Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa
File: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (raw, json)
Hash identifier: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=
Subject key identifier: FB:C3:61:18:EC:65:9E:A1:10:C7:08:BB:5A:42:8F:14:47:F9:1A:75
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA54C0C3B421F273469938216FD0C6
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59962
IP address blocks: 87.107.56.0/21 maxlen: 24
87.107.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:54:c0:c3:b4:21:f2:73:46:99:38:21:6f:d0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbc36118ec659ea110c708bb5a428f1447f91a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:8e:e3:01:02:f9:90:7e:fd:64:cd:9e:6a:
d6:7e:6c:69:e0:63:af:a9:32:84:03:04:32:22:ef:
da:ef:44:7d:ad:c2:92:2d:b6:e9:b4:d1:c9:f7:8c:
3c:6f:1b:4d:0c:b7:bb:63:ee:6d:1f:90:c0:fb:a4:
f9:44:02:e1:4d:31:c7:da:c1:2a:dc:83:1a:f6:82:
b3:e0:af:79:1b:67:cd:f1:8a:58:d7:d2:28:69:2b:
ac:37:ba:31:12:1d:3d:d4:2b:5a:08:aa:e3:a9:28:
69:35:32:74:76:9e:37:17:c5:12:cb:30:01:63:a5:
a8:49:0b:97:39:19:27:f4:01:26:72:41:9b:5d:80:
e0:63:21:51:8f:7d:ba:12:f1:30:19:af:60:99:68:
89:c2:9f:db:d5:04:d1:50:30:62:75:6e:42:98:b2:
e5:8f:b1:67:26:c1:23:a3:a1:04:8d:9c:53:e4:da:
49:5f:52:f1:1a:bd:b4:f1:99:a4:1e:9e:b3:9f:be:
83:97:ce:f4:b6:d7:fd:9c:6e:6b:10:6f:d9:c1:1f:
73:e4:10:de:e1:2e:dc:dc:e3:c1:af:4b:2d:af:6c:
dc:09:f1:50:c9:9d:9c:04:57:b5:0b:c6:4b:f0:13:
95:20:96:01:19:b7:57:c3:59:3c:1f:75:7e:f7:c2:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:61:18:EC:65:9E:A1:10:C7:08:BB:5A:42:8F:14:47:F9:1A:75
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.56.0/21
87.107.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:3d:0d:40:81:67:1b:9a:75:6a:e4:bd:29:9d:b1:b1:88:ab:
4d:55:c8:e5:8b:1a:ce:b6:f7:82:51:06:d6:6f:62:64:1d:34:
7b:9c:bb:2e:c8:ee:8b:9d:15:68:17:24:c4:9a:ed:f0:2e:63:
e6:41:13:0e:b3:6b:14:49:c5:3a:32:8c:3b:77:d5:e4:8f:00:
11:aa:6a:63:d0:59:cc:e8:20:f4:50:4c:10:64:06:bd:63:6f:
88:b1:b3:68:f3:52:ee:01:81:e8:aa:c7:5a:4e:77:63:89:7e:
82:2e:c0:61:74:5f:c3:73:e9:e9:8c:68:4e:a9:37:c2:41:c9:
ed:a6:72:4c:97:93:71:22:88:08:ea:07:0c:3f:5d:9b:18:ea:
c0:95:78:df:74:19:aa:2d:38:8f:2e:f3:a1:cc:b9:17:21:7a:
74:94:84:5c:5f:5a:0c:98:1a:91:f4:db:bd:35:27:c5:f8:df:
13:0a:5a:ad:36:09:21:5e:59:91:b7:a9:3f:fb:85:ed:5f:3b:
5c:7d:70:f6:d9:45:84:76:42:6b:24:c9:78:ac:cd:06:1c:80:
16:b5:66:61:ba:6e:80:4d:e9:1d:06:d6:ca:5c:4c:23:23:f6:
ee:75:6f:fb:6a:d6:f4:ac:e3:bd:d5:f5:cc:8c:68:c0:65:b1:
e8:32:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:41 2025 by rpki-client