Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/o6HBbNZybM1pciBKfo5UVkJuRLw.roa
File: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (raw, json)
Hash identifier: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=
Subject key identifier: A3:A1:C1:6C:D6:72:6C:CD:69:72:20:4A:7E:8E:54:56:42:6E:44:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 0194221FD0DC7337C3C84FE73EC40DE8613B
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/o6HBbNZybM1pciBKfo5UVkJuRLw.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20912
IP address blocks: 77.39.192.0/20 maxlen: 24
77.39.216.0/22 maxlen: 24
85.119.176.0/21 maxlen: 24
185.109.188.0/22 maxlen: 24
212.66.96.0/19 maxlen: 24
2001:40d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d0:dc:73:37:c3:c8:4f:e7:3e:c4:0d:e8:61:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3a1c16cd6726ccd6972204a7e8e5456426e44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:ea:d7:a2:38:f1:eb:8e:9a:04:70:71:8c:
17:fc:ef:bf:b3:15:9f:19:fe:99:0b:c3:82:88:53:
44:2f:c9:37:42:50:07:e7:9a:fd:5f:e1:99:ff:e6:
27:4e:a4:5f:15:36:18:0e:83:df:8b:66:4a:77:94:
da:2f:87:e6:4b:d6:64:9e:8f:23:3d:7b:32:78:f9:
43:0c:d6:6a:1d:12:e0:fc:b5:46:a2:fa:72:06:31:
5c:00:22:3e:76:a8:d5:e8:95:0e:be:e1:45:8f:7a:
d7:3f:12:57:2b:29:52:5f:21:89:76:b2:ee:fa:7f:
be:d5:71:9c:cf:21:c7:6e:bc:e7:16:65:d8:59:ea:
8a:b9:ec:78:25:b2:db:12:da:1b:4c:cf:fa:70:b8:
ec:17:dc:bd:cf:de:74:da:33:5e:01:ea:d3:f2:6f:
9d:58:73:f3:c5:a4:8a:50:d8:17:a2:62:30:a2:9a:
2f:4d:29:df:3e:15:6c:06:87:4e:b8:0c:3c:44:f9:
27:8f:73:0d:63:58:b4:04:96:88:f6:44:0f:fc:d0:
ba:42:8a:7b:44:ae:89:7f:f0:b7:db:ab:03:2a:26:
e8:44:5c:da:6f:f0:24:38:f2:e2:82:8e:9d:f9:78:
9c:ee:90:ac:34:67:f1:48:f4:7e:10:3c:44:1b:9a:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:C1:6C:D6:72:6C:CD:69:72:20:4A:7E:8E:54:56:42:6E:44:BC
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/o6HBbNZybM1pciBKfo5UVkJuRLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.39.192.0/20
77.39.216.0/22
85.119.176.0/21
185.109.188.0/22
212.66.96.0/19
IPv6:
2001:40d0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:29:3c:30:95:67:e5:d9:49:b0:8c:fa:ba:97:40:68:41:2e:
0a:d6:3d:ce:54:70:6e:42:1d:fe:ee:12:d5:31:ed:89:ca:c6:
c3:fb:04:c6:46:d7:d7:b2:fa:11:4f:42:f6:ca:65:49:87:a6:
23:13:d9:9c:38:56:a7:c7:9b:3c:64:f0:43:f9:e2:6a:69:35:
58:c3:50:9b:89:a0:9b:7d:0b:eb:3f:a9:11:23:19:a7:4f:25:
9c:6e:75:08:85:3b:2b:cd:fe:39:b1:6d:74:82:7f:d2:cf:52:
0f:f7:f4:58:36:5e:7f:af:97:61:8e:02:7c:43:2e:d0:99:ad:
7f:60:d1:9b:d3:45:cc:76:9d:5b:56:1e:a1:9d:2b:e0:e9:a9:
77:d1:21:7b:6d:eb:49:f6:35:8f:6c:e3:81:78:96:4e:4c:d4:
79:9e:fe:b4:97:d5:fb:f5:9a:58:b6:40:19:d2:4b:0f:f7:7b:
dc:a0:2c:34:bd:0d:f8:c2:2d:11:ea:6d:32:f4:6c:12:aa:48:
06:a9:6b:48:0f:02:59:04:2d:20:84:ee:2a:cc:99:e5:b3:ee:
09:2c:d4:e9:90:fc:95:ec:37:06:a9:d3:b0:de:f7:26:d7:7f:
29:1c:31:45:91:82:de:cb:47:ca:23:16:b8:5a:b3:0a:a0:3a:
da:8e:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:03 2025 by rpki-client