Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/EZnxg9to9tj_CGFbyqX0_Anjt-g.roa
File: EZnxg9to9tj_CGFbyqX0_Anjt-g.roa (raw, json)
Hash identifier: bS+3tO9zhYQpPnZP8Cd0s84+g/0K57qgcaxrjbHpLjM=
Subject key identifier: 11:99:F1:83:DB:68:F6:D8:FF:08:61:5B:CA:A5:F4:FC:09:E3:B7:E8
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D654E263439F41774C4537ECDB72D3
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/EZnxg9to9tj_CGFbyqX0_Anjt-g.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
121.127.48.0/21 maxlen: 24
168.75.224.0/20 maxlen: 24
176.222.48.0/22 maxlen: 24
194.149.76.0/22 maxlen: 24
198.14.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:54:e2:63:43:9f:41:77:4c:45:37:ec:db:72:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1199f183db68f6d8ff08615bcaa5f4fc09e3b7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:73:34:70:b6:2c:ca:12:6f:68:79:2d:0d:
a7:76:b2:1e:e1:0a:29:a8:ca:21:54:42:e2:bf:1e:
b8:17:69:a7:9e:7e:cc:6f:17:3e:d5:ec:b1:34:5e:
29:a7:02:fb:85:12:ed:05:63:32:48:1d:63:a4:8f:
96:e3:0f:35:ce:06:6e:be:bf:ab:cb:69:b9:63:a1:
ad:98:d1:81:8f:86:49:13:42:d0:b7:b5:78:26:0c:
4f:58:c5:ed:e9:26:ef:16:0c:74:6b:f9:e3:08:a5:
ac:1c:d6:b2:04:e3:f5:6a:bf:47:f2:1d:2b:78:54:
1e:e0:5d:fb:ae:16:e7:0d:6a:b2:72:d2:72:76:bf:
3d:26:58:f2:a4:1b:26:5c:2b:26:c0:dd:8e:21:9b:
07:0a:94:46:ee:73:a6:5d:58:a7:fe:b5:cd:d7:06:
33:51:c3:bc:09:60:70:c7:5a:5b:31:42:87:ff:10:
26:47:77:3f:5d:d2:90:0a:5e:c1:92:d6:6d:90:1d:
c8:81:b3:33:0b:2d:7f:22:5d:57:30:09:09:ed:ca:
66:bd:ea:53:d1:7b:a1:84:9f:81:c1:68:ba:85:de:
9f:f4:6d:af:8a:6c:78:11:77:d3:a5:7e:8d:20:6f:
ad:ec:1d:64:02:2d:5f:3f:b1:a1:0f:aa:78:53:35:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:F1:83:DB:68:F6:D8:FF:08:61:5B:CA:A5:F4:FC:09:E3:B7:E8
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/EZnxg9to9tj_CGFbyqX0_Anjt-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.200.0/23
79.139.64.0/23
121.127.48.0/21
168.75.224.0/20
176.222.48.0/22
194.149.76.0/22
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:75:68:ae:c3:63:30:f6:80:59:9b:6b:ec:b2:0a:b7:a1:c2:
0c:cb:88:80:56:69:6d:7b:43:79:1d:14:16:0a:a6:17:a0:83:
34:2e:33:ba:5b:7a:12:21:95:ce:2c:1d:98:71:76:9f:44:ae:
1d:a0:c3:67:1c:76:b3:4b:cb:fe:b9:dc:f4:f7:0d:46:17:e4:
d0:31:7e:c6:4e:73:2e:6d:a5:af:da:0f:05:32:3b:05:cc:c1:
a2:53:21:d3:d8:d3:78:2f:cd:04:70:b2:2d:2e:5c:15:8e:38:
b4:aa:62:4a:58:19:d9:ad:66:51:dc:df:7c:e8:d6:4e:75:0b:
37:c3:9d:df:c3:8f:80:c7:ae:44:a5:b9:04:5e:ef:17:83:4a:
be:b7:13:5f:5e:6c:b0:f4:5a:a5:96:03:c8:ca:ac:cf:34:cf:
e6:b6:44:fe:21:e7:fa:3d:a2:0e:62:c1:1f:dd:63:fb:9a:0d:
8a:cf:21:ef:f3:7e:56:be:45:c8:9e:a9:21:2f:f7:fa:71:2c:
fa:ec:f5:17:58:39:a2:ae:83:be:8e:cc:8b:3a:60:70:b9:65:
65:b1:4b:e6:a7:d4:47:e2:93:50:8a:4b:7f:5f:e6:27:16:57:
73:cc:98:43:aa:c5:32:0b:e4:98:59:ef:4e:96:2b:e7:b9:55:
3a:e0:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:48:54 2025 by rpki-client