:97:ee:ea:
82:30:19:d7:83:33:04:a5:32:91:b3:a3:c7:63:2c:e6:f2:87:
4c:64:e6:b6:65:91:e3:e0:01:27:f8:8e:80:da:89:cd:03:36:
1f:66:53:f4:53:71:85:13:bc:db:11:f4:2c:0f:b2:0a:44:11:
5d:71:e6:38:76:d7:c8:76:85:4a:a0:8a:5a:45:c9:8f:83:82:
26:56:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:06:45 2025 by rpki-client